Privacy Policy

Welcome to Enroute Technologies Limited's Privacy and Data Protection Policy ("Privacy Policy"). At Enroute Technologies Limited ("we", "us", or "our") we are committed to protecting and respecting your privacy and Personal Data in compliance with the United Kingdom General Data Protection Regulation ("GDPR"), the Data Protection Act 2018 and all other mandatory laws and regulations of the United Kingdom.

For details about cookies and similar technologies (and how to manage your preferences), please see our Cookie Policy.

This Privacy Policy explains how we collect, process and keep your data safe. The Privacy Policy will tell you about your privacy rights, how the law protects you, and inform our employees and staff members of all their obligations and protocols when processing data.

The individuals from which we may gather and use data can include: Customers, Suppliers, Business contacts, Employees/Staff Members, Third parties connected to your customers, and any other people that the organisation has a relationship with or may need to contact.

This Privacy Policy applies to all our employees and staff members and all Personal Data processed at any time by us.

"Personal Data" means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store and transfer different kinds of Personal Data about you which we have grouped together below. Not all of the following types of data will necessarily be collected from you but this is the full scope of data that we collect and when we collect it from you:

• Profile/Identity Data: This is data relating to your first name, last name, gender, date of birth.
• Contact Data: This is data relating to your phone number, addresses, email addresses, phone numbers.
• Technical/Device Data: This can include your IP address, user agent, device identifiers and information about your browser or device.
• Usage Data: This can include information about how you use our website and tools (for example, pages viewed and feature interactions).
• Content Data: This can include information you submit to our tools (for example, messages/queries) and any files you upload for processing.
• Approximate Location Data: This can include an inferred location such as city/region (for example, derived from your input or approximate network location when needed to provide a location-based feature).
• Marketing and Communications Data: This is your preferences in receiving marketing information and other information from us.
• Billing Data: This is information relating to your debit and credit card information such as the name attached to your payment details and your billing address.
• Financial Data: These are your banking details e.g. your account number and sort code.
• Transactional Data: This is information of details and records of all payments you have made for our services or products.

We also collect, use and share Aggregated Data such as collecting the frequency users suggest a venue to help inform all users how many times that place has been suggested.

We will only use your Personal Data when the law allows us to. Most commonly, we will use your Personal Data in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal or regulatory obligation.

We will only send you marketing communications where you have asked to receive them (for example, by subscribing). You can opt out at any time.

Under certain circumstances, you have rights under data protection laws in relation to your Personal Data. These include the right to:

• Request access to your Personal Data.
• Request correction of your Personal Data.
• Request erasure of your Personal Data.
• Object to processing of your Personal Data.
• Request restriction of processing your Personal Data.
• Request transfer of your Personal Data.
• Right to withdraw consent.

If you wish to exercise any of the rights set out above, please contact us.

We may share your Personal Data with third parties in certain circumstances, such as:

• In the event of a change in control or acquisition of all or part of our business.
• If required for legal reasons or to enforce our terms or this Privacy Policy.
• With third-party service providers that we use to support our business.

We share Personal Data with third parties in categories such as:

• Hosting and infrastructure providers (to deliver and secure the website).
• Authentication/account providers (to create accounts and manage sign-in).
• Payment processors (to take payments and manage subscriptions).
• Email, communications, and form processing providers (to deliver emails and handle enquiries/subscriptions).
• Analytics/measurement providers (to understand usage and improve the product, where consent is required).
• Affiliate attribution/marketing partners (to measure referrals and conversions, where consent is required).
• AI model providers and web search/enrichment providers (to provide AI-assisted and search features you use).
• Mapping, places, geocoding, and geolocation providers (to support location-based features).

For details about cookies and similar technologies (and how to manage your preferences), please see our Cookie Policy.

We require all third parties to respect the security of your Personal Data and to treat it in accordance with the law.

If you have any questions about this Privacy Policy or our privacy practices, please contact us at info@leanspace.org.uk.

You can request a current list of our processors/service providers by contacting us at the same address.