5. WHO DO WE SHARE YOUR PERSONAL INFORMATION?

• Our Partners and other third-party service providers that we made need to share such information with to enable them to perform the services we require of them. We ensure that these third parties cannot use or supply your personal information unless we have given them permissions to do so. They will also not share your personal information with any other organisation apart from us. They also commit to protect the data they hold on our behalf and to retain it for the period we instruct. The categories of third parties we may share personal information with are as follows:

1. Marketing Programs; 

2. Data Analytics Services;

3. Sales & Marketing Tools;

• We also may need to share your personal information in the following situations:

1. Business Transfers - We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company;

2. Partners - We may share your information with our Partners, in which case they are legally required to abide by this privacy notice. Also any Affiliates which include any parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us;

3. Insurers and/or professional advisers insofar as reasonably necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, obtaining professional advice.

4. Our database will be stored on the servers of our hosting services.

5. In addition to the specific disclosures of personal data, we may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. We may also disclose your personal data where such disclosure is necessary for the establishment, exercise, or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.

6. Who are these people - Third-party service providers are used for business purposes, to properly run our site and business; anti-fraud checking providers to keep both you and use safe and secure; analytics and search engine providers like Google who improve and optimise our website; marketing tool providers that help us enable our marketing of our business and other such business which provide the services which allow us to function and offer you this service. 

6. KEEPING YOUR INFORMATION SAFE

1. We will take appropriate technical and organisational precautions to secure your data and to prevent the loss, misuse or alteration of your personal data.

2. We will store your data on secure servers, computers and mobile devices, and in secure manual record-keeping systems.

3. Data relating to your enquiries and financial transactions that is sent from your browser to your server, or from our server to your web browser, will be protected using encryption technology.

4. You acknowledge that the transmission of unencrypted or inadequately encrypted data over the Internet is inherently insecure, and we cannot guarantee the security of data sent over the Internet.

5. You should ensure that any authentication details, password and any login details are not susceptible to being guessed, whether by a person or a computer program. You are responsible for keeping the password you use for accessing our Services confidential and we will never ask you for your password, except when you log in to our Services.

7. HOW LONG DO WE NEED TO KEEP YOUR INFORMATION?

These are our data retention policies and procedures, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of data.

1. Data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.

2. We will retain your data for the purposes of any business transaction and account creation.

3. We may retain your data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. This may entail your data being retained for longer period.

4. We may retain your data for as long as required for the requirements of our accounting obligations and for providing details to the HMRC if requested.

5. Wherever possible if we are required to retain your data for a longer period and we can do so safely we will anonymise your data. 

8. INTERNATIONAL TRANSFERS OF YOUR DATA

We provide information about the circumstances in which your data may be transferred to a third country under UK, EU and/or US data protection law.

1. We may transfer your personal data to the European Economic Area (EEA) or the US from the UK and process that personal data in the EU for the purposes set out in this policy, and may permit our suppliers and subcontractors to do so, during any period with respect to which the EU is not treated as a third country under UK data protection law or benefits from an adequacy decision under UK data protection law; and We may transfer your personal data from the UK to the EEA and process that personal data in the EEA for the purposes set out in this policy, and may permit our suppliers and subcontractors to do so, during any period with respect to which EEA states are not treated as third countries under UK data protection law or benefit from adequacy regulations under UK data protection law.

2. We may transfer outside of the UK, other than the EU or EEA, If we intend to do this we will notify you, in doing so we will ensure that the terms under which Data is held is such that it complies with all of the same or similar requirements as if it was held in the EU, EEA or EU.

3. The hosting facilities for our website are situated in the UK only. The competent data protection authorities have made an adequacy determination with respect to the data protection laws of each of these countries. Transfers to each of these countries will be protected by appropriate safeguards, namely the use of standard data protection clauses adopted or approved by the competent data protection authorities.

​

9. YOUR RIGHTS

1. We have summarised the rights that you have under UK Data Protection Law (Data Protection Act 2018) and other laws in other jurisdictions where relevant. 

2. Further information can be found at https://ico.org.uk/  , if you are in Europe contact https://EC.europa.eu/info/law/law-topic/data-protection/data-protection-eu_en and for the US contact The Federal Trade Commission at www.ftc.gov .  

3. Your principal rights under data protection law are:

   1. the right to access - you can ask for copies of your data;

   2. the right to rectification - you can ask us to rectify inaccurate data and to complete or incomplete personal data;

   3. the right to erasure - you can ask us to erase your data;

   4. the right to restrict processing - you can ask us to restrict the processing of your data;

   5. the right to object to processing - you can object to the processing of your data;

   6. the right to data portability - you can ask that we transfer your data to another organisation or to you;

   7. the right to complain to a supervisory authority - you can complain about our processing of your data; and

   8. the right to withdraw consent - to the extent that the legal basis of our processing of your personal data is consent, you can withdraw that consent.

4. You have the right to confirm as to whether or not we process your data and, where we do, access to the personal data, together with certain additional information. That additional information includes details of the purposes of the processing, the categories of personal data concerned and the recipients of the personal data. Providing the rights and freedoms of others are not affected, we will supply you with a copy of our data. The first copy will be provided free of charge, but additional copies may be subject to a reasonable fee.

5. You have the right to have any inaccurate data about you rectified and, taking into account the purposes of the processing, to have any incomplete personal data about you completed.

6. In some circumstances you have the right to erase your data without undue delay. Those circumstances include: the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; you withdraw consent to consent-based processing; you object to the processing under certain rules of applicable data protection law; the processing is for direct marketing purposes; and the personal data have been unlawfully processed. However, there are exclusions of the right to erasure. The general exclusions include where processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation; or for the establishment, exercise or defence of legal claims.

7. In some circumstances You have the right to restrict the processing of your data. Those circumstances are: you contest the accuracy of the personal data; processing is unlawful but you oppose erasure; We no longer need the data for the purposes of our processing, but you require data for the establishment, exercise or defence of legal claims; and You have objected to processing, pending the verification of your objection. Where processing has been restricted on this basis, We may continue to store your data. However, we will only otherwise process it: with your consent; for the establishment, exercise or defence of legal claims; for the protection of the rights of another natural or legal person; or for reasons of important public interest.

8. You have the right to object to our processing of your data on grounds relating to your particular situation, but only to the extent that the legal basis for the processing is that the processing is necessary for: the performance of a task carried out in the public interest or in the exercise of any official authority vested in Us; or the purposes of the legitimate interests pursued by us or by a third party. If you make such an objection, we will cease to process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.

9. You have the right to object to our processing of Your data for direct marketing purposes (including profiling for direct marketing purposes). If you make such an objection, we will cease to process your data for this purpose.

10. You have the right to object to our processing of your data for scientific or historical research purposes or statistical purposes on grounds relating to your particular situation, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

11. To the extent that the legal basis for our processing of your data is: consent; or

• hat the processing is necessary for the performance of a contract to which you are party or in torder to take steps at your request prior to entering into a contract, and such processing is carried out by automated means, you have the right to receive your data from us in a structured, commonly used and machine-readable format. However, this right does not apply where it would adversely affect the rights and freedoms of others.

• If you consider that our processing of your data infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. In relation to complaints under EU data protection law, you may do so in the EU member state of your habitual residence, your place of work or the place of the alleged infringement; in relation to complaints under UK data protection law, you should do so in the UK. In the US you should make a complaint to your state regulator.

• To the extent that the legal basis for our processing of your data is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.

• California Civil Code Section 1798.83, also known as the 'Shine The Light' law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided.

• You may exercise any of your rights in relation to your data by emailing the company information email address here and making a Data Subject Request. Such a request must only be in respect of your one data.

10. DO NOT TRACK

1. ONEWAYX LTD does not support “Do Not Track” requests. Whether or not any of the third-party services uses “Do Not Track” requests you must read their privacy policies.

2. You can check on your browser and set your options to Do Not Track independently of our App/website should you wish to do so. 

11. UPDATING THIS POLICY

1. We may update this policy from time to time to ensure we continue to be in compliance with the appropriate laws and regulations or if we offer additional services on our app/website which would require this policy to be updated.

2. Please see at the bottom of this document the “Last Updated Date.” 

3. We recommend that you read this policy from time to time to ensure you understand how we deal with your Data.