GDPR at WareBee — Our Personal Data Protection Policy

We at WareBee are committed to processing personal data securely and respecting the privacy of the individuals concerned. This policy sets out who controls your personal data, the rights the UK GDPR and the EU GDPR give you, and how to exercise them.

It does not replace our Privacy Policy, which remains the controlling document for what we collect, why, how long we keep it and how it is secured. Read the two together.

1. Who controls your personal data

Which WareBee entity is the controller depends on where you are:

• United Kingdom and European Economic Area — WareBee Ltd, Unit 1, Cambridge House, Camboro Business Park, Oakington Road, Girton, Cambridge, Cambridgeshire, CB3 0QH, United Kingdom.
• United States — WareBee Inc.

Each entity is an independent controller for the individuals in its region and determines the purposes and means of that processing. If you are unsure which applies to you, write to [email protected] and we will tell you.

If you use the WareBee application rather than this website, the platform privacy policy published at app.warebee.com/legal governs your account and the operational data you send us.

2. Our Data Protection Officer

WareBee has appointed a Data Protection Officer. You can contact them directly, in confidence, about anything in this policy or about how we handle personal data:

• Email: [email protected]
• Post: Data Protection Officer, WareBee Ltd, Unit 1, Cambridge House, Camboro Business Park, Oakington Road, Girton, Cambridge, Cambridgeshire, CB3 0QH, United Kingdom

You do not have to go through anyone else to reach them.

3. What we process, and on what basis

The categories of personal data we process, the purposes we process them for, the lawful basis for each purpose, and how long we retain them are set out in the Privacy Policy. The storage this website places on your device, and the third parties involved, are set out in the Cookie Policy.

4. Your rights

Under the UK GDPR and the EU GDPR you have the right to:

• Be informed — to know what we do with your personal data, which is what this policy and the Privacy Policy are for
• Access — to obtain a copy of the personal data we hold about you
• Rectification — to have inaccurate personal data corrected, and incomplete data completed
• Erasure — to have your personal data deleted where one of the grounds in Article 17 applies
• Restriction — to have us limit our processing of your data while a dispute about its accuracy or our grounds is resolved
• Data portability — to receive the data you provided to us in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible
• Object — to object to processing carried out on the basis of our legitimate interests, and to object at any time, absolutely, to processing for direct marketing
• Withdraw consent — where we rely on your consent, to withdraw it at any time, without affecting the lawfulness of processing before you withdrew it
• Not be subject to solely automated decisions — to not be subject to a decision producing legal or similarly significant effects that is based solely on automated processing, including profiling

We do not make decisions producing legal or similarly significant effects about you by solely automated means.

Where we rely on your consent for analytics and marketing storage, you can withdraw it at any time from the cookie settings on this site — see the Cookie Policy.

5. How to exercise your rights

Write to [email protected] and tell us which right you want to exercise.

• We respond within one month of receiving your request. If the request is complex, or you have made several, we may extend that by up to two further months — we will tell you within the first month if we do, and why.
• Exercising these rights is free. We may charge a reasonable fee, or refuse, only where a request is manifestly unfounded or excessive, and we will explain our reasoning if that happens.
• We may ask for information to confirm your identity before we act, so that we do not disclose your data to someone else.

6. Transfers outside the UK and EEA

Some of the service providers we use to run this website and our business are located outside the UK and the EEA, principally in the United States. Those providers, and what they are used for, are listed in the Cookie Policy and the Privacy Policy.

Where personal data is transferred outside the UK or the EEA, we rely on the safeguards in Article 46: the UK International Data Transfer Agreement (or the UK Addendum to the EU clauses) for transfers from the United Kingdom, and the European Commission’s Standard Contractual Clauses for transfers from the EEA. You can request a copy of the relevant safeguard from our Data Protection Officer.

7. Complaining to a supervisory authority

If you think we have handled your personal data unlawfully, we would like the chance to put it right — please contact our Data Protection Officer first. You do not have to, and doing so does not affect your right to complain.

You can complain to a supervisory authority at any time:

• United Kingdom — the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline 0303 123 1113, or ico.org.uk/make-a-complaint.
• European Economic Area — the supervisory authority in the country where you live, where you work, or where you believe the infringement took place. The list is maintained by the European Data Protection Board at edpb.europa.eu.

8. Changes to this policy

We update this policy when our practices or our obligations change. The version number and the effective and last-updated dates at the top of this page tell you which text you are reading. Material changes will be announced on this page before they take effect.

9. Contact us

• Data protection and rights requests: [email protected]
• Legal: [email protected]
• All legal documents: warebee.com/legal

WareBee Ltd, Unit 1, Cambridge House, Camboro Business Park, Oakington Road, Girton, Cambridge, Cambridgeshire, CB3 0QH, United Kingdom.