Privacy Policy for Spore London Limited
This Privacy Policy explains how we will process the data relating to you, including the personal data that you provide to us or that we may collect when you visit our website at www.codec.ai (Website), and applies to all use of data by Spore London Limited.
The Website is operated by Spore London Limited (“Spore London”, “we”, “us” and “our”), a company incorporated in England & Wales with company number 09317871 and registered office at OC London, 10 John Street, London WC1N 2EB.
Spore London Limited provides bespoke marketing services to customers to help them identify and improve their understanding of their existing and prospective customers and target audiences, to develop tailored marketing strategy and appropriate marketing content.
Where we decide the purpose and means for the processing of the personal data that you provide to us, including via our Website, or that we obtain about you from others, we are the “data controller,” such as in relation to Website Data and setting up a CODEC customer account. Where we process personal data in accordance with the specifications and instructions that we receive from our customers, in particular in relation to Social Media and Customer Data, it is our customers who decide the purpose and means for the processing of this personal data. In those instances, it is our customers who are the data controller and we are the data processor. Whether we are acting in our capacity as data controller or as data processor, we will comply with all applicable data protection laws.
This policy should be read together with our Website Terms of Use.
Our Website may contain hyperlinks to third party websites. These websites operate fully independently from us, and we cannot accept any responsibility or liability for the privacy practices of such third parties nor the availability of these external sites or resources. The appearance of such links on our Website is not an endorsement. Should you use any of these websites, such use is at your own risk and we would advise that you review their respective privacy policies.
Please read this Privacy Policy carefully as it contains important information about the following:
If you have any questions or comments about this Privacy Policy, please contact Spore London:
By post: Spore London Limited, OC London, 10 John Street, London WC1N 2EB
By email: info@codec.ai
1. WHAT PERSONAL INFORMATION DO WE COLLECT ABOUT YOU?
When you visit our Website, we may collect and process information (which may include your personal information) for the purposes of processing and on the legal bases listed below, and we may sometimes share this information as follows.
We may collect and store personal information you provide when using the Website, including when you login to access your account or contact us with general enquiries or in relation to job openings displayed on our “Join Us” webpage by emailing us at talent@codec.ai.
Personal data that we may obtain includes:
We may legally process the personal information that we collect on the basis that we have a legitimate interest, under our legal obligations and/or in the performance of a contract:
We keep your information confidential. We will not sell your information. We may disclose your information to our personnel (including personnel in our group of companies) and to third party suppliers or subcontractors (including our independent consultants, data analytics providers and cloud-based data processing and hosting providers).
If we do share your information, we will only do so insofar as it is reasonably necessary for the purposes set out in this Privacy Policy, and provided that the recipients do not make independent use of the information and have agreed to adhere to the rules set out in this Privacy Policy.
In some instances, this data sharing may involve the transfer of information outside the EU. Please see our section on International Data Transfers below.
As part of the service we provide, we use YouTube API under YouTube Terms of Service(ToS) in API Client’s ToS andGoogle Privacy Policy. As part of those, Codec users will be agreeing with the YouTube ToS.
When you set up your CODEC customer account, we will ask you to provide the following personal information, depending on whether you register as a company or sole trader / individual.
All account holders may be asked to provide:
In order to create an account and use our products and services, you may be asked to provide us and/or our third party service providers:
To enable authorised user, such as employees and/or consultants of the account holder, to access the account and our platform, we may require those end users to provide::
We can only provide our services, including account set-up, where you have provided certain requisite personal data.
We will process this information based on either our legal obligations, for the performance of a contract or where we have a legitimate interest to do so in the operation of our bespoke marketing services business, in order to:
We may share the personal information that you provide with third party service providers, such as external credit reference and reporting providers, to enable us to assess credit worthiness of prospective customers, or other third party sub-processors.
Where we share your personal data with third parties, we will only do so as far as it is reasonably necessary for the purposes set out in the policy, provided that they do not make independent use of the information and have agreed to adhere to the rules set out in the Privacy Policy.
In some instances, this sharing of data may involve the transfer of personal data outside of the EU. Please see our section on International Data Transfers below.
In order to provide our customers with our business’ core service of bespoke, targeted marketing analysis and strategy development, which we provide in accordance with our customer’s identified needs and to their specification, we will need information about our customer’s existing and prospective customers. To fulfil our customer’s instructions, we will process personal data as part of the service we provide to help them identify, understand and more effectively reach their own customers or intended audience.
In doing so, we may retrieve publicly available personal and non-personal information about individuals that has been made available to social media platforms such as Facebook YouTube, Instagram, Twitter and LinkedIn. This may include:
To provide our customers with analysis in line with their specification and instruction, we may collect and process your social media data and data provided by our customers (Customer Data) to enable us to provide our core business services, including bespoke targeted marketing analysis and advisory services, which may include:
We minimise the collection of information to the minimum required to enable us to perform under our contracts for the provision of services with our customers, including to provide and operate customer accounts, to fulfil legal obligations, and/or where there are other lawful bases for processing.
We engage third party sub-processors and service providers to assist us with our data collection and analysis, including US-based Full Contact Inc. (www.fullcontact.com).
The information obtained, as set out in this section, may be used in order to enable the remarketing of users and may be shared with Google. We will not provide further personal information to these payment service providers beyond the financial details that you have provided.
As part of the service that we provide, including the maintenance and operation of your account and our Open Banking services, we will receive and hold financial information that you may provide directly to our third party service providers. We will only provide such information to other third parties where we have received your prior consent to do so or where we are legally obliged to do so.
As part of the service we provide, we use YouTube API under YouTube Terms of Service(ToS) in API Client’s ToS andGoogle Privacy Policy. As part of those, Codec users will be agreeing with the YouTube ToS.
If you send us objectionable content, or behave in a disruptive manner when using our Website, we may process any personal information that you have submitted to us, including in your personal messages, to respond to and stop such behaviour.
We will only process personal information in this way for the following legitimate interests:
Where we reasonably believe that you are or may be in breach of the law (i.e. the content you share on the Website amounts to harassment or is defamatory), we may use your personal information to inform relevant third parties about the content, such as:
Where we process personal information in this way, we will hold that personal information on our systems for as long as is reasonably necessary to achieve these objectives.
2. DATA SHARING WITH OTHER PARTIES
We will only ever share your information with third parties in the ways that are described in this
Privacy Policy. If you would like to find out more about how those third parties listed in this Privacy Policy use your information, this should be set out in their respective privacy policies accessible on their websites.
Personnel, Suppliers and Subcontractors
We keep your information confidential, but may disclose it to any member of our group (which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the Companies Act 2006), our personnel or independent contractors and our suppliers or service providers insofar as it is reasonably necessary for the purposes set out in this Privacy Policy. However, this is on the basis that they do not make independent use of the information, and have agreed to safeguard this information. For further detail on main third party service providers that we engage, please see below.
Change of Control
If we are involved in a merger, acquisition, or sale of all or a portion of our business or its assets, you will be notified of any change in ownership or uses of this information, as well as any choices you may have regarding this information.
Disclosure Required by Law or for Protection of the Business
In addition, we may disclose your information to the extent that we are required to do so by law (which may include to government bodies and law enforcement agencies), in connection with any legal proceedings or prospective legal proceedings; and in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention).
We may also disclose your personal information to third parties in order to enforce or apply the terms of agreements between us, to investigate potential breaches, or to protect the rights, property or safety of Spore London, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
Third party service providers
In addition to the processing that we undertake ourselves, we also use third party processors to collect, export, store and otherwise process our data, include personal data, on our behalf. The processors that we engage include (without limitation):
3. COOKIES & ANALYTICS
Our Website uses cookies and other mechanisms to collect log and analytical information, to help analyse how visitors use the site, to personalise content, support our security function and to compile statistical reports on Website activity.
Cookies may be used by us to do the following:
To find out more about the use of cookies generally, please visit http://www.allaboutcookies.org/.
Our Website also uses website analytics, including Google Analytics as well as our own analytics software, to evaluate and improve our Website, personalise your experience and to offer the best, most accessible service possible to all of our customers.
To find out more about Google Analytics and to learn how to opt out, please visit:
When you visit our Website, these analytics service providers may collect the following data, which will almost always be anonymised and aggregated before reporting back to us:
We process this information to understand how visitors use our Website and to compile statistical reports regarding that activity (for example, your IP address is used to approximate the geographic locations (e.g. country, region, city) from which you access our Website, and we aggregate this information together so we know that, for example, whether most of the visitors to our Website are London-based, originate from the UK or come from elsewhere).
This processing is crucial to the running of our online business and we therefore undertake such monitoring in the pursuit of our legitimate interests in improving our Website to provide a better service and source of information to visitors and our customers.
4. YOUR RIGHTS IN RELATION TO THE PERSONAL DATA THAT WE PROCESS
You have the following rights over the way we process personal data relating to you. We aim to comply without undue delay, and within one month at the latest:
To make a request in relation to any of the aforementioned rights, please email us at info@codec.ai.
If you are unhappy with the way that we are processing your personal data, please let us know. The best way to bring this to our attention is by emailing us at info@codec.ai.
5. CHILDREN
We do not knowingly use the Website or our services to solicit data from or market to anyone under the age of 18 (including, in particular, children under the age of 13) nor do we sell any of our products or services to children.
If a parent or guardian becomes aware that his or her child has provided us with information or may be receiving communications from us or has been otherwise interacting with us via our Website without consent of a parent or guardian, we ask that this be brought to our immediate attention. We will make it our priority to address this situation and delete information relating to a child as soon as practicable. In such an event, please contact us at info@codec.ai.
6. SECURITY
We will take commercially reasonable, appropriate technical and organisational measures to ensure a level of security appropriate to the risk that could be encountered via the use of our Website and services, taking into account the likelihood and severity those risks might pose to the rights and freedoms of our Website visitors.
In particular, we will take precautions to protect against the accidental or unlawful destruction, loss or alteration, and unauthorised disclosure of or access to the personal information transmitted, stored or otherwise processed by us.
Please be aware that, while we make the security of our Website and your personal information a high priority and devote considerable time and resources to maintain robust IT security, no security system can prevent all security breaches. When you choose to share your personal information with us, you accept the aforesaid and provide your information at your own risk.
7. RETENTION
In accordance with data protection laws and good commercial practice, we do not retain data in a form that permits identification of the person(s) to whom it relates for any longer than is necessary. We only keep copies of all types of data for the purposes and duration of providing our services. Once the purpose for which information has been collected has been fulfilled, we will either delete your personal information or remove all identifiers within it so that it is no longer personal data. We may use such anonymised data for research and/or business analysis purposes. For example:
All data that we receive from our customers is stored separately from data that we collect ourselves. No Customer Data, is stored by us after the services have been completed for the relevant customers.
If you would like us to stop using your personal information or restrict its use, please email us at info@codec.ai
8. INTERNATIONAL DATA TRANSFERS
Our servers are located in the European Union and the information that we collect directly from you will be stored in these servers. We may also transfer your personal data to our third party service providers, many of whom may be located outside of the EU, operate from multiple locations including non-EU based operations or engage sub-processors located outside the EU.
There are agreements in place to ensure that any international transfers of personal data to our affiliates or third party service providers have appropriate safeguards that meet the requirements of EU data protection laws.
Such appropriate safeguards may include standard data protection clauses adopted by a data protection regulator and approved by the European Commission, such as the European Commission’s standard contractual clauses. Alternatively, where personal data is transferred to the US, many of those US third party service providers are certified under the EU-US Privacy Shield framework approved by the European Commission.
To find out more about the standard contractual clauses, please visit: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en
To find out more about the EU-US Privacy Shield certification, please visit: https://www.privacyshield.gov/Program-Overview
If you would like to find out more about these safeguards or about our international transfer of data, please let us know by emailing us at info@codec.ai.
9. CHANGES TO THIS POLICY
This Privacy Policy may be updated from time to time. We will notify you of any changes to this policy by posting the updated policy on our Website. You are advised to consult this Privacy Policy webpage regularly for any changes.
10. CONTACT
Questions, comments and requests in relation to this Privacy Policy are welcome and should be addressed to Spore London Limited, OC London, 10 John Street, London WC1N 2EB or emailed to info@codec.ai.