Legal
Overview
This policy (together with the Commetus services terms and conditions, app terms and conditions, and any other documents referred to in them) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. This data may be collected via the Commetus website, the Commetus app, Commetus’ social media pages, electronic mail, or by phone or paper-based means. By visiting www.commetus.co.uk , or by using the Commetus app or services, you are agreeing to the practices described in this policy. Commetus may change this policy from time to time.
Data protection principles
When processing your information, we must comply with the six enforceable principles of good practice. These provide that your personal data must be: Processed lawfully, fairly and in a transparent manner; Processed for specified, explicit and legitimate purposes; Adequate, relevant and limited to what is necessary; Accurate and kept up to date; Kept for no longer than is necessary; Processed in a manner that ensures appropriate security.
Information we collect from you
You may give to us, and we may collect, information such as the following: Name, address and job title; Contact information including email address and postal address; Company information (Managing Agents, Landlords and Contractors only); Demographic information such as postcode, preferences and interests; Internet Protocol (IP) addresses from the devices you use to access the Commetus website(s); Other information relevant to customer surveys and/or offers or loyalty schemes; Browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.
What we do with the information we gather
The table below outlines the purposes for which we will use the information you give to us, and the legal basis we will use to process such information. Purpose Legal basis To carry out our obligations under any contracts entered into between you and us, and to provide you with the information and services you request. Necessary for the performance of the contract between you and us. To notify you about changes to our services. Necessary for our legitimate business interests, to ensure you are aware of the latest updates to the services we provide, or may provide, to you. To provide you with information about other services we offer that are similar to those you have already purchased or enquired about. We will only do this if you give us your consent. To provide you with information about third-party services we feel may interest you by electronic means (email or SMS). Necessary for our legitimate business interests, to ensure you are aware of services that we feel you may benefit from. To permit selected third parties to provide you with information about goods or services we feel may interest you by electronic means (email or SMS). We will only do this if you give us your consent.
Disclosure
You agree that we have the right to share your personal information with: Google Cloud Stripe Apple and selected third parties including business partners, suppliers, installers, engineers and sub-contractors, to the extent it is necessary for the performance of any contract between you and us. Except as detailed, we do not share, sell or disclose to a third party any information collected by us. We will disclose your personal information to third parties: in the event that we enter into negotiations to sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer; if Commetus Limited or substantially all of its assets are acquired by a third party, in which case personal data held about its customers will be one of the assets transferred; or if we are under a duty to disclose or share your personal data to comply with any legal obligation, or to enforce or apply any contract between you and us or our website terms of use, or to protect the rights, property, or safety of Commetus Limited, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
Length of storage of data
The length of time that we will store your data will depend on the legal basis for why we are using that data, as follows: Legal basis Length of time Necessary for the performance of the contract between you and us. We will use/store your data for as long as it is necessary for the performance of the contract between you and us. Necessary for our legitimate business interests. We will use/store your data until you ask us to stop. However, if we can demonstrate that the reason we are using/storing your data overrides your interests, rights and freedoms, then we will continue for as long as necessary for the performance of the contract (or, if earlier, until we no longer have a legitimate interest). You have given us your specific, informed and unambiguous consent. We will use/store your data until you ask us to stop.
International transfers
We may transfer your personal data to service providers that carry out certain functions on our behalf. This may involve transferring personal data outside the UK to countries which have laws that do not provide the same level of data protection as UK law. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring the following safeguards are in place: We will only transfer your personal data to countries that have been deemed by the UK to provide an adequate level of protection for personal data, namely any country approved by the UK government in its published list of approved jurisdictions. We may use specific standard contractual terms approved for use in the UK which give the transferred personal data the same protection as it has in the UK, namely the International Data Transfer Agreement, or the International Data Transfer Addendum to the European Commission’s standard contractual clauses for international data transfers.
Security
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical and electronic safeguards to protect and secure the information we collect. If your information is provided to us as part of an event that we host in partnership with a third party, we may share your information with that third party and it will then be subject to the terms and conditions of their privacy policies. Data may also be supplied to agents of Commetus who provide services for Commetus. Commetus will obtain assurances from its agents that they will safeguard personal information in a manner consistent with this privacy policy. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to us; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Your rights
You have the right to: Request access to your personal data (a “subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it. Request correction of the personal data we hold about you. This enables you to have any incomplete or inaccurate data corrected, though we may need to verify the accuracy of the new data you provide. Request erasure of your personal data in certain circumstances, where there is no good reason for us continuing to process it, where you have successfully objected to processing, where we may have processed your information unlawfully, or where we are required to erase it to comply with local law. We may not always be able to comply for specific legal reasons, which will be notified to you if applicable. Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party). In some cases we may demonstrate compelling legitimate grounds that override your right to object. You also have the absolute right to object at any time to processing for direct marketing purposes. Request the transfer of your personal data to you or to a third party, in a structured, commonly used, machine-readable format. This right only applies to automated information you initially provided consent for, or where we used the information to perform a contract with you. Withdraw consent at any time where we are relying on consent to process your personal data. This will not affect the lawfulness of any processing carried out before you withdraw. If you withdraw consent, we may not be able to provide certain products or services. Request restriction of processing of your personal data, enabling you to ask us to suspend processing where: you want us to establish the data’s accuracy; our use is unlawful but you do not want us to erase it; you need us to hold the data to establish, exercise or defend legal claims; or you have objected to our use but we need to verify whether we have overriding legitimate grounds. If you wish to exercise any of your legal rights, or have any questions, comments and requests regarding this policy, please contact us by writing to the address at the top of this policy, or by emailing us at info@commetus.co.uk . You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee, or refuse to comply, if your request is clearly unfounded, repetitive or excessive. We may need to request specific information from you to confirm your identity as a security measure. You also have the right, at any time, to lodge a complaint with the Information Commissioner’s Office if you believe we are not complying with the relevant laws and regulations.
App services data deletion
Under your right to ask us to erase the information we hold about you, we facilitate a number of approaches to carrying out deletion of user details on our app platforms. If you wish for your information to be removed from the Commetus services, please contact us at info@commetus.co.uk .
Cookies
The website uses cookies to distinguish you from other users of the website. This helps us to provide you with a good experience when you browse the website and also allows us to improve it. Cookies help us monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website. For detailed information on the cookies we use, see our cookies policy.
Links to other websites
The Commetus website may contain links to other websites of interest. However, once you have used these links to leave the Commetus website, you should note that we do not have any control over that other website. We cannot be responsible for the protection and privacy of any information you provide whilst visiting such sites, and such sites are not governed by this privacy policy. You should exercise caution and look at the privacy policy applicable to the website in question.
Policy changes
Any changes we make to our policy in the future will be posted on this page. Please check back frequently to see any updates or changes to our policy.