Privacy Policy

Bellrock Technology Limited (“we”, “our” or “us”) is committed to protecting and respecting your privacy and ensuring that your personal data is handled in a safe and responsible manner. 

This Privacy Policy explains how we collect, use, disclose and protect your personal data when you (“Customer”, “User”, “you” or “your”) use the deckchair® platform-as-a-service (PaaS) (“deckchair®” or “Platform”). We comply with the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018 and other applicable data protection laws. This Privacy Policy applies to users located in the UK and in any region where the GDPR applies.

Please read this Privacy Policy carefully to understand our views and practices regarding your personal data and how we will treat it. By using deckchair®, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with any of the provisions of this Privacy Policy, you must not access or use deckchair®.

deckchair is a registered trademark owned by Bellrock Technology Limited.

The data controller for the purposes of this Privacy Policy is:

Bellrock Technology Limited

Level 5, 9 Haymarket Square

Edinburgh, EH3 9RY

Scotland

This means that we are responsible for determining the purposes for which and the manner in which your personal data is processed. 

We may collect and process the following types of personal data when you use deckchair®:

• Account Information: Your name, email address, job title, company name, phone number, username, password and other details you provide during registration or subscription to the Platform;
• Billing Information: Billing address, payment card information or other payment details;
• Usage Data: Information about how you use our Platform, including login data, session data, IP addresses, browser type, device information and usage statistics;
• Transactional Data: Information related to payments, purchases and other financial transactions;
• Communications: Records of your communications with us including messages, requests and feedback, e.g. customer support queries.

We do not collect sensitive personal data, such as racial or ethnic origin, political opinions or health information unless explicitly provided by you for specific services. 

We use the data we collect for the following purposes:

• Provision of Service: To provide, maintain and improve our Platform and associated services;
• Account Management: To create, manage and update your user account;
• Billing and Payments: To process payments and manage your subscription to our Platform;
• Customer Support: To respond to your inquiries, resolve issues and provide technical assistance;
• Security and Fraud Prevention: To ensure the security of our Platform and to prevent fraud;
• Legal Compliance: To comply with our legal obligations and resolve disputes;
• Analytics and Research: To analyse usage patterns and improve our Platform, user interface and functionality;
• Marketing and Communication: To send you updates, newsletters, promotional offers, feedback requests and other information that we think will be of interest to you. You can opt out of such communications at any time. 

We rely on the following legal bases to process your personal data under the GDPR:

• Contractual Necessity: We process your data to perform our contractual obligations, such as providing access to our Platform, processing payments and providing customer support;
• Consent: Where required, we obtain your consent to process your data, e.g. for marketing communications;
• Legal Obligations: We may process your data to comply with legal requirements, e.g. tax reporting, fraud prevention;
• Legitimate Interests: We may process your data based on our legitimate interests, such as improving the Platform and preventing fraud, provided that your rights and freedoms are not overridden.

We will retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, including as required for legal, accounting or reporting purposes. Specific retention periods depend on the type of data and the service provided. If you close your account, we may retain certain information for a period of time as required by law or for legitimate business purposes. 

We do not sell, trade or rent your personal data to third parties. However, we may share your data in the following circumstances:

• Service Providers: We may share your data with trusted third-party service providers who assist us in delivering our Platform, e.g. payment processors, hosting providers, email service providers). These third parties are required to protect your data and use it only to provide services on our behalf;
• Legal Compliance: We may disclose your data to comply with legal obligations or respond to lawful requests from public authorities, such as law enforcement;
• Business Transfers: In the event of a merger, acquisition or sale of assets, your data may be transferred as part of the transaction, subject to applicable privacy laws.

As part of providing our services, your personal data may be transferred to, stored and processed in countries outside the UK or the European Economic Area(EEA). In such cases, we will ensure that appropriate safeguards are in place to protect your data in accordance with GDPR requirements, including the use of standard contractual clauses or other lawful mechanisms for international data transfers. 

Under the GDPR, you have the following rights in relation to your personal data:

• Right of Access: You can request a copy of the personal data we hold about you;
• Right to Rectification: You can request that we correct any inaccuracies or complete incomplete information in your personal data;
• Right to Erasure: You can request that we delete your personal data, subject to certain exceptions, e.g. legal obligations;
• Right to Restrict Processing: You can request that we restrict the processing of your personal data in certain circumstances;
• Right to Data Portability: You can request a copy of your personal data in a structured, commonly used and machine-readable format to transfer to another data controller;
• Right to Object: You can object to the processing of your personal data based on legitimate interests or direct marketing purposes;
• Right to Withdraw Consent: Where we rely on consent for processing, you may withdraw your consent at any time.

To exercise any of these rights, please contact us at privacy@deckchair.ai. We will respond to your request within the timeframes required by applicable data protection law. 

We take the security of your personal data seriously and use appropriate technical and organisational measures to protect it from unauthorised access, disclosure, alteration and destruction. However, please be aware that no method of data transmission over the internet or method of electronic storage is 100% secure and, whilst we will make every effort, we cannot guarantee absolute security.

If we learn of a breach of your personal data, we will notify you and the authorities of its occurrence without undue delay, in line with applicable law. Notifications will be delivered to your email address, as recorded during account registration. Please note, you are responsible for maintaining the security of your devices and protecting the confidentiality of your account credentials and other authentication factors. 

When we process the personal data of your customers or third parties on your behalf, you are the data controller and we separately act as the data processor only. We have no direct relationship with your customers or third parties whose personal data we may process on your behalf.

In these circumstances, you alone decide what personal data, if any, should be uploaded to our Platform. We will process the personal data only in accordance with your instructions.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies or legal obligations. When we update the Privacy Policy, we will post the revised version on our website, https://deckchair.ai, and update the “Last Updated” data at the top of the policy. Additionally, we will notify you of any material changes by email or by posting a notice on https://deckchair.ai or through the Platform itself.  

If you have any questions or concerns about this Privacy Policy or how we process your personal data, please contact us at:

Bellrock Technology Limited

Email: privacy@deckchair.ai

Address: Level 5, 9 Haymarket Square, Edinburgh, Scotland, EH3 9RY

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection matters, if you believe that we have not complied with the requirements of the GDPR.