Effective: August 18, 2020
We will only use your personal information to administer your account, provide the products and services you have requested from us, and to keep you informed about our products and services. The protection, confidentiality and integrity of your personal data are our prime concerns. This privacy notice explains what personal information we collect from you when you interact with our products and services, and how we use this information.
inkscroll provides a way for people to get to know each other better and connect over food.
What personal data do we collect?
We need certain personal information to be able to offer you the best experience and to keep you informed of our products and services. You provide some of this data directly, for instance when you create an account or add items to your data vault. Additionally, we receive some of your personal data indirectly through your devices, by recording how you interact with our services (e.g. through cookies). This allows us to personalise and improve our products.
When you create an account with us, we process the following details:
- Your name
- Email address
- IP address
Cookies and other similar technologies
How do we use your personal data?
We only use your data for the purposes for which it was collected and, where relevant, to meet local legal obligations. We use your personal data for the following purposes:
Performance of agreements with users - To provide you with the cooking related products and services of your choice, we process your information for example to complete sharing your taste preferences items with those you have chosen to share them with.
Customer support - We use your information to support you in your use of our products and services. This includes the use of personal information to diagnose product problems, rectify erroneous transactions and provide other customer support related services.
Customer engagement and communication - We use your information to communicate with you via email, SMS text or other electronic media for instance on service‐related matters, such as invoices. Other instances where we engage with you include confirming the opening of an account, resolving complaints, and asking you to take part in one of our surveys.
Marketing - We would like to send you information which may be of interest to you, about our products and services and those of other companies (in so far as you have consented to this) that may be of interest to you. We communicate with you via email, SMS text or other electronic media. You have the right at any time to stop us from contacting you for marketing related purposes. Depending on your preferences, you can unsubscribe, change your settings online.
Safety, security and dispute settlement - We use your details to protect the security, integrity and safety of our products, services and customers. This includes processing in the context of detecting and preventing fraud, theft and other misuse of our services. We may also use personal information in the context of dispute settlements, to enforce our agreement with you, to enforce our rights towards third parties or defend ourselves against any third party claims or allegations.
Legal obligations - We may process your information in relation to a legal obligation. This includes cases where we must comply with requests from competent authorities, administrative obligations and in cases involving legal disputes.
Improving and personalising our products and services - We use your personal information to improve our products and services. Clicking behaviour and search results on our website can for instance help us to prioritise or identify new product features.
Maintenance, development and incident management - If you experience issues with one of our products or services, we may need to process some of your personal information, such as your name and client ID, in order to resolve the respective issue. We may also use your personal information in relation to certain system development processes, for instance if we move customer data to a new database.
General business process execution, internal management and management reporting - To be able to run our business, we also use your personal information for general business processes. This includes processing your information for archiving, insurance and other administration related purposes, management reporting or processing in relation to audits.
With whom do we share your data?
We share your personal data with third parties such as suppliers (e.g. hosting, customer care and e‐marketing facilities), clients (e.g. business clients), and other partners. Who we share your information with, depends on your location on the services you use. We share your information:
- To the extent necessary to operate our business, to provide you our services, to share data items with others where you have explicitly requested the service to do so, to complete any related transactions and collect related payments, to provide customer care and to communicate with you in connection with our services. For instance, to process payments and transactions.
- Where you gave us explicit consent to do so;
- If we are legitimately requested to share information with competent authorities, such as law enforcement, pursuant to law, e.g. for investigation of illegal activities;
- To enforce our rights towards third parties, or to defend ourselves against any third‐party claims or allegations;
- To protect the security, integrity or safety of our Services.
Where is your personal data processed?
Your personal data is mainly processed by our staff. We may also share data with our affiliates in the context of operating our business, providing our services and other processing purposes as outlined in this Privacy Notice. For hosting and maintenance purposes your personal data is located in the United Kingdom.
To the extent any other personal data will be transferred to a country outside the European Union or an international organisation, we will make sure that this only happens to such countries and international organisations that ensure an adequate level of protection, have put appropriate safeguards in place to protect your data and your rights in accordance with the EU privacy law (GDPR), or as is otherwise allowed under the GDPR.
How long do we keep your personal data?
We will retain your personal information only for as long as is necessary for the purposes for which the information was collected, or as long as is required pursuant to law.
If you do not use your account for more than 18 months, we will mark it in our database as "inactive". We will then no longer actively use your account information, e.g. to inform you on our products and services, but will archive the account to be able to easily re‐activate it should you wish to use our services again in the future.
In case you wish to close your account, please contact our Customer Support team. Upon closure, we will remove your personal information without undue delay except for information that we are obliged to keep pursuant to law. For instance in order to meet statutory administrative retention obligations, we need to keep some of your account related information (e.g. copies of invoices/receipts), for six years.
Data may be retained longer in cases where it is used in relation to a legal claim or is used in relation to a valid legal process.
Accessing and managing your personal data
You can directly view and edit your personal details via your personal account through our website. There you can also make choices about our collection and use of your data. For instance, you can always choose in your account settings, whether or not you wish to receive promotional emails, SMS messages, telephone calls or mail from us. How you can access or control your personal data will depend on which products and services you use.
If you cannot access, rectify, or erase certain personal data yourselves, if you want a copy of the personal data that we process of you, if you wish to request a restriction of processing of your personal data or to object to processing, please contact our Customer Care department. We will respond to such requests within 30 days.
Lawful basis for data processing
We only collect and process your personal data when there is a lawful basis to do so. The lawful basis we rely on in this respect includes:
- Contract: the processing is necessary to perform your Service contract;
- Legitimate interest: for example, i) a legitimate commercial interest to process certain of your personal data, e.g. for running our business and the purposes of certain forms of direct marketing and profiling; ii) to archive certain account information to facilitate you to re‐use your account in the future; or iii) if there is a legitimate interest from business or security perspective, e.g. to prevent fraud or abuse of our Services, or for purpose of network and information security of our IT systems;
- Legal obligation: the processing necessary to comply with a legal obligation, e.g. the legal requirement to keep administrative records for a certain period of time, or the legal obligation to share certain data on a police order for criminal investigation purposes;
- Consent: where you gave us explicit consent to process the data concerned, for example ‐ if applicable ‐ to share your data with partners or other third parties for commercial purposes.
If you have given your consent to the processing, you have the right to withdraw your consent at any time, by contacting us. We will discontinue the processing of your information upon receipt of your withdrawal. However, any processing performed prior to your withdrawal remains a legitimate processing based on a valid consent at the time. We will not be under the obligation to reverse the processing.
Questions, concerns and complaints
If you have questions or concerns about the way in which we use your personal data, you can contact our Data Protection Officer (DPO) via firstname.lastname@example.org
If you feel that an issue has not properly been resolved, you also have the right to lodge a complaint with the supervisory authority ICO.
inkscroll is a brand of inkscroll Ltd. having its address at Basingstoke, Hampshire, RG, and registered with Companies House under no. 6470516.
inkscroll acts as the data controller.