Privacy Policy

Privacy notice – prospective customers

This section applies if you are a prospective customer of 34SP.com. Please scroll down the page for our privacy policy that governs 34SP.com customers. We last updated this notice in August 2020.

Summary

We keep to a minimum the information we hold about you
We use your data to respond to your enquiries, meet our legal obligations and protect our legal position, and improve our services
Generally, we do not give your information to third parties except where necessary to provide our services, but there are some exceptions
You have lots of privacy rights
We take security seriously
We record calls
We are happy to answer your questions about any of this: contact us at Support@34SP.com

Scope of this notice

This privacy notice explains what personal data we process about you if you have got in touch without about becoming a customer but you haven’t yet taken the plunge.

About us

We are 34SP.com Limited — legally, we are the controller in respect of the processing activity detailed in this notice.

You can contact us through our ticketing system, or else:

Email us at Support@34SP.com
Call us on 0161 987 3434
Or write to us at: 34SP.com Ltd 349 Bury Old Road, Prestwich, Manchester, M25 1PY

What data we hold

As a prospective customer, we will hold very little information about you:

Your name, identity and contact information, if you have got in touch with us
Records of communications with you. Please note that we record phone calls and may monitor other communications you have with us

We also generate log files from various servers: this will include an IP address assigned to you or, more probably, to your account.

What we do with your data and why

References to the basis of processing (e.g. “(Basis: Art. 6(1)(f).)”) are a reference to the article of the General Data Protection Regulation under which we undertake the processing in question.

Responding to your enquiries

We use the information we hold about you to respond to your enquiry, such as helping work out the best package for you.

(Basis: If you are an individual, Art. 6(1)(b): this is necessary to deliver the service to you. If you are a corporate customer, Art. 6(1)(f): this is necessary for the legitimate interest of delivering the service which your corporate entity wants to purchase.)

Staff training and quality assurance

We use recordings of communications you have with our staff, including call recordings, for staff training and quality assurance purposes.

(Basis: Art. 6(1)(f): we do this for the legitimate interest of providing the best possible service to you.)

Securing our services

We use the information we hold about you to verify you when you contact us, and to defend our networks and services from attacks.

(Basis: Art. 6(1)(c): we have to do this to comply with legal and regulatory obligations.)

Sending our newsletter and direct marketing

If you want to receive our newsletter or our direct marketing, we will use your contact information to send it to you. We will use your purchase history to keep our marketing relevant.

(Basis: Art. 6(1)(a): consent, which you can withdraw at any time.)

Evidencing contracts and protecting our legal risks

We use information we hold, including any call recordings, to help demonstrate the existence or content of contracts, prevent and detect fraud, and for establishing and defending our legal rights.

(Basis: Art. 6(1)(f): we do this for the legitimate interest of protecting our business.)

Engaging with courts or alternative dispute resolution services

If we need to do so as part of a court or dispute resolution process, we will process your personal information to either bring a claim, or defend a claim or dispute.

(Basis: Art. 6(1)(f): we do this for the legitimate interest of protecting our business and establishing and defending our legal rights.)

Responding to binding requests from courts, law enforcement and other agencies, or regulators

If we are served with a binding order (for example, a court order, a notice or warrant under the investigatory powers framework, or a notice from the Information Commissioner’s Office) which relates to you, we will be required to process your personal data to be able to comply with it.

(Basis: Art. 6(1)(c): we have to do this to comply with legal and regulatory obligations.)

Technical data

We may use the logs from our servers to assist with our security, as well as to determine visitor behaviour and help us plan our business strategy (e.g. such as working out which pages on the site are most popular, or whether particular events have caused an increase in traffic).

(Basis: Art. 6(1)(c): we have legal and regulatory obligations to protect our customers and their information. Art. 6(1)(f): strategy planning is a legitimate, indeed sensible, thing for a business to do.)

Your data and the EEA

We keep the majority of your personal data within the EEA.

We may store your name, and part of your address, in Google Docs. We cannot be confident that this information does not leave the EEA. We have in place the standard contract clauses with Google.

What if you don’t give us your data?

We cannot force you to provide us with data, and it is your choice whether you give us everything we need to provide our services to you or not. If you choose not to provide us with the data we need, we may not be able to provide you with the service.

How long we keep your data

We keep recordings of phone calls for 90 days from the date on which the call was made.

If you have signed up to our newsletter, we will process your data until you unsubscribe.

If we end up in a dispute with you, or in litigation, we will keep whatever information we need to support us in resolving that dispute or to engage in the litigation process.

Recipients

As a general principle, we will not transfer your personal data to third parties without your permission.

There are three exceptions to this:

It is possible, though unlikely, that we might be forced to disclose your information in response to a court order or other binding mandate. Similarly, if we end up in litigation or dispute resolution with you, we will need to disclose information to the court or the dispute resolution provider.
We have a small number of companies providing services to us, such as accountants and lawyers. We do not share personal information with them unless we need to do so. We also use Google as a software-as-a-service provider.
In the unlikely event that we sell our business to someone else, we would transfer your personal data to the buyer as part of that sale.

Your rights

You have lots of rights in respect of our processing of your personal data, and you can exercise most of them yourself:

the right to information about our processing of your data, as set out in this notice
the right of access to personal data we hold about you, and the right to data portability.
the right to have inaccurate data corrected. If we cannot correct your data yourself through the our control panel, feel free to contact support
the right to erasure of your data, the right to restrict processing, and the right to object to processing, in some situations. Please check Articles 17 and 18 of the GDPR to make sure the rights apply to what you are wanting to do before contacting us. Note that we do not process your personal data for profiling or automated decision-making (such as credit vetting).
the right to complain to a supervisory authority, although we will obviously try to put right anything we have got wrong long before you need to do that

Privacy notice – customers

This section applies if you are a customer of 34SP.com. Please scroll to the top of the page for our privacy policy that governs prospective customers. We last updated this notice in November 2020.

Summary

We keep to a minimum the information we hold about you
We use your data to provide our services to you, respond to your enquiries, manage our relationship with you, meet our legal obligations and protect our legal position, and improve our services
Generally, we do not give your information to third parties except where necessary to provide our services, but there are some exceptions
You have lots of privacy rights
We take security seriously
We record calls
We are happy to answer your questions about any of this: contact us at Support@34SP.com

Scope of this notice

This privacy notice explains what personal data we process about our customers.

It applies if you are an individual customer —that’s to say, you are a human — and to information about individuals you give us if you are a corporate customer (e.g. information about your directors, or a named account contact).

About us

We are 34SP.com Limited — legally, we are the controller in respect of the processing activity detailed in this notice.

You can contact us through our ticketing system, or else:

Email us at Support@34SP.com
Call us on 0161 987 3434
Or write to us at: 34SP.com Ltd 349 Bury Old Road, Prestwich, Manchester, M25 1PY

What data we hold

As our customer, we will hold the following information about you:

Your name, identity and contact information. If you are a company and you give us information about a named individual (e.g. as an account contact), then we will hold their data
Information about the services you buy from us, login and security information, and configuration data
Records of communications with you, including contact with our support team. Please note that we record phone calls and may monitor other communications you have with us
Billing and payment information

We also generate log files from various servers: this will include an IP address assigned to you or, more probably, to your account.

What we do with your data and why

References to the basis of processing (e.g. “(Basis: Art. 6(1)(f).)”) are a reference to the article of the General Data Protection Regulation under which we undertake the processing in question.

Providing you with the services you buy from us

We use the information we hold about you to provide our services to you.

We also use your information to bill you, and keep track of payments that you make.

Accountancy and tax purposes

We retain information about you, and your payment history, for accountancy and taxation purposes.

(Basis: Art. 6(1)(c): we have to do this to comply with legal and regulatory obligations.)

Staff training and quality assurance

We use recordings of communications you have with our staff, including call recordings, for staff training and quality assurance purposes.

(Basis: Art. 6(1)(f): we do this for the legitimate interest of providing the best possible service to you.)

Securing our services

We use the information we hold about you to verify you when you contact us, and to defend our networks and services from attacks.

(Basis: Art. 6(1)(c): we have to do this to comply with legal and regulatory obligations.)

Sending our newsletter and direct marketing

If you want to receive our newsletter or our direct marketing, we will use your contact information to send it to you. We will use your purchase history to keep our marketing relevant.

(Basis: Art. 6(1)(a): consent, which you can withdraw at any time.)

Evidencing contracts and protecting our legal risks

We use information we hold, including any call recordings, to help demonstrate the existence or content of contracts, prevent and detect fraud, and for establishing and defending our legal rights.

(Basis: Art. 6(1)(f): we do this for the legitimate interest of protecting our business.)

Engaging with courts or alternative dispute resolution services

If we need to do so as part of a court or dispute resolution process, we will process your personal information to either bring a claim, or defend a claim or dispute.

(Basis: Art. 6(1)(f): we do this for the legitimate interest of protecting our business and establishing and defending our legal rights.)

Responding to binding requests from courts, law enforcement and other agencies, or regulators

(Basis: Art. 6(1)(c): we have to do this to comply with legal and regulatory obligations.)

Technical data

Your data and the EEA

We keep the majority of your personal data within the EEA.

We store your name, and part of your address, in Google Docs. We cannot be confident that this information does not leave the EEA. We have in place the standard contract clauses with Google.

What if you don’t give us your data?

How long we keep your data

We keep recordings of phone calls for 90 days from the date on which the call was made.

We keep your customer record in our database for invoicing and accountancy purposes for up to 8 years.

We keep any content which you have uploaded to our services for at least 90 days following termination of the agreement, and we delete it within 180 days following termination of the agreement.

Other than data which we process for accountancy / record keeping purposes, which we keep indefinitely, we delete all other data we hold about you around 90 days after you cease to be a customer.

If we end up in a dispute with you, or in litigation, we will keep whatever information we need to support us in resolving that dispute or to engage in the litigation process.

Recipients

As a general principle, we will not transfer your personal data to third parties without your permission.

There are five exceptions to this:

If you do not pay your bills, we may choose to engage a third party to recover any money you owe us.
It is possible, though unlikely, that we might be forced to disclose your information in response to a court order or other binding mandate. Similarly, if we end up in litigation or dispute resolution with you, we will need to disclose information to the court or the dispute resolution provider.
If you request a service from us which requires us to share your data with a third party, such as domain name registration (meaning we may provide your information to Ascio, easyspace, Janet, and Nominet) or payment processing (through acquiring.com).
We have a small number of companies providing services to us, such as accountants and lawyers. We do not share personal information with them unless we need to do so. We also use Google as a software-as-a-service provider.
In the unlikely event that we sell our business to someone else, we would transfer your personal data to the buyer as part of that sale.

Your rights

You have lots of rights in respect of our processing of your personal data, and you can exercise most of them yourself:

the right to information about our processing of your data, as set out in this notice
the right of access to personal data we hold about you, and the right to data portability. You can download copies of invoices, and all other personal data which we hold about you, from our control panel. If you host a website with us, you can copy this data from the server, and you can download the content of any email accounts hosted with us via either IMAP or POP.
the right to have inaccurate data corrected. If we cannot correct your data yourself through the our control panel, feel free to contact support
the right to erasure of your data, the right to restrict processing, and the right to object to processing, in some situations. Please check Articles 17 and 18 of the GDPR to make sure the rights apply to what you are wanting to do before contacting us. Note that we do not process your personal data for profiling or automated decision-making (such as credit vetting).
the right to complain to a supervisory authority, although we will obviously try to put right anything we have got wrong long before you need to do that