Effective Date: 14/3/2025

Last Updated: 14/3/2025

Indeep respects your privacy and is committed to protecting your personal data. This Privacy Notice explains how we collect, use, disclose, and safeguard your personal data when you use our platform and consultancy services.

This Privacy Notice complies with the UK Data Protection Act (“The UK GDPR”) and other applicable UK laws.

Indeep is the data controller of the personal data collected through our website and web application. We are hosted in Microsoft UK, and we engage different data processors to support our business operations.

Our Processor: Microsoft UK.

Our service provision contract with Microsoft includes the role of Microsoft in hosting Indeep data, our email is hosted in Microsoft Cloud Services, UK.

Our business partners:

Osome: For legal and accounting services.

Calendly, Google Calendar, or Microsoft Bookings: For appointment-scheduling.

Hubspot: For marketing, sales, and customer service.

Stripe: For online payment services.

Who else?

If you have any questions about this notice or your data-related rights, you can contact us at:

Email: DPO@indeep.app

Address:
InDeep Ltd,
86-90 Paul Street,
London EC2A 4NE,
England.

Personal Data We Collect

We collect and process the following types of personal data:

• Contact Information:Names, email address, company name, job title, phone number, country.
• Communication Data:Any correspondence between you and us.
• Payment Card Data:any personal data related to the payment process, including, billing and invoices.

We do not collect special category data (e.g., health data, biometric data).

How We Collect Personal Data

We collect personal data through:

• Direct Interactions: When you provide us by your email and name via this website form.
• Cookies as a Tracking Technologies: See our Cookies Policyfor more details.

Legal Basis for Processing

We process your personal data under the following lawful bases:

1. Contractual Necessity:To provide our IT & consultancy services.
2. Consent:For marketing activities, where required.
3. Legal Obligation:For complying with legal obligations (e.g., tax and accounting).

How We Use Your Data

We use your personal data for the following purposes:

1. To provide and improve our serv
2. To communicate with you regarding inquiries or service requests (e.g., Demo Requests).
3. To manage our business relationships.
4. To comply with legal obligations (e.g., tax and accounting).
5. To process payments securely.
6. To issue bills and invoices.

Data Sharing and Processors

We may share your data with third-party data processors that support our business operations, including:

1. Legal and Accounting Advisors:To comply with legal and financial obligations.
2. Social Media Platforms:When you interact with us via LinkedIn, X, or other social channels.
3. Payment Service Providers:To process transactions securely.

We ensure that all our data processors comply with the UK GDPR and implement appropriate security measures.

International Data Transfers

We primarily store and process data within the UK. If we transfer data outside the UK (e.g., to third-party service providers), we ensure that transfers will be conducted on the basis of the adequate level of protection, or on the basis of Standard Contractual Clauses (SCCs).

Data Retention

We retain personal data only as long as necessary for:

1. Providing our services.
2. Meeting legal and accounting obligations.
3. Handling disputes.
4. Once data is no longer required, we securely destroy it.

Your Rights Under the UK GDPR

You have the following rights regarding your personal data:

Right to access: You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process.

Right to rectification: You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.

Right to erasure: You have the right to ask us to erase your personal information in certain circumstances.

Right to restriction of processing: You have the right to ask us to restrict the processing of your information in certain circumstances.

Right to objection: You have the right to object to processing if we are able to process your information because the process forms part of our legitimate interests.

Data Portability: This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another, or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated.

To exercise your rights, contact us at DPO@indeep.app.

If you believe we have mishandled your data, you have the right to lodge a complaint with the UK’s Information Commissioner’s Office (ICO) (www.ico.org.uk).

Security Measures

We implement industry-standard security measures to protect personal data, including:

1. Data encryption.
2. Access controls.
3. Secure data storage on Microsoft UK.

Despite our efforts, no system is 100% secure. We encourage you to take precautions when sharing personal information online.

Cookies Policy

We use cookies to enhance user experience and analyze website traffic. For details on the types of cookies we use and how to manage preferences, please refer to our Cookies Policy.

Changes to This Privacy Notice

We may update this notice periodically. Any changes will be posted on our website with an updated “Last Updated” date.

We recommend reviewing this notice regularly to stay informed about how we process your data.

Contact Us

For any questions about this Privacy Notice or data protection matters, please contact us at:

Email: DPO@indeep.app

Address:

InDeep Ltd,
86-90 Paul Street,
London EC2A 4NE,
England.

This Privacy Notice is designed to comply with the UK GDPR while providing transparency on how we handle personal data.