1. Introduction

At [AT-RACK] ("we", "us", or "our"), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website [www.at-rack.co.uk] ("Website"), use our services, or interact with us. It also outlines your rights under various data protection laws, including the General Data Protection Regulation (GDPR), the UK Data Protection Act (DPA), the California Consumer Privacy Act (CCPA), and other relevant international privacy laws.

By using our Website or submitting any personal information to us, you agree to the terms of this Privacy Policy.

2. Information We Collect

We collect various types of personal data depending on your interaction with our Website and services. This data may be collected directly from you or automatically when you use the Website.

a. Information You Provide to Us

- Contact Submission Forms: When you fill out a contact form, we collect your name, email address, phone number, company name, and any other information you choose to provide in the message.
- Account Information: If applicable, when you create an account with us, we collect login credentials (username and password), contact details, and other relevant information necessary to provide you with our services.
- Communication: If you contact us via email, phone, or other means, we may collect details of your communication and any personal data you provide.

b. Information We Collect Automatically

When you visit our Website, we collect certain information automatically through the use of cookies and other tracking technologies. This includes:

- Device Information: Such as your IP address, browser type, operating system, and referring URLs.
- Usage Data: Information about how you use our Website, including the pages you view, time spent on the Website, and any clicks or interactions with content.
- Cookies and Tracking Technologies: For more information on the cookies we use, please review our Cookie Policy.

c. Information from Third Parties

We may receive information about you from third-party services we integrate with, such as:

- Google Analytics: Aggregated data on user behaviour and site traffic.
- Dealfront (formerly Leadfeeder): Business analytics data identifying companies that visit our Website.
- Facebook Pixel and Twitter Pixel: Data related to your interactions with our ads and retargeting activities.

3. How We Use Your Information

We use your personal information for the following purposes:

a. To Provide and Improve Our Services

- To respond to your inquiries and provide customer support.
- To process transactions and manage your account (if applicable).
- To deliver relevant content and personalise your experience on our Website.

b. Analytics and Performance Monitoring

- To understand how users interact with our Website and services using tools like Google Analytics.
- To monitor and improve Website performance, functionality, and user experience.

c. Marketing and Advertising

- To deliver tailored advertising via retargeting based on your interactions with our Website, using tools like Facebook Pixel and Twitter Pixel.
- To send you marketing communications where you have opted in or where allowed by applicable law.

d. Legal Compliance and Security

- To comply with applicable legal obligations and regulatory requirements.
- To detect, prevent, and respond to fraud, security breaches, and other potentially harmful activities.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under the GDPR and UK DPA:

a. Consent

We rely on your consent for processing non-essential cookies and for sending marketing communications, where required. You can withdraw your consent at any time by contacting us or adjusting your cookie preferences.

b. Performance of a Contract

We process personal data when it is necessary to perform a contract with you or provide you with the services you have requested.

c. Legitimate Interests

We may process personal data for our legitimate interests, including improving our Website, analyzing site traffic, and ensuring security, as long as these interests are not overridden by your rights.

d. Compliance with Legal Obligations

We may process personal data when we are legally required to do so, such as for tax or regulatory compliance.

e. CCPA Compliance

Under the CCPA, we process personal information based on your right to know what data is collected, your right to request deletion, and your right to opt out of the sale of personal information.

5. How We Share Your Information

We do not sell your personal information to third parties. However, we may share your data with the following entities:

a. Service Providers

We use third-party service providers to help us operate and improve our Website and services. These include providers of analytics (e.g., Google Analytics), business lead generation (e.g., Dealfront), and marketing tools (e.g., Facebook and Twitter Pixels). These providers process your data on our behalf under strict confidentiality agreements and are not permitted to use your data for any purpose other than providing their services.

b. Legal and Regulatory Authorities

We may disclose your personal information if required to do so by law or in response to valid legal requests by public authorities (such as a court order or government agency).

c. Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring organisation.

6. International Data Transfers

Your personal data may be transferred to, and processed in, countries outside of your jurisdiction. These countries may have different data protection laws from your country of residence.

When we transfer personal data internationally, we ensure appropriate safeguards are in place to protect your information, such as using Standard Contractual Clauses approved by the European Commission.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable laws. Once your data is no longer needed, we will securely delete or anonymise it.

8. Your Rights

a. Under GDPR and UK DPA

If you are located in the European Economic Area (EEA) or the UK, you have the following rights under the GDPR and UK DPA:

- Right to Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You can request that we correct any inaccuracies in your personal data.
- Right to Erasure (Right to be Forgotten): You can request that we delete your personal data under certain conditions.
- Right to Restrict Processing: You can request that we restrict the processing of your personal data in certain circumstances.
- Right to Data Portability: You have the right to request the transfer of your personal data to another service provider in a structured, commonly used format.
- Right to Object: You can object to our processing of your personal data for direct marketing or legitimate interest purposes.

b. Under CCPA

If you are a California resident, you have the following rights under the CCPA:

- Right to Know: You can request details about the categories and specific pieces of personal information we collect about you.
- Right to Delete: You can request the deletion of your personal information, subject to certain exceptions.
- Right to Opt-Out: You have the right to opt out of the sale of your personal information.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise any of these rights, please contact us at [email protected].

9. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it from unauthorised access, loss, or misuse. However, no method of transmission over the Internet or electronic storage is 100% secure. Therefore, while we strive to protect your personal data, we cannot guarantee its absolute security.

10. Children's Privacy

Our Website and services are not intended for children under the age of 16, and we do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a child under 16, we will take steps to delete it as soon as possible.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any significant changes by posting the updated policy on our Website or sending you a notification.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal information, please contact us at:

AT-RACK Limited
1 Andromeda House, Calleva Park, Aldermaston, Berkshire, England, RG7 8AP
[email protected]
+44 (0) 1635 777 071