TouchStack LTD
(referred to as the "Controller")
This Policy applies to the data processing carried out by the Controller's website and other instances where the Controller is the data controller, including situations where Users test the Controller's apps and platforms without entering third-party data. It does not apply where the Controller is merely a data processor. In certain cases, an additional or different privacy notice may be provided for specific processing activities.
Among the types of Personal Data that our website ("Website") collects, by itself or through third parties, there may be:
First name, last name, email address, cookies, and usage data. When Users sign up for our services, we typically collect the User's first name, last name, email address, job title, and company name to create an account.
We also gather system logs and other usage data, including:
The Controller may process Personal Data relating to Users if one of the following applies:
Users have given their consent for one or more specific purposes (e.g., allowing non-essential cookies or for direct marketing). Consent can be withdrawn at any time by contacting the Controller. Withdrawal of consent does not affect any earlier processing.
Provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations.
Processing is necessary for compliance with a legal obligation to which the Controller is subject.
Processing is necessary for the legitimate interests pursued by the Controller or by a third party. These interests may include cybersecurity, traffic analytics, backup and restore, marketing, or the making and defense of claims.
Depending on the User's location, data transfers may involve transferring the User's Data to a country other than their own. Where such transfers include countries outside the EU/EEA, the Controller will rely on safeguards permitted under applicable data protection laws (e.g., adequacy decisions such as the EU-US Data Privacy Framework and its UK extension, standard contractual clauses, or other acceptable measures under the UK and EU General Data Protection Regulation (GDPR)).
Personal Data shall be processed and stored for as long as required by the purposes for which it was collected. Specifically:
Data concerning the User is collected to allow the Controller to provide its services and to achieve the purposes outlined in this Privacy Policy, including contacting the User and analyzing usage (analytics). Additional purposes may arise from the legitimate interests mentioned above.
Personal Data may be shared with the following types of recipients:
Under applicable data protection laws in the UK and/or EU (including the GDPR), Users may exercise certain rights regarding their Personal Data. In particular, Users have the right to:
Users can withdraw previously given consent to the processing of their Personal Data.
Users can object to the processing of their Personal Data if such processing is carried out for profiling or direct marketing purposes.
Users have the right to learn if their Data is being processed, obtain disclosure about certain aspects of the processing, and obtain a copy of the Data undergoing processing.
Users can verify the accuracy of their Data and request updates or corrections.
Under certain circumstances, Users can request the Controller to restrict the processing of their Data. In such cases, the Controller will process the Data only for storing it.
Under certain circumstances, Users can request the Controller to erase their Data.
Users have the right to receive their Data in a structured, commonly used, and machine-readable format and to have it transferred to another controller if technically feasible, provided that the processing is based on consent, a contract with the User, or pre-contractual obligations, and is carried out by automated means.
Users have the right to bring a complaint before their relevant data protection authority. In the UK, the authority is https://ico.org.uk.
Users can direct any requests to exercise their rights to the Controller by referencing the registered company number provided in this Policy. Such requests can be exercised free of charge and will be addressed as promptly as possible and always within one month.
The Controller reserves the right to make changes to this Privacy Policy at any time by posting an updated version on this page. Users are encouraged to check this page regularly and to note the date of the last modification indicated below.
