YOUR POWER LTD – PRIVACY POLICY

Identity and contact details (Business Client Information)

• Name, business email address, and phone number of authorised representatives
• Company name, registration number, and business address
• Professional details (Job title and role within the client organisation)

Service related information

• Transaction details for services you've purchased from us or enquiries about our services
• Your preferences for our services and your marketing preferences
• Feedback, complaints and compliments and survey responses

Services and technical information

• Property coordinates submitted via API (non-personal, publicly available data)
• API usage data and request logs
• Technical information required for service delivery

Financial and payment information

• Payment details for services you've purchased from us

Digital information

• IP address and general location information derived from your IP address
• Search and browsing behaviour and user journeys
• Website usage patterns
• Cookie preferences and tracking

Recordings

• Call recordings
• Records of meetings and decisions

Professional information (for job applicants and workers)

• Employment history
• Professional experience
• Required authorisations and licences
• Professional registrations
• Information about your right to work in the UK

Service providers

• IT service providers including Amazon Web Services
• Data storage providers
• Web hosting and server providers
• Payment processors
• Marketing and advertising providers

Professional advisers

• Bankers
• Auditors
• Insurers and insurance brokers
• Legal advisers

Business partners

• Our existing or potential agents
• Our business partners or contractors

Corporate transactions

If we merge with or are acquired by another company, or sell our business assets:

• Your information may be disclosed to our advisers
• Your information may be disclosed to the potential purchaser's advisers
• Your information may be included in the transferred assets

Legal and regulatory bodies

• Courts and tribunals
• Regulatory authorities including as required for reporting obligations
• Law enforcement officers

Other parties

• Third parties you have authorised
• Emergency services when necessary
• Any other parties as required or permitted by law

Where we store and access your information

We store your personal data in the United Kingdom. However, your information may be transferred to locations outside the United Kingdom in these circumstances:

• When our service providers are located overseas
• When we work with overseas business partners
• When using cloud-based services or data storage solutions
• When required by law or legal proceedings

Our approach to overseas transfers

When we transfer your personal data outside the United Kingdom, we ensure it receives appropriate protection by:

• Only transferring your information to countries that UK data protection law recognises as providing adequate protection for personal data, or
• Putting in place a contract with the third party that means they must protect personal data to the same standards as the UK.
• Transferring personal data to organisations that are part of specific agreements on cross-border data transfers with the UK.

What this means for you

We only transfer the minimum amount of personal data necessary and require all recipients to:

• Protect your information to the same standards required by UK law
• Use your information only for the purposes we've agreed
• Allow us to monitor how they handle your information
• Provide you with the same rights over your information that you have under UK law

Parents and guardians have the right to:

• Review any personal data we hold about their child
• Request correction or deletion of their child's personal data
• Refuse or withdraw consent for further collection or use of their child's data
• Contact us with any concerns about their child's privacy

How long we keep your information

We only keep your personal data for as long as we need it to:

• Provide our services to you
• Meet our legal, tax, accounting or regulatory obligations
• Handle any complaints or legal issues that may arise

We may keep your information for longer periods if:

• You make a complaint that we need to investigate or respond to
• We reasonably believe legal action involving our relationship with you might occur
• The law requires us to keep it for specific timeframes

How we decide retention periods

When determining how long to keep your information, we consider:

• How much information we have and how sensitive it is
• The risk of harm if the information was accessed without permission
• Whether we can achieve our purposes in other ways
• What legal, regulatory, tax or accounting rules require
• The nature of our relationship with you and the services we provide

What happens when we no longer need your information

Once we no longer need your personal data, we will securely delete or destroy it in accordance with our data retention policies and legal requirements.

Your Rights

You can request information about retention periods for your data and ask for early deletion where legally possible.

Providing information

You can choose whether to provide personal data to us, however, if you don't provide certain information, we may not be able to provide some services. Let us know if you don't want to provide information and we will let you know when information is required versus optional.

Right of Access

You have the right to ask us for copies of your personal data. You can request other information such as details about where we get personal data from and who we share personal data with. There are some exemptions which means you may not receive all the information you ask for.

Right to Rectification

You have the right to ask us to correct or delete personal data you think is inaccurate or incomplete.

Right to Erasure (“Right to be forgotten”)

You can request deletion of your personal data in certain limited circumstances as set out in data protection law, such as where the data is no longer necessary or has been unlawfully processed. This right is not absolute and we may be required or entitled to retain your data for legal, regulatory or legitimate business reasons.

Right to Restrict Processing

You can ask us to suspend processing where:

• You contest the accuracy of the data
• Processing is unlawful but you don't want erasure
• We no longer need the data but you need it for legal claims
• You've objected to processing pending verification of our legitimate grounds

Right to opt-out of marketing communications

You can opt-out of receiving marketing communications at any time. Each marketing communication will include an unsubscribe option. You can change your marketing preferences by contacting us. We will process your request as soon as practicable.

Right to Data Portability

Where technically feasible, you can receive your personal data in a structured, commonly used format or have it transmitted to another controller where:

• Processing is based on consent or contract
• Processing is automated

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

How to Exercise Your Rights

To exercise any of these rights, contact us using the details below. We may ask for proof of identity and will respond within one month (extendable to three months for complex requests).

These rights are available under data protection law, though some may not apply in every situation. We'll let you know if any limitations apply when you make a request.

Your right to complain to the regulator

You can also make a complaint directly to the Information Commissioner's Office (ICO), the UK's data protection regulator, at any time.

You don't have to contact us first before going to the ICO, but we'd appreciate the opportunity to try to resolve your concerns directly with you.

Technical safeguards

• Enterprise-grade encryption for data storage and transmission
• Regular security testing and monitoring
• Automated threat detection systems

Operational security

• Strict access controls
• Regular security audits and incident response procedures testing

Physical security

• Secure disposal of physical documents
• Equipment security protocols

Public information

Please note that any information you choose to share publicly on online platforms (such as comments or reviews) can be accessed and used by others. We cannot control or protect information that you make publicly available.

Cookies and pixels

We may use cookies and similar tracking technologies on our website to enhance your browsing experience and improve our services.

What are cookies?

Cookies are small text files that are stored on your device when you visit our website. They help us remember your preferences and understand how you use our site.

Types of cookies we may use

• Essential cookies: Necessary for the website to function properly
• Performance cookies: Help us understand how visitors interact with our website
• Functionality cookies: Remember your preferences and settings
• Marketing cookies: Used to deliver relevant advertisements and track campaign effectiveness

Cookie consent

If cookies are enabled, when you first visit our website, you will see a cookie notice explaining our use of cookies. You'll find more information about the cookies we use in our cookie pop-up.

Managing your preferences

You can change your cookie preferences at any time by visiting our cookie policy for detailed information about specific cookies.

Please note that disabling certain cookies may affect the functionality of our website and your user experience.