This privacy notice is provided to give transparency about how and why your personal data is used and to ensure that you are aware of your rights under data protection legislation.

Who is the Data Controller?
Innovia Technology Ltd (Innovia) is the Data Controller for your personal data. Our correspondence address is St Andrew’s House, St Andrew’s Road, Cambridge, CB4 1DL, UK. We can be contacted on +44 1223 248888 or data.protection@innoviatech.com.

Which personal data do we process and why?
We process your personal data when engage with you commercially either as a prospective or existing client so that we can supply or negotiate the supply of our services. We use your personal data for account management purposes, maintaining communication and managing projects. We also use your personal data for the purpose of providing you focussed marketing material and updates on our services.

As a client or prospective client, we process your name and contact data, such as email address, telephone number, address as well as job title and details and type of the organisation you work for. We will make notes of our interactions with you at meetings which may contain your personal data. The lawful basis we use to process this information for the purposes stated is Article 6.1.f UK GDPR – legitimate interest. If you fail to provide the information required, we will be unable to provide the agreed products and services to you.

We are a business to business organisation and will usually obtain your personal data directly from you when you contact us or social media interactions. We may be provided with your contact details by a third party, for example through a client or contact referral.

We will also use your data to send you appropriate marketing material. The lawful basis we use for this is Article 6.1.f UK GDPR (Legitimate Interest). The legitimate interest we pursue is to grow our business through retaining and expanding our client base.  As with any legitimate interest processing, you have the right to object to this and you can do so by contacting us using the information provided above.

We collect data through our website analytics some of which may identify you, such as an IP address. Our Cookie Policy details the cookies we use and you can manage your preferences through our cookie consent platform.

Who are the recipients of your data?
As a general principle, we will not transfer your personal data to other recipients without your permission. There are some exceptions to this:

• It is possible, that we might be obliged to disclose personal information in response to a court order or other lawful obligation.
• We may share your data as part of a sale, transfer, or merge part of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them.
• We will share personal data with our approved contractors to deliver the services we have agreed to provide.
• We may share personal data with our professional advisors including our lawyers.

What about data processed by third parties on our behalf?
We use the services of other organisations in the processing your data. We use cloud-based services for email and document storage, collaboration, survey and video conference purposes.Those organisations that process personal data on our behalf are subject to a data processing contract as required by Article 28 of the UK GPDR. This ensures that your data is handled in accordance with the UK GPDR.

Do we transfer your data outside of the UK?
Personal data is held both in the UK and transferred to other jurisdictions such as the EU, New Zealand and the USA. The transfer to the USA is facilitated through the UK extension to the EU – US Data Privacy Framework. Data transferred to the EU and New Zealand is facilitated by an adequacy decision granted by the UK.

How long do we keep your data?
We will retain your data only for the time we require it for the purposes stated and / or where we have a legal obligation or other legitimate purpose. We will retain the personal data of our clients for a minimum of 7 years.

These are your rights. 

The UK GDPR provides you with several rights in relation to the data of your we process. The rights relevant to our activities are:

• You have the right to get access to and copies of your personal data.
• You can ask us to rectify any inaccurate information we may be holding.
• You can request we restrict our processing of your data.
• You can ask us to erase your personal data if it is no longer required for the purpose we collected it or have no legal obligation to retain it.
• You have the right to object to processing we undertake under a legitimate interest basis.

If you want to exercise any of these rights, please contact us using the above contact details. You have the right to lodge a complaint about our processing with a supervisory authority, in the UK, this is the Information Commissioner’s Office.

The Information Commissioner’s Office. Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Helpline number: 0303 123 1113