1. Who we are and how to contact us
ENTMAZ is a product operated by Conso4s Ltd, a company registered in England & Wales. Conso4s Ltd is the data controller responsible for the personal data described in this policy.
Our company registration and ICO registration details are set out below. Any value shown in brackets is a placeholder pending publication.
If you have any question about this policy or about how we handle your personal data, please contact us at [email protected], or contact our data protection team at [email protected].
- Company: Conso4s Ltd (registered in England & Wales)
- Company number: [company number]
- Registered office: [Conso4s Ltd registered office address]
- ICO registration number: [ICO registration number]
- Privacy enquiries: [email protected]
- Data protection contact: [email protected]
2. Personal data we collect
We collect and process the following categories of data. We do not collect more than we need for the purposes described in this policy.
Waitlist and interest registration
- Your work email address
- Company name, if you choose to provide it
- The time and context of your registration of interest
Website and log data
- Basic device and log data, such as IP address, browser type and request logs
- Pages visited and referral information needed to operate and secure the site
Communications
- Messages you send us by email or other channels you use to contact ENTMAZ
3. How and why we use your data
- To register and manage interest in ENTMAZ, including waitlist confirmation and follow-up
- To respond to enquiries and provide customer support
- To operate, secure and improve the website and related infrastructure
- To analyse aggregated traffic patterns where permitted
- To meet our legal, regulatory and accounting obligations
4. Lawful bases under UK GDPR
Under Article 6 of the UK GDPR we must have a lawful basis for each processing purpose. We rely on the following bases.
Performance of a contract (Article 6(1)(b))
- Processing waitlist and interest registrations so we can respond and provide requested information
- Responding to support and product enquiries you initiate
Legitimate interests (Article 6(1)(f))
- Keeping the website and infrastructure secure and preventing abuse
- Understanding how the site is used so we can improve it
- Communicating about ENTMAZ where you have registered interest
Consent (Article 6(1)(a))
- Optional marketing communications where we ask for and obtain consent
Legal obligation (Article 6(1)(c))
- Retaining records where required for accounting, tax or regulatory purposes
- Responding to lawful requests and complying with applicable law
6. International transfers
Some of our providers may process personal data outside the United Kingdom. Where data is transferred outside the UK, we put in place appropriate safeguards as required by UK GDPR.
- The UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses, for transfers from the UK
- EU Standard Contractual Clauses (SCCs) where relevant
- Transfers to countries covered by UK adequacy regulations, where applicable
7. Data retention
We keep personal data only for as long as we need it for the purposes set out in this policy, or for as long as we are required to keep it by law.
Waitlist and interest registrations are retained until you ask us to remove them, or until we no longer need them for launch communications and related follow-up, after which they are deleted or anonymised.
8. How we protect your data
We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and security headers on website responses. No system can be guaranteed completely secure, but we work continuously to protect your data and to limit the impact of any incident.
9. Personal data breaches
We maintain procedures to detect, investigate and respond to suspected personal data breaches. Where a breach is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) without undue delay and, where feasible, within 72 hours of becoming aware of it.
Where a breach is likely to result in a high risk to your rights and freedoms, we will also inform you without undue delay so that you can take any steps needed to protect yourself.
10. Your rights
Under UK GDPR you have a number of rights in relation to your personal data:
- Access — to obtain a copy of the personal data we hold about you
- Rectification — to have inaccurate or incomplete data corrected
- Erasure — to have your personal data deleted in certain circumstances
- Restriction — to ask us to limit how we use your data in certain circumstances
- Portability — to receive certain data in a structured, commonly used, machine-readable format
- Objection — to object to processing based on our legitimate interests, and to object to direct marketing at any time
- Withdraw consent — to withdraw any consent you have given, at any time
11. Complaints to the ICO
If you have a concern about how we handle your personal data, please contact us first at [email protected] or [email protected].
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.
12. Children
ENTMAZ is intended for businesses and professional users. It is not directed at children, and we do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact [email protected] and we will take appropriate steps to delete it.
13. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes to our service, our providers, or legal requirements. When we make material changes, we will take reasonable steps to notify you. The date this policy was last updated is shown on this page. Your continued use of ENTMAZ after an update means you accept the revised policy.