REalyse Privacy Policy

1. Important Information and Who We Are

Purpose of This Privacy Policy

This privacy policy explains how REalyse collects and processes your personal data through your use of this website and/or other services we may provide, including data you provide when you:

• enquire about or purchase a product or service; or
• set up a REalyse account.

This website is not intended for children, and we do not knowingly collect data relating to children.

This privacy policy supplements other privacy notices we may provide on specific occasions and is not intended to override them.

Controller

REalyse is the controller and responsible for your personal data (referred to as "REalyse", "we", "us" or "our").

We have appointed a Data Protection Officer (DPO):

• Name: Gavriel Merkado
• Email: support@realyse.com

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO) (www.ico.org.uk). We would appreciate the opportunity to deal with your concerns before you approach the ICO, so please contact us first.

Changes to the Privacy Policy

We keep this privacy policy under regular review.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes.

Third-Party Links

This website may include links to third-party websites, plug-ins, and applications. We do not control these third-party websites and are not responsible for their privacy statements. Please review the privacy policy of every website you visit.

2. The Data We Collect About You

Personal data means any information about an individual from which that person can be identified.

We may collect, use, store, and transfer the following types of personal data:

• Identity Data: first name, maiden name, last name, username, marital status, title, date of birth, gender
• Contact Data: billing address, delivery address, email address, telephone numbers
• Financial Data: bank account and payment card details
• Transaction Data: details about payments and services purchased
• Technical Data: IP address, login data, browser type and version, time zone, location, operating system, platform
• Profile Data: username and password, purchases, interests, preferences, feedback
• Usage Data: information about how you use our website, products, and services
• Marketing and Communications Data: marketing and communication preferences

Aggregated Data

We also collect Aggregated Data such as statistical or demographic data. This is not personal data unless combined with identifiable personal data.

Special Categories of Data

We do not collect:

• special categories of personal data (e.g. health or biometric data); or
• data relating to criminal convictions or offences.

If You Fail to Provide Personal Data

If you fail to provide personal data required by law or contract, we may be unable to perform the contract and may need to cancel a product or service. You will be notified if this applies.

3. How Is Your Personal Data Collected?

We collect data through the following methods:

Direct Interactions

You may provide data when you:

• apply for products or services
• create an account
• subscribe to services or publications
• request marketing
• enter competitions or surveys
• provide feedback or contact us

Automated Technologies

As you interact with our website, we automatically collect Technical Data using cookies, server logs, and similar technologies.

Third Parties and Public Sources

Including:

• analytics providers
• advertising networks
• search information providers
• payment and delivery service providers
• data brokers or aggregators
• publicly available sources

4. How We Use Your Personal Data

We will only use your personal data where permitted by law, including:

• to perform a contract with you
• for our legitimate interests (where your rights do not override those interests)
• to comply with legal obligations

We do not generally rely on consent, except for third-party marketing communications.

Purposes for Processing

5. Marketing

We may use your data to form a view on what products or services may be of interest to you.

You will receive marketing communications from us if you have requested information or purchased services and have not opted out.

Third-Party Marketing

We will obtain your express opt-in consent before sharing your personal data with third parties for marketing purposes.

Opting Out

You can opt out of marketing communications at any time by contacting us. This does not apply to service-related communications.

6. Disclosures of Your Personal Data

We may share your personal data with:

• internal third parties within the REalyse group
• external third parties such as service providers and advisers
• third parties in the event of a business sale, transfer, or merger

All third parties must respect the security of your personal data and process it only according to our instructions.

7. International Transfers

Some external third parties are based outside the UK.

Whenever we transfer personal data outside the UK, we ensure appropriate safeguards are in place, including adequacy decisions or approved contractual protections.

8. Data Security

We have implemented appropriate security measures to prevent personal data from being accidentally lost, used, accessed, altered, or disclosed without authorisation.

Access to personal data is limited to those with a business need to know. We also have procedures in place to manage suspected personal data breaches.

9. Data Retention

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including legal, regulatory, tax, accounting, or reporting requirements.

We may retain data for longer in the event of a complaint or potential litigation.

10. Your Legal Rights

You have rights under data protection laws, including the right to:

• access your personal data
• request correction of inaccurate data
• request erasure of personal data
• object to processing
• request restriction of processing
• request data portability
• withdraw consent at any time

Requests are usually free of charge. We may need to verify your identity before responding.

We aim to respond to all legitimate requests within one month.