Last updated: October 27, 2021
Your privacy is important to us. It is Klopp Industries Ltd's policy to respect your privacy regarding any information we may collect from you across all our websites and software we own and operate. Our products are designed to use the minimum amount of data required to run the service and collect analytics to improve them.
If there’s any reason you don’t agree with this privacy policy, please don’t use our services, which include anything that Klopp Industries Ltd creates, owns and operates.
Here’s a breakdown of sections for this policy:
- Information we collect
- Legal bases for processing
- Collection and use of information
- Disclosure of personal information to third parties
- International transfers of personal information
- Your rights and controlling your personal information
- Cookies
- Business transfers
- Limits of our policy
- Changes to this policy
We will only process personal information in accordance with the Data Protection Legislation which for the purposes of this privacy policy shall mean: (i) UK GDPR (the retained EU law version of the General Data Protection Regulation ((EU) 2016/679), together with the UK Data Protection Act 2018) and (ii) any other privacy legislation worldwide, applicable to Klopp Industries Ltd’s business.
Our company number is 10102257, and our registered office is at 20-22 Wenlock Road, London N1 7GU. We are registered with the Information Commissioner’s Office in the UK, and our registration number is ZA556272. Our nominated representative is Wilhelm Klopp ([email protected]).
We’ve undergone the rigorous internationally-recognised ISO 27001 certification process and you can find our ISO certification here.
Where you contract with us to provide the service to you, we will act as data processor and you will act as data controller. This privacy policy forms the basis of the instructions to us, under which we will process relevant personal data, and comply with GDPR.
Any reference to "you" throughout, shall be deemed to refer to underlying data subjects for which you are a data controller, as appropriate.
When you visit our website, our servers may automatically log the standard data provided by your web browser. It may include your computer’s Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details.
This means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may ask for, or may receive from Slack (if you’re using one of our Slack apps) after your approval, personal information, such as your:
Name (first name and last name)
Email
Slack username
IP address
When using one of our paid offerings, we may also ask for the following information:
Credit card information (processed directly by our payments provider in a manner compliant with the Payment Card Industry (PCI) Data Security Standard)
Billing address
VAT identification number
This data allows us to personalise functionality within our applications, display names within our products, identify information for support diagnosis and charge you the correct fees depending on our product offerings and your local government taxation. We may use your email to contact you regarding your product usage for things such as supporting issue troubleshooting, billing, cancellations and welcoming you to our products.
Business data refers to data that accumulates over the normal course of operation on our platform. This may include transaction records, stored files, user profiles, analytics data and other metrics, as well as other types of information, created or generated, as users interact with our services.
Some of our products may receive information about you through platforms such as Slack. We also work closely with third parties (including, for example, business partners, suppliers, sub-contractors, analytics providers, and search information providers) and may receive information about you from them.
We may also collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users accessing a specific website or product feature. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy. We do not collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
Our main hosting providers are Heroku and Amazon Web Services, both located within the United States to protect and store your information. They’re updated regularly and follow the latest global security standards in data protection and privacy. Whenever you act with one of our services, your data is protected and encrypted both at rest and in transit and transmitted through secure connections. We may transfer your information to a country other than your location, however we offer EU Model Clauses known as ‘Standard Contractual Clauses’ to meet GDPR requirements for those users to whom these apply.
We will process your personal information lawfully, fairly and in a transparent manner. We collect and process information about you only where we have legal bases for doing so.
These legal bases depend on the services you use and how you use them, meaning we collect and use your information only where:
it’s necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract (for example, when we provide a service you request from us);
it satisfies a legitimate interest (which is not overridden by your data protection interests), such as for research and development, and to protect our legal rights and interests;
you give us consent to do so for a specific purpose (for example, you might consent to us sending you marketing emails); or
we need to process your data to comply with a legal obligation.
Where you consent to our use of information about you for a specific purpose, you have the right to change your mind at any time (but this will not affect any processing that has already taken place).
We don’t keep personal information for longer than is necessary. While we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification. That said, we advise that no method of electronic transmission or storage is 100% secure and cannot guarantee absolute data security. If necessary, we may retain your personal information for our compliance with a legal obligation or in order to protect your vital interests or the vital interests of another natural person.
We may collect, hold, use and disclose information for the following purposes and personal information will not be further processed in a manner that is incompatible with these purposes:
to provide you with our platform’s core features;
to process any transactional or ongoing payments;
to contact and communicate with you; and
for internal record keeping and administrative purposes.
If you are a customer, you will only be contacted if you agree to it (by agreeing to this privacy policy). In addition, if you don't want us to use your personal data for any of the other reasons set out in this privacy policy, you can let us know at any time by contacting us at [email protected], and we will delete your data from our systems. However, you acknowledge this will limit our ability to provide any service to you.
Generally we do not rely on consent as a legal basis for processing your personal data other than in relation to our marketing communications. You have the right to withdraw consent to marketing at any time by unsubscribing via the Simple Poll Dashboard (if using Simple Poll), or if using another of our products, please email [email protected], and we will either delete your data from our systems or move your data to our "unsubscribe list". However, you acknowledge this will limit our ability to provide the best possible service to you.
Some of our products are based within Slack and integrate tightly with the Slack service. Almost all of the data that these apps collect originates from within Slack.
If you sign into your Slack account on one of our websites, you grant us access to and permission to process personal data in your Slack account and, if you are a data controller of personal information, to process personal data of the Slack user accounts you give us access to by installing one of our Slack apps.
Similarly, Simple Poll is an app for the Slack service and as such, you may find it useful to review the relevant Slack policies including the Slack privacy policy. You can find it at: https://slack.com/legal
As such, you may find it useful to review the relevant Slack policies including the Slack privacy policy. You can find it at: https://slack.com/legal
The data that you instruct Slack to pass to Simple Poll is stored, so that interaction with the Slack API is possible and core functionality within our applications is possible through the data you give to one of our apps, including access tokens, team, channel and user metadata.
By design, our products have very little access to the data in your Slack workspace: they cannot view any messages or activities in any of your channels or conversations and also do not have access to any of your files.
Use of our services is not permitted for children under the age of 16. If you are aware of anyone under the age of 16 having supplied us with personal data, please contact us so that we can take steps to delete such information.
We may disclose personal information to third party service providers for the purpose of enabling them to provide their services, including (without limitation) IT service providers, data storage, web-hosting and server providers, professional advisors and payment systems operators. We have a dedicated page that lists sub-processors we employ which may access personal information for the purpose of providing services to you and conducting our business. We have data protection agreements in place with all our subprocessors.
None of our services display any advertisements, and we never sell your information or share any data with advertisers.
The personal information we collect is stored and processed in the United States and United Kingdom, or where we or our partners, affiliates and third-party providers maintain facilities. By providing us with your personal information, you consent to the disclosure to these overseas third parties.
We will ensure that any transfer of personal information from countries in the United Kingdom (UK) and/or the European Economic Area (EEA) to countries outside the UK/EEA will be protected by appropriate safeguards, for example by using standard data protection clauses approved by the European Commission, or the use of binding corporate rules or other legally accepted means. Your acceptance of this privacy policy shall be your consent to permitting us to store or transfer data outside the UK/EEA if it is necessary for us to do so.
Choice and consent: By providing personal information to us, you consent to us collecting, holding, using and disclosing your personal information in accordance with this privacy policy.
Information from third parties: If we receive personal information about you from a third party, we will protect it as set out in this privacy policy. If you are a third party providing personal information about somebody else, you represent and warrant that you have such person’s consent to provide the personal information to us.
Restrict: You may choose to restrict the collection or use of your personal information. If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by opting out via the Simple Poll Dashboard (if using our Simple Poll service) or by contacting us using the details below. If you ask us to restrict or limit how we process your personal information, we will let you know how the restriction affects your use of our website or products and services.
Access and data portability: You may request details of the personal information that we hold about you. You may request a copy of the personal information we hold about you. Where possible, we will provide this information in CSV format or other easily readable machine format. You may request that we erase the personal information we hold about you at any time. You may also request that we transfer this personal information to another third party.
Correction: If you believe that any information we hold about you is inaccurate, out of data, incomplete, irrelevant or misleading, please follow the instructions in the Simple Poll Dashboard (if using our Simple Poll service) or by contacting us using the details below. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading or out of date.
Notification of data breaches: We will comply with laws applicable to us in respect of any data breach.
Complaints: If you believe that we have breached a relevant data protection law and wish to make a complaint, please contact us in the first instance using the details below and provide us with full details of the alleged breach. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint. You also have the right to contact a regulatory body or local data protection authority in relation to your complaint.
Unsubscribe: To unsubscribe from marketing communications, please opt-out in the Simple Poll Dashboard (if using our Simple Poll service), contact us using the details below, or opt-out using the opt-out facilities provided in the communication.
Automatic deletion: Your user account (including an email address we may store directly) and all data is automatically deleted within 4 years of inactivity.
We rely on “cookies” for certain functionality of our services. A cookie is a small piece of data that our website stores on your computer, and accesses each time you visit, so we can understand how you use our service. Please refer to our Cookie Policy for more information.
If we or our assets are acquired; or in the unlikely event that we go out of business or enter bankruptcy, we would include data among the assets transferred to any parties who acquire us. You acknowledge that such transfers may occur, and that any parties who acquire us may continue to use your personal information according to this policy.
Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.
At our discretion, we may change our privacy policy to reflect current acceptable practices. We will take reasonable steps to let users know about changes via our service. Your continued use of this service after any changes to this policy will be regarded as acceptance of our practices around privacy and personal information.
If we make a significant change to this privacy policy, for example changing a lawful basis on which we process your personal information, we will ask you to re-consent to the amended privacy policy.
Klopp Industries Ltd Data Protection Contact
Wilhelm Klopp
[email protected]
