Privacy Statement

Metastreet Ltd is strongly committed to protecting personal data. This privacy statement describes why and how we collect and use personal data and provides information about individuals’ rights. It applies to personal data provided to us, both by individuals themselves or by others.

Personal data is any information relating to an identified or identifiable living person. Metastreet Ltd processes personal data for numerous purposes, and the means of collection, lawful basis of processing, use, disclosure, and retention periods for each purpose may differ.

When collecting and using personal data, our policy is to be transparent about why and how we process personal data.

Our processing activities

• Business contacts (and individuals associated with our Business clients)
• Individuals who use our applications
• Individuals whose personal data we obtain in connection with providing professional services to our clients
• Others who get in touch with us
• Personnel (partners, staff and contractors)
• Visitors to our offices
• Visitors to our website or our App

We take the security of all the data we hold very seriously. We have a framework of policies, procedures and training in place covering data protection, confidentiality and security and regularly review the appropriateness of the measures we have in place to keep the data we hold secure.

When and how we share personal data and locations of processing

We will only share personal data with others when we are legally permitted to do so. When we share data with others, we put contractual arrangements and security mechanisms in place as appropriate to protect the data and to comply with our data protection, confidentiality and security standards.

Personal data held by us

Our business contacts are visible to and used by some authorised Metastreet Ltd employees

Third party organisations that provide applications or IT services to us

We use third parties to support us in providing our services and to help provide, run and manage our business. For example, providers of information technology, cloud-based software as a service providers, website hosting and management. The servers powering and facilitating that cloud infrastructure are located in secure data centres within the EU and USA. The provider in the USA is certified under the EU-US Privacy Shield Framework.

Our clients

Where we need to process personal data to provide professional services to our clients, we may share personal data in our deliverables (such as the reports we create).

We may also share data to law enforcement or other government and regulatory agencies or to other third parties as required by, and in accordance with, applicable law or regulation.

Children

Metastreet do not intend to collect information from anyone under the age of 18. If you are under 18, do not enter information on this Website or App.

How long to we retain information

We'll retain your personal information for no longer than is necessary.

Changes to this privacy statement

We recognise that transparency is an ongoing responsibility, so we will keep this privacy statement under regular review.

This privacy statement was last updated on 1 March 2019

Data controller and contact information

We are generally data controllers for the personal data we process in managing our employees, business relationships and client lists. We are also data processors on behalf of our clients. If you have any questions about this privacy statement or how and why we process personal data, please contact us at:

• Metastreet Ltd
• 6-8 Cole Street
• London
• SE1 4YH
• Email: team@metastreet.co.uk

Your rights

Under the GDPR, you have various rights in relation to your Personal Information, such as the rights of access, rectification, restriction, objection, portability, and erasure. Please note that these rights are subject to certain limitations set forth in applicable law.

To exercise these rights, please contact us: team@metastreet.co.uk. We will seek to deal with your request in accordance with the requirements of applicable laws. Please note that we may keep a record of your communications to help us resolve any issues you raise

Your right of access to personal data

You have the right to obtain confirmation as to whether we process personal data about you, receive a copy of your personal data held by us as a controller and obtain certain other information about how and why we process your personal data.

Your right to rectification / amendment of personal data

You have the right to request for your personal data to be amended or rectified where it is inaccurate (for example, if you change your name or address) and to have incomplete personal data completed.

Your right to erasure / right to be forgotten

You have the right to obtain deletion of your personal data in the following cases:

• the personal data are no longer necessary in relation to the purposes for which they were collected and processed;
• our legal grounds for processing is consent, you withdraw consent and we have no other lawful basis for the processing;
• our legal grounds for processing is that the processing is necessary for legitimate interests pursued by us or a third party, you object to our processing and we do not have overriding legitimate grounds;
• you object to our processing for direct marketing purposes;
• your personal data have been unlawfully processed; or
• your personal data must be erased to comply with a legal obligation to which we are subject.

Your right to restrict processing

You have the right to restrict our processing of your personal data in the following cases:

• for a period enabling us to verify the accuracy of your personal data where you have contested the accuracy of the personal data;
• your personal data have been unlawfully processed and you request restriction of processing instead of deletion;
• your personal data are no longer necessary in relation to the purposes for which they were collected and processed but the personal data are required by you to establish, exercise or defend legal claims; or
• for a period enabling us to verify whether the legitimate grounds relied on by us override your interests where you have objected to processing based on it being necessary for the pursuit of a legitimate interest identified by us.
• your personal data have been unlawfully processed and you request restriction of processing instead of deletion;
• your personal data are no longer necessary in relation to the purposes for which they were collected and processed but the personal data are required by you to establish, exercise or defend legal claims; or
• for a period enabling us to verify whether the legitimate grounds relied on by us override your interests where you have objected to processing based on it being necessary for the pursuit of a legitimate interest identified by us.

Your right to object to processing

You have the right to object to our processing of your personal data in the following cases:

• our legal grounds for processing is that the processing is necessary for a legitimate interest pursued by us or a third party; or
• our processing is for direct marketing purposes.

Your right to withdraw consent

Where we process personal data based on consent, individuals have a right to withdraw consent at any time. We do not generally process personal data based on consent (as we can usually rely on another legal basis). Where we rely on your consent for our processing of your personal data, to withdraw your consent or, to stop receiving an email from Metastreet Ltd, please click on the unsubscribe link in the relevant email.