Impress Solutions Limited (company number 03412238), 3 Holgate Court, 4-10 Western Road, Romford, Essex RM1 3JS, is the data controller for the personal information described in this policy.
Privacy contact: Jeremy Clifford. General enquiries: [email protected].
Information we collect
- Identity and contact information — name, job title, organisation, business address, email address and telephone number
- Enquiry and relationship information — your messages, support requests and records of our communications
- Service and transaction details — products discussed, account records and billing information
- Website and device information — IP address, browser and device type, pages visited, referring page and approximate location
- Marketing engagement — subscription preferences and interaction with our communications
- Access and security logs, where applicable
Please do not send us special category information, or information about criminal convictions, unless we specifically request it.
How we collect it
Directly from you when you complete a form, email or call us, or through your interactions with our services. We may also receive business contact information from your employer or colleagues, our business partners, service providers, public professional sources, or publicly available company information.
Why we process it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries | Steps taken at your request before entering a contract, and where appropriate our legitimate interests in developing and operating our business |
| Delivering our services | Performance of a contract, our legitimate interests, and legal obligations |
| Operating and securing this website | Our legitimate interests in providing secure and effective services; consent for cookies where PECR requires it |
| Record-keeping and compliance | Legal obligations, and our legitimate interests in protecting our business and legal rights |
| Direct marketing | Consent where PECR requires it; otherwise our legitimate interests, after considering your rights and reasonable expectations |
How long we keep it
Retention depends on the nature and sensitivity of the information, the length of our relationship, service and support requirements, applicable tax, accounting and regulatory obligations, security needs, and limitation periods for legal claims.
- Unsuccessful enquiries are reviewed and deleted when no longer needed
- Contract and transaction records are kept for the relationship and afterwards where needed for legal, accounting, warranty or dispute purposes
- Marketing records are kept while you remain subscribed; suppression records may be retained so that we continue to respect an opt-out
Who we share it with
We do not sell personal information. We share it with:
- Authorised staff and our professional advisers
- Cloud, IT support, cybersecurity, email and backup providers
- Website service providers used for forms, spam prevention, analytics and consent management
- Business partners and subcontractors involved in delivering our services
- Regulators, courts, law enforcement, insurers and auditors, where disclosure is required by law
- Prospective purchasers or investors in connection with a proposed sale, merger or reorganisation, subject to appropriate confidentiality safeguards
Service providers may use personal information only for the agreed purpose, and must protect it appropriately.
International transfers
Before transferring personal information outside the UK we use a lawful transfer mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses, or another permitted safeguard.
Cookies and analytics
This website uses only strictly necessary technologies required to operate and secure it. Nothing on it sets an optional cookie, and no third party is contacted, unless you ask for it — which applies to embedded video, described below.
If optional cookies or similar technologies — such as analytics — are introduced, they will be used only after you have made a consent choice where PECR requires consent, and a consent tool will set out the technologies in use, their purposes, providers and durations. You will be able to accept or reject optional categories and change or withdraw your choice at any time.
Embedded videos. Where a page includes a video, the page holds only our own image of it until you press play. Nothing reaches the video provider, and no cookie is set, before that. The line beneath each video names the provider and links its privacy policy, and offers the provider’s own page as an alternative.
Direct marketing
We may send relevant business-to-business news, service information, and event or closure updates, relying either on your consent or on the PECR business marketing exceptions.
Every electronic marketing message will identify us and provide a straightforward way to unsubscribe. You can object at any time by emailing our privacy contact. We may use a specialist email platform to deliver and measure these communications.
Your rights
You may:
- Request access to your personal information
- Ask us to correct inaccurate or incomplete data
- Request erasure
- Ask us to restrict processing
- Object to processing based on legitimate interests, and object at any time to direct marketing
- Receive your data in a portable format, where applicable
- Withdraw consent at any time
- Avoid decisions based solely on automated processing that produce legal or similarly significant effects
To exercise any of these, contact us by email or write to our registered office. We normally respond without undue delay and within one calendar month.
Security
We use proportionate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. These include access controls, security monitoring, backups, supplier controls and staff confidentiality requirements.
No internet service is completely secure, but we review our safeguards and respond to suspected incidents.
Complaints
Please contact us first so we can put things right. If you remain dissatisfied you can complain to the Information Commissioner’s Office at ico.org.uk, on 0303 123 1113, or at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.