Amp Suite Limited - Data Protection & Privacy Policy

Last updated: April 30, 2018

1. Introduction

This policy covers all personal data collected and retained both directly by Amp Suite Ltd and on behalf of Amp Suite Ltds clients.

The Purpose of this policy is to make sure the company complies with all current UK and EU data protection laws, as well as to ensure sensitive information provided to the company by it’s clients and other 3rd parties is protected to the best of our abilities.

As part of this policy Amp Suite Ltd is committed to the following:

• Abide by all current UK and EU data protection laws
• Inform relevant parties within 72 hours of any data breach becoming known to the company
• As far as possible collect only that data which is required to carry out the company’s business and that of its clients

Note that this policy covers the rights of individuals and relates to their personal data that we process. The rights of companies and other non individuals, and data which is not classed as personal may differ, as governed under current UK and EU law.

In many cases ampsuite will be acting as a data processor on behalf of it’s clients, who will be the data controller, and as such many of the legal rights and obligations relating to your personal data will ultimately lay with that 3rd party data controller.

2. Who we are

Organisation: Amp Suite Ltd
Company No: 07868326
Registered Office: 44 Orange Row, Brighton, England, BN1 1UQ

Through out this document we may use the terms "we", "us" and "ampsuite" to refer to Amp Suite Ltd, the company.

3. Collecting Data

When collecting personal data that we control we rely on the following legal basis:

Consent: We will specifically ask you if we can use your data, and explain to you how it will be used e.g. promo or news letter opt in consent

Contractual obligations: If we need to use your data in order to carry out business relating to an existing contract or business relationship we have with you e.g. collecting payment details in order to pay artists

Legal Compliance: We may need to collect and pass on certain details to meet legal obligations e.g. your country of residence for tax purposes.

Legitimate interest: In some situations we collect data in a way which might reasonably be expected as part of running our business and which does not materially impact your rights, freedom or interests. e.g. storing your IP addresses to prevent fraud

4. Security

We take the security or all data we hold seriously, the following outlines some of the precautions taken to ensure the security of data held by the company, it is not an exhaustive list:

• All client systems are protected by SSL encryption
• Sensitive data (such as passwords and payment details) stored on ampsuite servers is encrypted before storage
• Client data will not be transferred to 3rd parties unless prior written consent is given by the client, it is required by law, or is required to undertake business activities as previously agreed with by the client
• Data should only be accessible to those who are authorised to view it, in most cases this is achieved via username and password access restrictions e.g. to databases and client systems.
• All data used as part of the operation of client ampsuite systems is stored on servers hosted within the EU and operated by companies who comply with current UK and EU data protection laws.

5. What data we process and how

The below lists the types of personal data we may process, why we process them, the legal basis for processing them, and how long the data will be stored for.

Note that where ampsuite is acting as the data processor for a 3rd party data controller, the 3rd party controller may chose to process your data differently in each case, please refer to their own privacy and data protection policies to confirm this.

Use Case	Data Collected	Legal Basis	Retention
Promos	Email Address, Name, IP Address	Consent	Until Consent is removed or 6 months after client terminates their contract (unless requested otherwise)
Accounting	Email Address, Name, Address, Payment Details	Contract	6 months after client terminates their contract (unless requested otherwise)
Artists	Email Address, Name, Gender	Legitimate interest	6 months after client terminates their contract (unless requested otherwise)
System Users	Email Address, Name, IP Address	Legitimate interest	6 months after client terminates their contract (unless requested otherwise)
Newsletters	Email Address, Name, IP Address	Consent	Until Consent is removed or 6 months after client terminates their contract (unless requested otherwise)
Client Details	Email Address, Name, IP Address, Payment Details, Contact Details (e.g. Phone Number, Skype)	Contract / Legitimate interest	Until requested by individual if they are no longer in a contract
Store Purchases	Email Address, IP Address, Name, Address	Legitimate interest	Until requested by the individual

6. Your rights

As an individual you have the right to request:

• Access to the personal data we hold about you, free of charge in most cases.
• The correction of your personal data when incorrect, out of date or incomplete.
• That we stop using your personal data for direct marketing.
• That we stop any consent-based processing of your personal data after you withdraw that consent.

Note that in many cases ampsuite will be acting as a data processor on behalf of its clients, who will be the data controller. In these cases while ampsuite will do it's best to facilitate the access to as well as removal and correction of your personal data, final legal responsibility for this may lie with the data controller.

Note that in some cases we may be allowed to continue to store and processes your data if we have a legitimate requirement to do so, in such cases we will only keep as much data as is required to carry out those requirements.

Note that even after unsubscribing from some services, we may keep your details on record to enable us to identify past relationships where there is a legitimate interest to do so e.g. if you unsubscribe from a news letter we may store your email address so we know not to readd you in future. In these cases you can request full removal of your data (other than where a legitimate requirement to store it remains) by emailing us at privacy@ampsuite.com

7. Contact Us

If you have any questions or concerns relating to how we handle your data, please feel free to email us at privacy@ampsuite.com