Privacy policy

Created: 24th May 2018
Last updated: 24^th December 2024

Croud Inc Ltd. and Croud Inc. (“Croud”) respects your rights to privacy and to personal data protection, and is committed to protecting these through our compliance with this policy. This policy describes the types of information we may collect from you or that you may provide when you visit the website located at croud.com (“Website”) and our practices for collecting, using, keeping, protecting, and disclosing that information.

This policy applies to information we collect:

• on the Website (including desktop and mobile versions);
• in email, text, and other electronic messages between you and Croud;
• when you interact with our advertising on third-party websites and services;
• when you interact with the Website through third-party websites and services;
• from publicly available sources, like your LinkedIn profile; and
• offline, including when we collect a business card at an event.

It does not apply to information:

• collected by any third party (including our affiliates) including through any application or content (including advertising) that may link to or be accessible from (or on) the Website; or
• through any other means.

Please read this text carefully to understand our policies and practices regarding your information and how we will treat it. Privacy choices are available to you on our privacy options sidebar. If, despite the privacy choices available to you, you do not agree with our policies and practices, your remaining choice is not to use our Website. By accessing or using our Website, and by consenting to our processing of your personal data (in relation to “The General Data Protection Regulation (GDPR) (EU) 2016/679”) you agree to our collection, use, disclosure, retention, and protection of your personal data as described in this policy.

We may change this policy on one or more occasions. Where this change of policy includes a change to the purpose for processing your personal data, we will seek to renew your consent for that personal data processing. Where the purpose for processing your personal data remains unchanged, we will not seek to renew your consent for our processing of your personal data (we will continue to offer privacy choices on the privacy options sidebar and we will consider your continued use of the Website after we make changes to this policy as your acceptance of the changes. Please check the policy frequently for updates.

1. What types of information do we collect about you and how do we collect it?

We may collect several types of information from and about users of our Website or service, including personal data:

• by which you may be personally identified, including your name, postal address, email address, telephone number; or
• details of your business, and business dealings and operations, and a record of the communications and meetings you’ve had with Croud; or
• about your internet connection, and the software or equipment that you use to access our Website; or
• about your usage of the Website, including the pages that you view and in some cases information about how you clicked to visit the Website; or
• by which you may be pseudonymously identified, including the values of web cookies and mobile device identifiers.

We collect this information:

• directly from you when you provide it to us;
• directly from publicly available sources;
• automatically as you navigate through the Website; and
• from third parties, for example, our business partners.

Information you provide to us online

The information we collect on or through our Website may include:

• Information that you provide by filling in forms on our Website. This includes information provided at the time of registering to receive communications, or enquiring about further services.
• Records and copies of your correspondence (including email addresses), if you contact us.
• Your responses to surveys that we might ask you to complete for research purposes.
• Your search queries on the Website.

Information we collect through automatic data collection technologies

As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions and patterns, including:

• Details of your visits to our Website, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Website.
• Information about your computer and internet connection, including your IP address, operating system, and browser type.
• We also may use these technologies to collect information about your online activities over time and across third-party websites or other online services.

The technologies we use for this automatic data collection may include: cookies or other local storage and web beacons (or “pixels,” on the Website and including in our emails).

2. How do we use your information?

We may use information that we collect about you or that you provide to us, on the grounds of the contract between us, legal obligation, your vital interests, or the public interests. The reason for this processing of your personal data may include

• to provide you with information, products, or services that you request from us;
• to carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection; and
• to investigate and prevent illegal activities.

We may also use information that we collect about you or that you provide to us with your consent, which is given in relation to a purpose. That purpose may include

• to notify you about changes to any products or services we offer or provide; or
• in any other way we may describe when you give consent and provide the information.

We may also use information that we collect about you or that you provide to us on the grounds of our legitimate interests. The reason for this processing of your personal data may include

• to notify you about changes to any products or services we offer or provide;
• to contact you about our own and third parties’ goods and services that may be of interest to you; and
• to fulfill any other purpose for which you provide your personal data.

These purposes require that we store personal data for 36 months. We delete it after that time, except where it is renewed by your direct contact with Croud.

If you do not want us to use your information in these ways, then email [email protected] to let us know. In relation to emails you may receive from Croud, where your subscription to a Croud marketing list has caused you to receive the email, you can remove yourself from the marketing list by using the unsubscribe link that you’ll find in the email itself. For more information, see “What choices do you have about how we use and disclose your information?”

The information we collect automatically is grouped by its purpose into one of three categories, either:

• operating the Website; or
• measurement; or
• advertising.

Automatic data collection for operating the website

Operating the Website includes for the purposes of:

• delivering its pages;
• allowing you to participate in any interactive features on our Website;
• processing and logging your requests;
• maintaining the Website and resolving any technical issues that may occur in its operation;
• investigating and preventing illegal activities; and may include
• personalising the Website for you

including by:

• processing and recording the pages you request as you land on them and navigate between them;
• logging information about the software and equipment you use to request pages;
• storing information about your preferences, thus allowing us to customise the Website according to your individual interests; and
• recognising you when you return to our Website.

Automatic data collection for measurement

Measurement includes for the purposes of:

• improving our Website’s technical performance (for example, the speed with which its pages are loading for its visitors);
• improving its content performance (for example, where unpopular content may be revealed as having been produced poorly than normal, or reflect the changing needs of our visitors);
• testing new versions of the Website (wholly or partially) on a sample of its audience, and measuring the differences in performance between the versions. This involves the storage of information about which version of the website you’ve seen.

Measurement rarely involves the study of any individual, but statistical techniques in measurement do rely on personal data.

Automatic data collection for advertising

Advertising includes for the purposes of collecting information about your online activities on the Website and across third-party websites or other online services so that:

• Croud can notify you about changes to any products or services we offer or provide;
• Croud can show advertising;
• this advertising may be shown to you and personalised in relation to your previous behaviour;
• Croud can measure the delivery and performance of the advertising it places; and
• Croud can use reporting on the Website’s visitors, including using data collected from across third-party websites, to inform marketing plans and decisions.

3. With whom do we share your information?

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may disclose personal data that we collect or you provide as described in this privacy policy:

• To contractors, service providers, and other third parties we use to support our business and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganisation, dissolution, or other sale or transfer of some or all of our assets, whether as a going concerning or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our Website users is among the assets transferred.
• To third parties to market their products or services to you if you have not opted out of these disclosures. We contractually require these third parties to keep personal information confidential and use it only for the purposes for which we disclose it to them. For more information, see “What choices do you have about how we use and disclose your information?”
• To fulfill the purpose for which you provide it.
• For any other purpose disclosed by us when you provide the information.
• With your consent.

We may also disclose your personal data:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce or apply our terms and other agreements, including for billing and collection purposes.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of us, our users, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

Data processors

Croud uses these processors as partners in processing your personal data

Relationships with our clients and customers

• HubSpot
• Google Workspace
• Office 365
• Mailchimp
• Amazon Web Services
• Google Cloud Platform

The Operation of the Website

• ProcessWire

Measurement

• Google Tag Manager
• Google Analytics (but not its “Advertising Features”)
• Hotjar

Advertising

• Google Analytics (including its “Advertising Features”)
• Google AdWords
• Google Marketing Platform technologies
• Facebook
• LinkedIn

4. What choices do you have about how we use and disclose your information?

We strive to provide you with choices about the personal data you provide to us. We have created mechanisms to provide you with the following control over your information:

• On the privacy options sidebar, you can give or revoke consent for automatic data collection on the website, for either measurement, or also measurement and advertising.
• You’re able to review the way that Google and Facebook process data about you in general (i.e. not just on our Website).
  • For Google, you can review the Ads Settings for your Google user account, and this includes being able to opt out of personalised advertising. You can also use the My Activity settings to control data that Google stores about you and decide how it’s used.
  • Facebook’s Data Policy includes a link to your account ad controls
• All promotional emails sent from Croud include an unsubscribe link, and this can be used to remove yourself from our mailing list.

5. Your legal rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data. Please see below (Your Legal Rights) to find out more about these rights. 

If you wish to exercise any of these rights, please contact us by emailing us: [email protected].  

No fee usually required

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated. 

Your legal rights 

You have the right to:

Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request. 

Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: 

• If you want us to establish the data's accuracy.
• Where our use of the data is unlawful but you do not want us to erase it.
• Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims. 
• You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it. 

Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. 

Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

6. How do we protect your personal information?

We have implemented measures designed to secure your personal information from accidental loss and from unauthorised access, use, change, and disclosure. All information you provide to us is stored on secure technology.

Unfortunately, the transmission of information over the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal data transmitted to our Website. Any transmission you make of personal data is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.

7. Global business

By using the Website and our services, you acknowledge that it is sometimes necessary for us to transfer your personal data to countries outside the UK (for example to the USA, the EU and other regions). In those cases we will comply with applicable UK laws designed to ensure the privacy of your personal data.

Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented: 

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data; or 
• We may use specific contracts approved for use in the UK which give personal data the same protection it has in the UK. 

Please contact us by emailing [email protected] if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.

 

8. Do Not Track Policy

Do Not Track (“DNT”) is a privacy preference that you can set in your browser. DNT is a way for you to signal to websites and services that you do not want certain information about your webpage visits collected over time and across websites or online services. We are committed to providing you with meaningful choices about the information we collect and that is why we provide you with choices including those on the privacy options sidebar. But we do not guarantee any recognition or response to any DNT signals as internet industry consensus is still being sought on the meaning and usefulness of the DNT browser setting, and how to interpret its signal. For more information about DNT signals, you may visit www.allaboutdnt.com.

9. Links to other websites

The Website contains links to other sites. Please be aware that we are not responsible for the content or privacy practices of those other sites. We encourage our users to be aware when they leave our Website and to read the privacy statements of any other site that collects personal data.

10. Copyright Content Takedown Requests

If you reasonably believe your copyrighted work has been used or posted without your consent, you can email [email protected] with your takedown request.

11. Changes to Privacy Policy

We will post any changes we make to our privacy policy on this page. If we make material changes to how we treat your personal data, or to the purpose for which we process it, we will notify you by email to the email address identified in your account or through a notice on the Website homepage. This policy identifies when we last updated it at the top of the page. You are responsible for making sure we have an up-to-date active and deliverable email address for you, and for frequently visiting our Website and this policy to check for any changes.

12. Contact information

To ask questions or comment about this privacy policy and our privacy practices, contact us at [email protected] 

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance. 

For EEA Residents: Please contact our EU Representative at [email protected]. Alternatively, they can be reached by post (The DPO Centre, Alexandra House, 3 Ballsbridge Park, Dublin, D04C 7H2) or +353 1 631 9460. www.dpocentre.com.