Privacy Policy

At Ovalwood, we understand how important your privacy is. As a company in the security market, we are committed to doing everything we can to protect any personal data that you give to us. This privacy policy applies when you visit or use our website, platform, and other services, that refer or link to this privacy policy. This privacy policy may be supplemented by additional privacy statements, terms, or notices provided to you.

We will indicate during the launch of our products and services what types of personal data are required and those that are requested. You may choose not to submit the requested information, but that may limit or prohibit the services we can provide to you.

The data controller of the personal data referred to in this Privacy Notice is Ovalwood Limited (company no. 13400915) of 1 Pickle Mews, London, England, SW9 0FJ.

Collection of your Personal Data

People who use our website

We will collect personal data provided via the web forms on our website. We will also automatically collect the following information (this will always be anonymised and cannot be traced back to you and will only be used for the purposes of improving our website and understanding how users interact with it):

Technical information, including the Internet Protocol (IP) address used to connect your computer to the Internet, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform; and
Information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our website (including date and time), products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks), methods used to browse away from the page

Our customers and people we work with

We collect personal data relating to our customers, the employees of our customers and other individuals we work with. This personal data includes:

Name, address, contact details
Position and Company
Professional social media (for example, LinkedIn and Twitter)
Order history and payment details
Account login credentials, such as usernames and passwords, password hints and similar security information
Communication preferences, including preferred language
Records of contact and correspondence
Applications and CVs

Use of your Personal Data

People who use our website

We use personal data relating to people who use our website for the purposes of administering, developing, and promoting our business.

Our legal ground for using the personal data we collect relating to people who visit our website is that doing so is necessary for the legitimate interests of our business. We will not use personal data for our legitimate interests where an individual’s interests and rights override our business interests.

Our customers and people we work with

We use personal data relating to our customers and people we work with for the purposes of administering, developing, and promoting our business.

If you are an individual who has a contract with us, our primary ground for using personal data relating to you will be for the performance of the contract. If you do not provide the personal data we require to perform the contract, we may not be able to provide services to you. We may also use personal data relating to you separately from the performance of the contract, where doing so is necessary for the legitimate interests of our business or the legitimate interests of a third party such as our customers. We will not use personal data for our legitimate interests where your interests and rights override the legitimate interests we have identified.

If you are an individual whom we work with but do not have a direct contract with (for example, employees of our customers or services providers), our legal ground for using personal data relating to you is that doing so is necessary for legitimate interests of our business or the legitimate interests of a third party such as our customers. We will not use personal data for our legitimate interests where your interests and rights override the legitimate interests we have identified.

Retention of your Personal Data

We will retain your personal data for the duration of your contract with us or as needed to provide you with access to our services. Where we have no legitimate business need to retain your personal data, we will delete or anonymise it. We will only keep personal data collected for longer where necessary to comply with our legal obligations or to safeguard our legal rights.

Storage of your Personal Data

We store personal data within the European Economic Area. However, the personal data held may be transferred to service providers or others based outside the EEA. Where we transfer personal data outside of the EEA, we implement safeguards such as standard contractual clauses approved by the European Commission or the EU-US Privacy Shield.

Disclosure of your Personal Data

Your organisation

If you access a service through a subscription administered by your organisation, your personal data and certain usage data gathered through the service may be accessed by or shared with the administrators authorised by your organisation for usage analysis, subscription management and compliance, training course progress, performance, and remediation.

Service providers

To help administer, develop, and promote our business, we share personal data with and receive personal data from the following types of service providers:

Payment processors
Advertising partners
Analytics service providers
IT providers
Email database management
Consumer relationship management
Professional services (e.g., accountants and lawyers)

We have contracts in place with these service providers that strictly govern how they may use the personal data we share with them.

For legal reasons

We will disclose your personal data if we have a good faith belief that such disclosure is necessary to:

meet any applicable law, regulation, legal process, or other legal obligation
detect, investigate, and help prevent security, fraud, or technical issues; and/or
protect the rights, property, or safety of Ovalwood, our users, employees, or others; and
as part of a corporate transaction, such as a transfer of assets to or an acquisition by or a merger with another company

Rights in relation to your Personal Data

You have the right to:

Information about how we use personal data (this policy document)
Access to personal data
Object to direct marketing and the use of personal data based on the grounds of legitimate interest
Erasure of personal data
Portability of personal data
Withdraw consent where our use of personal data is based on consent
Rectification of personal data
Restriction of personal data
Complain to the Information Commissioner’s Office

Please be aware that these are not absolute and there may be some situations in which they cannot be exercised, or they are not relevant. You can find out more detail about these rights on the website of the Information Commissioner’s Office – www.ico.org.uk.

Should you no longer wish to be contacted please unsubscribe or contact us by email (support@ovalwood.com). Your request will be processed within 28 days. If you are a customer, your preferences can also be managed directly via your account.

Other sites referenced on www.ovalwood.com

Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers, and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

Children’s privacy

We are compliant with the requirements of COPPA (Children’s Online Privacy Protection Act). We do not collect any information from anyone under 13 years of age. Our website, products and services are all directed to people who are at least 13 years old and over.

Changes to our privacy policy

Any changes we make to our privacy policy in the future will be posted on this page. Where this affects the consent needed from you then we will seek your renewed permission the next time you visit the website.

Your consent

By using our site, you consent to our website’s privacy policy.

Contact

If you have any questions, comments, complaints or requests regarding this privacy policy or our processing of your personal data, please contact our Data Protection Officer at:

Email: support@ovalwood.com

Post: Should be sent for the attention of the Data Protection Officer to:

Ovalwood Limited

1 Pickle Mews

Oval

London

SW9 0FJ

This privacy policy was last updated on 8th September 2022.