Privacy policy

Last updated: 27/01/2025

This privacy policy describes how Spendstream Ltd ("we", "our", or "us") collects, uses, and protects your personal information when you visit our website www.spendstream.co.uk ("the Website").

We are committed to safeguarding your privacy and ensuring that your personal data is handled in a safe and responsible manner.

By using our Website, you consent to the collection and use of your personal data as described in this policy.

1. Information We Collect

   We collect different types of personal information depending on how you interact with our Website, including:

   • Personal Identification Information: When you create an account, sign up for newsletters, or make a purchase, we may collect personal details such as your name, email address, postal address, phone number, and payment details.

   • Usage Data: This includes information about how you access and use the Website, including your IP address, browser type, pages viewed, and the time and date of your visit.

   • Cookies and Tracking Technologies: We use cookies to improve the functionality and performance of our Website. Cookies help us understand how users navigate our Website and allow us to enhance user experience.

2. How We Use Your Information

   We may use the personal information we collect in the following ways:

   • To provide and maintain our Website and services.

   • To process transactions and fulfill your orders.

   • To communicate with you, respond to your inquiries, and provide customer support.

   • To send promotional emails and newsletters, if you have opted in to receive them.

   • To improve the functionality, content, and performance of the Website.

3. Legal Basis for Processing Your Data

   We process your personal data based on the following legal grounds:

   • Consent: When you provide personal information through forms or other means (e.g., signing up for our newsletter), we rely on your consent to process that data.

   • Contractual Necessity: When you make a purchase or engage with our services, we process your data to fulfill our contractual obligations.

   • Legitimate Interests: We may process data for legitimate business interests, such as improving our services and marketing.

4. Sharing Your Data

   We will not sell, trade, or rent your personal data to third parties. However, we may share your information with the following parties for the purposes outlined in this policy:

   • Service Providers: We may share data with third-party service providers (e.g., payment processors, email providers) who assist in operating the Website and providing services.

   • Legal Compliance: We may disclose your information when required to do so by law, such as in response to a court order or regulatory request.

5. International Transfers

   If you are located outside the UK, your personal data may be transferred to countries outside the European Economic Area (EEA) where data protection laws may differ. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

6. Data Security

   We take reasonable measures to protect the personal information you provide to us, including implementing technical and organisational safeguards. However, please note that no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee the absolute security of your data.

7. Your Rights

   As a data subject, you have the following rights regarding your personal data:

   • Access: You can request access to the personal data we hold about you.

   • Rectification: You can request that we correct any inaccurate or incomplete personal data.

   • Erasure: You can request that we delete your personal data, subject to certain conditions.

   • Restriction of Processing: You can request that we limit the processing of your personal data under certain circumstances.

   • Data Portability: You can request that we transfer your personal data to another service provider.

   • Withdraw Consent: If we process your data based on consent, you have the right to withdraw that consent at any time.

   • Objection: You can object to the processing of your personal data for certain purposes, including direct marketing.

   To exercise your rights, please contact us at [email protected].

8. Retention of Data

   We will retain your personal data only for as long as is necessary for the purposes outlined in this privacy policy or as required by law. When your data is no longer needed, we will ensure that it is securely deleted or anonymised.

9. Links to Other Websites

   Our Website may contain links to external websites that are not operated by us. We are not responsible for the privacy practices or the content of these third-party sites. We encourage you to review the privacy policies of any external sites you visit.

10. Changes to This Privacy Policy

    We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or services. We will post any changes on this page and update the “Last updated” date at the top of this policy. We encourage you to review this privacy policy periodically.

11. Contact Us

    If you have any questions or concerns about this privacy policy or our data practices, please contact us at: [email protected]