Introduction
Welcome to ByPerks Limited's Privacy Policy. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and purchase our browser extensions, and tell you about your privacy rights and how the law protects you.
This privacy policy is provided in a layered format so you can click through to the specific areas set out below. Please also use the table of contents above to navigate to the particular section you want to read.
Data Controller Information
ByPerks Limited
Company Name: ByPerks Limited
Registered Office: 123 Tech Street, London, EC1A 1BB, United Kingdom
Company Number: 12345678 (England and Wales)
ICO Registration Reference: ZA987654
Data Protection Officer: [email protected]
ByPerks Limited is the data controller and responsible for your personal data (collectively referred to as "ByPerks", "we", "us" or "our" in this privacy policy).
What Data We Collect
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
| Data Category | Types of Data | When Collected |
|---|---|---|
| Identity Data | First name, last name, username | Account creation, purchases |
| Contact Data | Email address, billing address, delivery address, telephone numbers | Account creation, purchases, support requests |
| Financial Data | Payment card details (processed by our payment providers) | When making purchases |
| Transaction Data | Details about payments, products purchased, purchase history | When you buy our extensions |
| Technical Data | IP address, browser type and version, time zone, browser plug-in types | When you visit our website |
| Profile Data | Username, purchases, preferences, feedback, survey responses | Throughout your relationship with us |
| Usage Data | Information about how you use our website and extensions | When using our services |
| Marketing Data | Your preferences in receiving marketing from us | When you set your preferences |
Data We Do Not Collect
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). We also do not collect any information about criminal convictions and offences.
How We Use Your Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- To process and deliver your extension purchases
- To manage your account and provide customer support
- To send important updates about your purchased extensions
- To comply with legal and regulatory obligations
- To improve our website and services
- To send marketing communications (only with your consent)
- To prevent fraud and ensure security
Legal Basis for Processing
We have set out below, in a table format, a description of the ways we use your personal data and the legal bases we rely on to do so.
| Purpose/Activity | Type of Data | Lawful Basis |
|---|---|---|
| To register you as a new customer | Identity, Contact | Performance of a contract with you |
| To process and deliver your order | Identity, Contact, Financial, Transaction | Performance of a contract with you |
| To manage our relationship with you | Identity, Contact, Profile, Marketing | Performance of a contract, Legal obligation, Legitimate interests |
| To enable you to complete a survey | Identity, Contact, Profile, Usage | Legitimate interests (to improve our services) |
| To administer and protect our business | Identity, Contact, Technical | Legitimate interests, Legal obligation |
| To deliver relevant content and advertisements | Identity, Contact, Profile, Usage, Technical | Legitimate interests or Consent |
Who We Share Data With
We may share your personal data with the parties set out below for the purposes described in this privacy policy:
- Payment Processors: Stripe, PayPal, and other secure payment gateways to process your transactions
- Email Service Providers: To send transactional and marketing emails (with your consent)
- Analytics Providers: Google Analytics to understand how our website is used
- Professional Advisers: Lawyers, bankers, auditors who provide consultancy services
- Government Authorities: HMRC, regulators and other authorities who require reporting under certain circumstances
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.
| Type of Data | Retention Period | Reason |
|---|---|---|
| Customer account information | Duration of account + 2 years | To provide ongoing support and handle any disputes |
| Transaction records | 6 years from transaction date | Legal and tax requirements |
| Marketing preferences | Until you unsubscribe + 1 year | To ensure we respect your preferences |
| Support tickets | 3 years from closure | To improve our services and handle follow-ups |
| Website analytics | 26 months | To understand usage patterns |
Your Rights
Under the UK GDPR, you have the following rights in relation to your personal data:
1. Right to Access
You have the right to request a copy of the personal data we hold about you.
2. Right to Rectification
You have the right to request that we correct any personal data you believe is inaccurate or complete data that is incomplete.
3. Right to Erasure
You have the right to request that we delete your personal data in certain circumstances.
4. Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances.
5. Right to Data Portability
You have the right to request that we transfer the data we have collected to another organisation, or directly to you.
6. Right to Object
You have the right to object to our processing of your personal data in certain circumstances.
7. Rights Related to Automated Decision Making
You have the right not to be subject to a decision based solely on automated processing.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.
You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).
International Transfers
Some of our external third parties are based outside the UK so their processing of your personal data will involve a transfer of data outside the UK.
Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
- We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data.
- Where we use certain service providers, we may use specific contracts approved for use in the UK which give personal data the same protection it has in the UK.
- Where we use providers based in the United States, we may transfer data to them if they are part of the UK-US Data Bridge which requires them to provide similar protection to personal data shared between the UK and the US.
Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. These measures include:
- Encryption of data in transit and at rest
- Regular security audits and penetration testing
- Limited access to personal data on a need-to-know basis
- Confidentiality agreements with all staff and contractors
- Regular training on data protection for all employees
- Incident response procedures for data breaches
In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children under 18. If you become aware that a child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we will take steps to remove that information from our servers.
Changes to This Policy
We may update this privacy policy from time to time. The updated version will be indicated by an updated "Last Updated" date and the updated version will be effective as soon as it is accessible. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.
If we make material changes to this privacy policy, we will notify you either by prominently posting a notice of such changes or by directly sending you a notification.
Contact Us
If you have any questions about this privacy policy, or our privacy practices, please contact us using the following details:
Data Protection Queries
Email: [email protected]
Postal Address:
Data Protection Officer
ByPerks Limited
123 Tech Street
London EC1A 1BB
United Kingdom
Phone: +44 (0) 20 1234 5678
Response Time: We aim to respond to all queries within 5 working days
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues:
Information Commissioner's Office
Website: www.ico.org.uk
Phone: 0303 123 1113
Address:
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF