Privacy Policy

1. Information we collect

We may collect and process the following categories of personal data:

Information you provide directly. When you request a demo, create an account, submit a contact form, or correspond with us, we collect your name, email address, job title, company name, telephone number, and the content of your communications.

Account and platform data. If you are a registered user of the OneScor platform, we collect account credentials, user preferences, activity logs, and any data you input into the platform in connection with your organisation’s use of our services.

Automatically collected data. When you visit our website, we automatically collect certain technical information including your IP address, browser type and version, operating system, referring URL, pages visited, time spent on pages, and other diagnostic data. We collect this information through cookies, server logs, and similar technologies.

Third-party data. We may receive information about you from third-party sources such as business partners, marketing platforms, and publicly available databases, to the extent permitted by applicable law.

2. Legal basis for processing

We process your personal data on the following legal bases under applicable data protection legislation:

Contractual necessity. Processing necessary to perform a contract with you or to take pre-contractual steps at your request, such as providing access to the OneScor platform or responding to demo requests.

Legitimate interests. Processing necessary for our legitimate business interests, including improving our services, fraud prevention, network security, and direct marketing to existing customers, provided these interests are not overridden by your rights and freedoms.

Consent. Where you have given us specific consent to process your data for a particular purpose, such as receiving marketing communications. You may withdraw consent at any time.

Legal obligation. Processing necessary to comply with a legal or regulatory obligation to which we are subject.

3. How we use your information

We use the information we collect for the following purposes:

• Providing, operating, and maintaining the OneScor platform and our website
• Processing and responding to demo requests, enquiries, and support tickets
• Creating and managing user accounts
• Sending administrative communications, including service updates and security alerts
• Sending marketing communications where you have opted in or where we have a legitimate interest to do so
• Analysing usage patterns to improve the functionality and user experience of our services
• Detecting, preventing, and addressing fraud, abuse, and technical issues
• Complying with legal obligations and enforcing our terms of service

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

4. Data sharing and disclosure

We may share your personal data with the following categories of recipients:

Service providers. Third-party vendors who provide services on our behalf, such as cloud hosting, analytics, email delivery, and customer support tools. These providers are contractually obligated to process your data only as instructed by us and to maintain appropriate security measures.

Professional advisors. Lawyers, auditors, and insurers where necessary for the provision of their professional services.

Legal and regulatory authorities. Where required by law, regulation, legal process, or governmental request, or where necessary to protect our rights, property, or safety, or that of our users or others.

Business transfers. In connection with a merger, acquisition, reorganisation, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your data.

5. International data transfers

Your personal data may be transferred to and processed in countries outside your country of residence. Where we transfer data outside the UK or European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant authorities, or transfers to countries that have been deemed to provide an adequate level of data protection.

6. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption at rest and in transit, tenant isolation at the database level, role-based access controls, regular security assessments, and employee training on data protection. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

7. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal, accounting, or reporting obligations, or to resolve disputes. When personal data is no longer required, we securely delete or anonymise it. Retention periods vary depending on the type of data and the purpose of processing. Contact and enquiry data is typically retained for 24 months following your last interaction with us, unless a longer period is required by law.

8. Your rights

Under applicable data protection legislation, you may have the following rights in relation to your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal data in certain circumstances
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — request your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, please contact us at privacy@irokotechnologies.com. We will respond to your request within one month, as required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

9. Cookies and tracking technologies

We use cookies and similar tracking technologies to collect and store information when you visit our website. Cookies are small text files placed on your device by your browser.

Essential cookies are necessary for the website to function and cannot be switched off. They are usually set in response to actions you take, such as setting privacy preferences or filling in forms.

Analytics cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use this data to improve our website and services.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

10. Third-party links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a revised “Last updated” date. Where changes are material, we will provide prominent notice on our website or notify you directly. Your continued use of our services after any changes constitutes acceptance of the updated policy.

12. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Iroko Technologies LLC
Email: privacy@irokotechnologies.com