Privacy Policy
Effective Date: April 2024
SR Cloud Solutions understands that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of all of our website users, customers and suppliers and will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the law.
Table of Contents
1. Definitions
| Expression | Meaning… |
| “Account” | means a unique account created for you to access our Service or parts of our Service. |
| “Company” | (referred to as either “the Company”, “We”, “Us”, or “Our” in this Agreement) refers to SR Cloud Solutions Ltd, 2 Claridge Court, Lower Kings Road, Berkhamsted, England, HP4 2AF |
| “Cookies” | are small files that are placed on your computer, mobile device, or any other device by a website, containing details of your browsing history on that website among its many uses. |
| “Country” | refers to: England, United Kingdom |
| “Device” | means any device that can access the Service such as a computer, a mobile phone or a tablet. |
| “Personal Data” | is any information that relates to an identified or identifiable individual. |
| “Usage Data” | refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit). |
2. Information about who we are
SR Cloud Solutions Ltd, is a private limited company registered in England under company number 10176651
Our Registered address is: 2 Claridge Court, Lower Kings Road, Berkhamsted, England, HP4 2AF
VAT number: GB254667184
Data Protection Officer: Mon Siari
Email address: ims@srcloudsolutions.co.uk
3. What does this notice cover?
This privacy notice aims to give you information on how we collect and process your personal data through your use of this website, including any data you may provide through this website, or as a result of your dealings with us as a customer or a supplier.
This website is not intended for children and we do not knowingly collect data relating to children.
It is important that you read this privacy notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy notice supplements the other notices and is not intended to override them.
4. Information Collection
Personal Data
We may collect and hold some or all of the personal data set out in the list below. We do not collect any ‘special category’ or ‘sensitive’ personal data or personal data relating to children.
- Identity Data includes first name, maiden name, last name, username or similar identifier
- Contact Data includes organisation name, billing address, delivery address, email address and telephone numbers
- Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website or hosted services
- Profile Data includes your username and password, feedback and survey responses
- Usage Data includes information about how you use our website, products and services
- Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences
- Recruitment data includes some of the identify and contact data, such as first and last name, home address, email address, title as well as voice recording (captured during the remote, i.e. over Microsoft Teams interview or an calls made in the recruitment process)
- API Keys for specific managed hosted services such as managed backup and monitoring purposes using our managed NOC services.
Google User Data
In addition to the personal data listed previously, if you choose to authenticate using Google, we collect the following information provided by Google:
- First name
- Last name
- Email address
This information is used to facilitate the registration process, and simplify the login procedure.
Tracking Technologies and Cookies
We use Cookies and similar tracking technologies to track the activity on our Service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyse our Service.
4. Use of information
Under the Data Protection Legislation, we must always have a lawful basis for using personal data. The following table describes how we will or may use your personal data, and our lawful bases for doing so:
- To register you as a new customer;
- To process and deliver your order;
- To manage our relationship with you;
- To enable you to partake in a sales event or complete a survey;
- To manage your requests.
- To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data);
- To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you;
- To use data analytics to improve our website, products/services, marketing, customer relationships and experiences;
- To make suggestions and recommendations to you about goods or services that may be of interest to you.
- To provide and maintain our Service, including to monitor the usage of our Service.
- To manage your account. The personal data you provide can give you access to different functionalities of the Service that are available to you as a registered user.
- For the performance of a contract: the development, compliance and undertaking of the purchase contract for the products, items or services you have purchased or of any other contract with us through the Service.
- To contact you by email, telephone calls, SMS, or other equivalent forms of electronic communication, such as a mobile application’s push notifications regarding updates or informative communications related to the functionalities, products or contracted services, including the security updates, when necessary or reasonable for their implementation.
- To provide you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information.
- For other purposes: we may use your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Service, products, services, marketing and your experience.
Use of Google User Data
The Google user data we collect is strictly used for:
- Communicating with you regarding updates, service information, and support
- Personalising your experience while using our Service
We do not share your Google user data with third parties except as necessary to provide the services as described in this Privacy Policy, or when legally required.
Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to sending third-party direct marketing communications to you via email or text message.
We do not conduct automated decision-making and profiling.
With your permission and/or where permitted by law, we may also use your personal data for marketing purposes, which may include contacting you by email with information, news, and offers on our products and services. You will not be sent any unlawful marketing or spam. We will always work to fully protect your rights and comply with our obligations under the Data Protection Legislation and the Privacy and Electronic Communications (EC Directive) Regulations 2003, and you will always have the opportunity to opt-out. We will always obtain your express opt-in consent before sharing your personal data with third parties for marketing purposes and you will be able to opt-out at any time.
We will only use your personal data for the purpose(s) for which it was originally collected unless we reasonably believe that another purpose is compatible with that or those original purpose(s) and need to use your personal data for that purpose. If we do use your personal data in this way and you wish us to explain how the new purpose is compatible with the original, please contact us using the details in ‘How do I Contact You’ section.
If we need to use your personal data for a purpose that is unrelated to, or incompatible with, the purpose(s) for which it was originally collected, we will inform you and explain the legal basis which allows us to do so.
In some circumstances, where permitted or required by law, we may process your personal data without your knowledge or consent. This will only be done within the bounds of the Data Protection Legislation and your legal rights.
5. Retention of your Personal Data
We will not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected.
The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.
6. International Transfer
We may transfer personal data outside the EEA when product and services are provided by external third-party suppliers and/or the processing of personal data is necessary for the performance of a contract.
- Whenever we transfer your personal data outside the EEA, we ensure at least one of the following safeguards is implemented:
- We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission. For further details, see European Commission – Adequacy Decisions.
- Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe. For further details, see European Commission – Standard Contractual Clauses.
- Please contact us if you want further information on the specific mechanism used by us when transferring your personal data outside the EEA.
7. Disclosure of Your Personal Data
We will not share any of your Personal Data with any third parties for any purposes, subject to the following exceptions.
If we sell, transfer, or merge parts of our business or assets, your personal data may be transferred to a third party. Any new owner of the business may continue to use your personal data in the same way(s) that we have used it, as specified in this Privacy Notice.
In some limited circumstances, we may be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority.
The performance of a contract between you, the company you work for and SR Cloud Solutions.
8. How Can I Access My Personal Data?
If you want to know what personal data we have about you, you can ask us for details of that personal data and for a copy of it (where any such personal data is held). This is known as a “subject access request”.
All subject access requests should be made in writing and sent to the email or postal addresses shown in ‘Contact Us’ section.
There is not normally any charge for a subject access request. If your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding.
We will respond to your subject access request within 28 days, in any case, not more than one month of receiving it. Normally, we aim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept fully informed of our progress.
9. Storage and Security of your information
Storage of Information
Your personal data and service data are stored on secure cloud servers. We ensure that our infrastructure meets high standards of data security and reliability. This includes physical, electronic, and procedural safeguards to protect information from loss, theft, misuse, and unauthorised access.
Security Measures
- Data Encryption: Your data is encrypted during transit and while at rest to prevent unauthorised access.
- Access Controls: We implement strict access controls and authentication measures to limit access to data to authorised personnel only.
- Regular Audits: Our security practices are regularly reviewed and updated to adapt to new threats and vulnerabilities.
- Incident Response: We have a comprehensive incident response plan to address potential security breaches and mitigate their impact.
- Security of Google User Data: We employ appropriate security measures to maintain the security and integrity of Google user data collected through our Service. These measures include robust data encryption and stringent access controls that ensure only authorised personnel have access to your information.
10. Changes to this Privacy Policy
We may change this Privacy Notice from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection.
Any changes will be immediately posted on Our Site and you will be deemed to have accepted the terms of this Notice on your first use of Our Site following the alterations. We recommend that you check this page regularly to keep up-to-date.
11. Contact Us
For any questions about this Privacy Policy or our privacy practices, please contact us:
- Email: support@srcloudsolutions.co.uk
- Address: 2 Claridge Court, Lower Kings Road, Berkhamsted, England, HP4 2AF
12. If you are based in the United Kingdom or the Republic of Ireland
The following definitions apply to this Schedule:
| Expression | Meaning… |
| “Personal Data” | means any Personal Data the Processing of which is subject to Privacy Laws, that is controlled by the Customer and its customers (where applicable) which the Processor Processes in the course of providing the Services under the Agreement, wherever the Processing takes place. |
| “Data Controller” | has the meaning given to it under Privacy Laws. A data controller is an entity (individual, company, or public authority) that determines the “why” (purposes) and “how” (means) of processing personal data. |
| “Data Processor” | has the meaning given to it under Privacy Laws. A data processor is an individual, company, or entity that processes personal data on behalf of a “data controller” based on specific instructions and a contract, such as a Data Processing Agreement. They do not own the data or decide how it is used, but rather manage, store, or process it. |
| “Data Subject” | has the meaning given to it under Privacy Laws. A data subject is any living individual whose personal data is collected, processed, or stored by an organisation, essentially being the ‘person’ behind the data, like a customer, employee, or user, who holds rights over how their information (name, address, online ID, etc.) is handled under laws like the GDPR. |
| “EU Data Protection Law” | means all applicable EU data protection and privacy laws, including: (i) prior to 25 May 2018, the EU Data Protection Directive 95/46/EC and, on and after 25 May 2018, the General Data Protection Regulation 2016/679; (ii) the Privacy and Electronic Communications Directive 2002/58/ED; and (iii) any other European Union or EU Member State laws made under or pursuant to (i) or (ii), in each case as such laws may be amended or superseded from time to time. |
| “UK GDPR” | Refers to the UK Data Protection Act 2018 and the Privacy and Electronic Communications Regulations |
| “Personal Data Breach” | has the meaning given to it under Privacy Laws. |
| “Privacy Laws” | means applicable laws serving to ensure the protection of Personal Data (including in connection with the Processing of Personal Data), and the protection of the rights and freedoms (in particular, their right to privacy) of Data Subjects relating to their Personal Data, including EU Data Protection Law and UK Data Protection Law, in each case as such laws may be amended or superseded from time to time. |
| “Processing” | has the meaning given to it under Privacy Laws (and “Process” shall be construed accordingly). |
| “UK Data Protection Law” | means all applicable UK data protection and privacy laws including any UK law which replaces EU Data Protection Law, or which implements or transposes EU Data Protection Law into UK domestic law. |
Key data protection laws
The key data protection laws in the United Kingdom are the UK General Data Protection Regulation (“UK GDPR”), UK Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.
The key data protection laws in the Republic of Ireland are the General Data Protection Regulation, the Data Protection Act 2018 and the S.I. No. 336/2011 – European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011.
Controllers and processors
This privacy notice describes our processing of your personal data in our capacity as a “data controller” under applicable law in the UK and the Republic of Ireland. A data controller decides how and why your personal data is processed.
Where we process personal data on behalf of another individual, for example our customers, partners, or other parties, we do not decide how and why to process that personal data. In those instances, we are a “data processor” under applicable law rather than a data controller. Where we are a data processor of your personal data, we use it in accordance with the data controller’s instructions to us. Those instructions include the terms and conditions applicable to the product or service you or your employer are using, and our Data Processing Agreement here which forms part of those terms.
If we are a data processor of your personal data, then you should also read the relevant data controller’s privacy notice. Make sure that you familiarise yourself with the privacy notice of your own employer, business, or other organisation that you have a direct relationship with, and which may share your personal data with SR Cloud Solutions Ltd.
European Union representative
European Union (“EU”) data protection laws require non-EU organisations to have a representative in the EU. The role of the EU representative is to be the point of contact for individuals and authorities for all EU member states.
You can contact ims@srcloudsolutions.co.uk if you have any questions about or for our EU representative.
Your data protection rights
If you are based within the UK or the Republic of Ireland, you have the following data protection rights:
- the right to be informed about the processing of your personal data;
- the right to obtain access to your personal data;
- the right to have your personal data rectified or erased, or to place restrictions on processing your personal data;
- the right to object to the processing of your personal data e.g., for direct marketing purposes or where the processing is based on our legitimate interests;
- the right to have any personal data you provided to us electronically returned to you in a structured, commonly used and machine-readable format, or sent directly to another company, where technically feasible (this is known as ‘data portability’);
- where the processing of your personal data is based on your consent, the right to withdraw that consent subject to legal or contractual restrictions;
- the right to object to any decisions based solely on the automated processing of your personal data, including profiling; and
- the right to lodge a complaint with the data protection supervisory authority responsible for data protection matters in your location. For the UK, this is the Information Commissioner’s Office (ICO). For the Republic of Ireland, this is the Data Protection Commissioner (DPC).
Please note that in some circumstances the exercise of the above rights may be limited by legal restrictions and exemptions. If relevant, we will explain this when responding to a request to exercise data protection rights.
If you think we hold any personal data about you which is incorrect or if there are any changes to your personal data, please let us know so that we can keep our records accurate and up to date.
If you wish to exercise your data protection rights as an individual, please access the ims@srcloudsolutions.co.uk.
If you do not want us to use your personal data for purposes set out in our privacy notice, we may not be able to provide you with access to all or parts of our Website or Solutions.
International transfer of personal data
Personal data in EU member states and the UK is protected by data protection laws, but other countries do not necessarily protect your personal data in the same way. You can find a list of countries that the European Commission considers provide an equivalent level of data protection to that which exists within the European Economic Area (EEA) (“Adequate countries”) here.
Our Website and some of our Solutions, or parts of them, may be hosted outside the EEA or UK, which means that we may transfer personal data to third countries which do not have an EU or UK adequacy determination in some circumstances. In addition, we may use service providers located outside the EEA or UK to help us provide our Websites, Solutions or other services to you and this means that we may transfer your personal data to these regions.
We take steps to ensure that where your personal data is transferred outside of the EEA or the UK, appropriate measures and controls are in place to protect that data in accordance with applicable data protection laws. All 3rd party companies are subject to an internal Personal Data Protection governance policy and related procedures designed to protect personal data in accordance with EU, EU member state and UK data protection laws. In each case, such transfers are made in accordance with applicable data protection laws and may be based on the use of (i) the European Commission’s Standard Contractual Clauses for transfers of personal data outside the EEA, or (ii) the UK’s International Data Transfer Agreement and/or the European Commission’s Standard Contractual Clauses and/or the UK Addendum for transfers of personal data outside the UK.
For more information on international transfer of personal data, please contact ims@srcloudsolutions.co.uk
Get in touch with us
Our team is available for a quick call or video meeting. Let’s connect and discuss your next IT project, we are here to help.
