Privacy Policy (App)

This document was last updated on 15th May 2019.

TABLE OF CONTENTS

1. Overview
   1. Terms and Conditions
   2. Consent
2. User Data
   1. Data Collected By Home Automate Application
   2. How we use your data
   3. What Data Do We Share
   4. Data Retention Periods
   5. How to access your information
3. Security
   1. Servers
   2. Encryption
   3. Access
   4. Data Breach
4. Third party
   1. Sharing and disclosure of data
5. Compliance
   1. EU General Data Protection Regulation
   2. Children’s Online Privacy Protection Act Compliance
6. Privacy policy changes
7. Contact details

1. OVERVIEW

Home Automate place the utmost value in your data protection rights. Therefore, we ensure that our technical and organisational measures in place to keep your rights protected.

This Privacy Policy describes how we manage, process and store personal data submitted in the context of providing our services.

By accessing or using our application, you agree to the terms of this Privacy Policy Application, General Privacy Policy and all applicable Terms and Conditions.

1.1. TERMS AND CONDITIONS

Our terms and conditions are documented in the “terms and conditions” section of our website; listing all our disclaimers and liabilities. You can find it using the link: https://home-automate.co.uk/terms-conditions

1.2. CONSENT

In subscribing to our services, you agree and accept that we may gather, process, store and/or use the personal data submitted in accordance with the rules set forth below.

By giving your consent to us, you also retain the right to have any personal data rectified, to be forgotten and/ or to be erased.

2. USER DATA

2.1 DATA COLLECTED BY HOME AUTOMATE APPLICATION

As part of the Google process, all application users are required to enter their Google Account login details to link the Home Automate application with their Google Account, during this process, Home Automate capture the user's name and email address only.

2.2 HOW WE USE YOUR DATA?

Any of the information we collect from you may be used in any or all the following ways:

• To provide you use of and access to the application
• To operate, improve and personalise the application
• To send emails using the email address you provided for us to contact you regarding inquiries, and/or other requests or questions
• The data that is obtained is solely just to log the user into their Google account and also to associate the login with their Home Automate account.

2.3. What Data Do We Share?

We do not share any data from any user's who use the Home Automate application with any third-party or external sources. The data obtained is solely used by Home Automate to provide a professional service of the Home Automation application. 

2.4. DATA RETENTION PERIODS

Home Automate collects your personal data for the requirements of carrying out its contractual obligations as well as information about how and when you use our services and we retain this data in active databases, log files or other types of files so long as you use our service, and in accordance with the current regulations in force.

We retain data for no longer than 6 years after the service with you ends. After 6 years, all data subject to this status will be erased from all systems.

2.5. HOW TO ACCESS YOUR INFORMATION

In accordance with the EU General Data Protection Regulation (GDPR) and the Data Protection Act, you have a right of access, correction and removal of your personal data which you may exercise by contacting us here. Your requests will be processed within 30 days. We may require that your request be accompanied by a photocopy of proof of identity or authority.

You are also able at any time to modify personal data by contacting us using the link above.

3. SECURITY

Within the framework of its services, Home Automate attributes the very highest importance to the security and integrity of its customer’s personal data.

In accordance with GDPR, Home Automate undertakes to take all precautions to preserve the security of its data and to protect them against any accidental or unlawful destruction, accidental loss, corruption, unauthorised circulation or access as well as against any other form of unlawful processing or disclose to unauthorised persons.

To avoid unauthorised access, to guarantee accuracy and the proper use of our data, Home Automate has put the appropriate electronic, physical and managerial procedures in place with a view to safeguarding and preserving the data gathered through its services.

3.1. SERVERS

Our primary server is hosted on the Microsoft Azure Network in London with certification to ISO27001:2013, HIPAA, FedRAMP, SOC 1 and SOC 2, as well as other country-specific standards, for information about Azure network security, see https://azure.microsoft.com/en-gb/overview/trusted-cloud/.

We use the services through Azure such as user access management, restricted IP Access, encryption, logging and regular reviews to maintain an excellent standard of security

3.2. ENCRYPTION

All business documentation and client information are stored within our encrypted database and any files/emails are also encrypted using googles Gsuite. We perform regular security checks of our systems reinforce practices with staff to keep all computers and devices locked and password protected always.

We secure all web domains both public and internal using HTTPS.

3.3. ACCESS

Client data is only accessible by those who need to access it in their work. All staff contracts have a clause on confidentiality.

3.4. DATA BREACH

In the event of a breach of security, Home Automate will directly inform those affected without undue delay, no later than 72 hours after having become aware of it.

4. THIRD PARTY

We may engage third-party companies service providers or business partners to process our data and to support our business. These include for example Microsoft for Hosting, payment processors such as Stripe and Google for our email/documentation

A list of our third-party service providers can be requested via privacy@home-automate.co.uk

4.1. SHARING AND DISCLOSURE OF DATA

Home Automate do not share or disclose information to third parties by default. The only exceptions are as follows:

• Data may be disclosed to third-parties if instructed to do so by the user, or by user consent
• Legal obligations such as regulations, legal processes and laws
• Third-party services used by us to process our data such as server and hosting providers, payment processors and cloud document storage (see section 4 above)

5. COMPLIANCE

Home Automate abides by all acts and regulations that relate to providing its services.

5.1. EU GENERAL DATA PROTECTION REGULATION

Home Automate operates from within the EU. We do our utmost to be fully compliant with the EU General Data Protection Regulation.

5.2. CHILDREN’S ONLINE PRIVACY PROTECTION ACT COMPLIANCE

We follow the requirements of COPPA (Children’s Online Privacy Protection Act), we do not collect any information from anyone under 13 years of age. Our website, products and services are all directed to people who are at least 13 years of age or older

6. PRIVACY POLICY CHANGES

Home Automate reserves the right to update this Privacy Policy at any time, in particular, pursuant to any changes made to the laws and regulations in force. Changes to our Privacy Policy will be posted here and communicated to our clients via email, to the extent possible, thirty (30) days at least before any changes come into force.

This policy was last modified on 15th May 2019.

7. CONTACT DETAILS

For all general questions you can contact us via our live chat, email address or using the link below.

Home Automate
Regents Pavilion
4 Summerhouse road,
Northampton,
NN3 6BJ
admin@home-automate.co.uk

For all questions regarding this Privacy Policy you can contact us via
privacy@home-automate.co.uk