Exemplas is committed to protecting your privacy.
The Exemplas Group of Companies means Exemplas Limited; Exemplas Trade Services Limited; and Enterprise Growth Solutions Limited (“Exemplas Group”).
References in this Notice to “we” or “us” are to the entities listed.
We are committed to protecting and respecting your privacy. This privacy notice (referred to as the "Notice") explains how and for what purposes we use the information collected about you. Please read this Notice carefully.
References in this Notice to “we” or “us” are to the entities listed above. This Notice applies to all such entities.
Reference to the "Site" in this Notice is a reference to the Exemplas website (https://www.exemplas.com/).
For the avoidance of doubt, this Privacy Notice does not apply to the extent where we offer to our customers various products and services through which our customers (and/or their affiliates): (i) create their own websites and applications running on our platforms; (ii) sell or offer their own products and services; (iii) send electronic communications to other individuals; or (iv) otherwise collect, use, share or process personal data via our products and services.
For detailed privacy information related to where our customer and/or a customer affiliate who uses our products and services is the controller, please reach out to the respective customer directly. We are not responsible for the privacy or data security practices of our customers or their affiliates, which may differ from those set out in this Privacy Notice.
The Exemplas Privacy Notice (Notice) below sets out why we collect personal data about individuals and how we use that data. It explains the legal basis for this and the rights you have over the way your data is used.
Our Site, products and services are not intended for use by or relating to children or persons under 18 years of age and we do not knowingly collect data from or relating to them.
We may change this Notice from time to time. It is important that you read this Notice together with any other privacy Notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. Please check this Notice occasionally to make sure you are happy with any changes.
The type and amount of data we collect depends on the reasons for which it is provided to us. The data we may collect includes:
In the course of providing certain funded services, we may be required to collect and use Special categories of data or sensitive personal information relating to you such as information about your racial or ethnic origin, physical or mental health.
We use different methods to collect data from and about you including through:
We collect data:
We will use your personal data in a number of ways including:
The use of your data for the purposes set out above is lawful because one or more of the following applies:
You have the right to withdraw consent to receiving marketing communication from us at any time by contacting us. If you want to contact us about your marketing preferences please email us on firstname.lastname@example.org.
We also collect, use, share and supply Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature.
However, if we combine or connect Aggregated Data with other data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Notice.
We understand the importance of keeping your personal data secure and take appropriate steps to safeguard it.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and third parties who have a business need to know.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
No data transmission over the internet can be guaranteed to be completely secure. We strive to safeguard your data, however we cannot guarantee the security of any data you provide online and you do so at your own risk.
The following persons or entities may have access to your data:
We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
We meet our obligations under UK GDPR by ensuring that the data that we transfer to countries outside the UK has equivalent protection. We do this by ensuring that any third parties processing your data outside the UK either benefits from an adequacy determination for GDPR purposes and/or, where appropriate, we have entered into a data processing agreement with EU-approved terms, known as standard contractual clauses (SCCs).
We may also disclose your personal data if we are required to do so under any legal obligation. We may use your data for the purposes of fraud prevention and credit risk reduction, or where doing so would not infringe your rights, but is necessary for a legal reason and/or in the public interest.
Other than this, we will not share your data with other organisations without your consent.
For more information about the cookies we use, please see our Cookies Policy.
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you, or other reasons we believe would warrant a longer retention period.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
In some circumstances, you can ask us to delete your data. See “Your Rights” below for further information.
Where we rely on your consent to contact you for direct marketing purposes, we will treat your consent as lasting only for as long as it is reasonable to do so. We may periodically ask you to renew your consent. If you ask us to stop contacting you with marketing materials, we will keep a record of your contact details and limited information needed to ensure we comply with your request.
You have the right to request details of the processing activities that we carry out with your personal data through making a subject access request. Such requests have to be made in writing. To make a request, please contact us by email to email@example.com.
You also have the following rights:
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. The IPO’s website is www.ico.org.uk. We would, however, appreciate the chance to deal with your concerns directly before you approach the ICO so please contact us in the first instance.
SURVEYS AND USER GROUPS
We always aim to improve the services we offer. As a result, we may occasionally canvass our customers and users using surveys (where the customer has opted in for this). Participation in surveys is voluntary, and you are under no obligation to reply to any survey you might receive from us. Should you choose to do so, we will treat the information you provide with the same high standard of care as all other customer information.
This Notice may be changed from time to time. We recommend that you read this Notice each time you consider giving us your personal data.
The Site may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements or data collection activities. When you leave the Site, we encourage you to read the privacy Notice of every website you visit.
If you have any queries about the Site, this Notice, our use of your personal information, or would like to submit a subject access request or exercise your other data subject rights, please contact us by:
If you have any concerns or queries about the way your data is handled, email firstname.lastname@example.org.
This Notice was last updated on 2nd August 2021.