Privacy Policy
Introduction
At Isara ("Isara," "We," "us," or "our") we recognize the need to protect and properly manage the personal information collected and processed by us. This Privacy Policy will help you understand what types of information we may collect on the users ("You") of our website (the "Site"), how this information may be used, with whom the information may be shared, and what rights holders have concerning the protection of their personal data.
Isara acts in two distinct roles. As a controller, for personal data collected through this website, our marketing activities and recruitment; this Policy governs that processing. As a processor, for the customer conversations our business customers connect to the Isara platform: for that data the business customer is the controller, our processing is governed by our Data Processing Agreement, and if you are an end-user whose conversation was analysed, please direct any privacy request to the business you contacted, who will engage us as needed. This Policy does not otherwise apply to conversation data we process on the platform on behalf of business customers.
Who We Are
In regard to the processing of your data, Isara Systems Ltd, 5-27 Old Street, London EC1V 9HL, owner of Isara Trademark and Isara.ai website, acts as the controller.
How to Contact Us
For customer support, please email support@isara.ai.
For all data privacy matters, please contact our Data Protection Officer (DPO) at dpo@isara.ai.
Our address is 5-27 Old Street, London EC1V 9HL.
How We Collect Your Information
We collect personal data about you in the following instances:
a) When you voluntarily give it to us: We may collect information when you contact or request information from us through our online forms when you interact with us, and give us your testimonials through our social media profiles or directly on our Site. We may also collect information when you submit your CV and when you engage in a commercial relationship with us.
b) When other people give it to us: We may collect information from advertising and marketing partners in order to monitor, manage and measure ad campaigns. We also may collect information that is publicly available.
c) We may collect browsing data automatically when You visit our Site.
Which Information We Collect About You
We may collect the following information from You:
When you contact us to request information or when you are interested in the services we offer, we may collect information contact information such as first name and surname, email address, telephone number(s), and address.
When you contact us interested in working with us, we may collect information such as contact information, employment history, professional qualifications, and any other information provided through the CV.
When you visit our Site, we may collect browsing information which is detailed in our Cookie Notice.
We do not knowingly collect data from children. If a parent or legal guardian learns that a child provided us with personal information, please contact us, and we will make commercially reasonable attempts to delete such personal information.
We do not ask you to provide special categories of personal data (such as data revealing health, or racial or ethnic origin) through this Site. If a CV or free-text message you send us happens to contain such data, we process it only so far as necessary to handle your inquiry or application and delete it where it is not needed; where required we rely on Article 9(2)(b) or on your explicit consent under Article 9(2)(a).
For Which Purposes We Collect Your Information
We use the information we hold about you for the following purposes and on the following legal bases:
a) Reply to your inquiries and respond to your requests - Justified based on our legitimate interest in offering You our services.
b) Provide You with our services and administer and manage our relationship with you - Performance of a contract with you.
c) Gather statistical information from Site users and analyze for trends - Justified based on our legitimate interest to improve your experience when navigating through our Site and to improve our services.
d) Provide you with news and information related to our services and products that we believe may interest you - Where required, your consent; for existing customers, our legitimate interest under the "soft opt-in" for our own similar products and services. You can object or opt out at any time, and every marketing message contains an unsubscribe link (Article 21).
e) Evaluate your candidacy when you submit your CV to us - Performance of a contract with you.
f) Provide government agencies with information when required by law - Necessary for us to comply with our legal obligations.
g) We may also collect your information in our legitimate interest to prevent fraud or harm to us or to any third party and ensure the security of our network and services.
Who We Share Your Information With
We commit not to sell any personal information to third parties. However, we may disclose personal data to third parties if you consent to us doing so, as well in the following circumstances:
a) Our entities within the Isara Systems Ltd group of companies;
b) Our third-party services providers, suppliers and partners that assist in providing our Services, such as system hosting, management, support, and data analysis;
c) Credit or reference providers or debt collection companies;
d) Our professional advisors, including lawyers, consultants, accountants, auditors and insurers;
e) Possible acquirers or investors (and our and their advisors) in the context of facilitating or implementing a business reconfiguration or reorganisation or a transfer or sale of all or part of our assets or business, including, but not limited to a divestiture, acquisition or business reconfiguration. Alternatively, we may seek to acquire other businesses or merge with them;
f) Competent governmental and public authorities, in each case, to comply with legal or regulatory obligations or requests.
Some of the service providers mentioned above may be located abroad, and, in this case, we adopt additional safeguards to guarantee an adequate level of protection for your personal data.
Transfer of Your Information
We from Isara Systems Ltd will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy, and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.
When we transfer personal data out of the EEA or the UK, we rely on an appropriate transfer mechanism: the European Commission's Standard Contractual Clauses (and, for the United States, the EU-US Data Privacy Framework where the data importer is certified), together with the UK International Data Transfer Addendum for transfers subject to the UK GDPR. We carry out a transfer impact assessment and apply supplementary measures where needed. A copy of the relevant safeguards is available on request at dpo@isara.ai.
How We Protect Your Information
To ensure that your personal information is secure, we communicate our privacy and security guidelines to all Isara Systems Ltd employees and business partners and strictly follow precautionary measures regarding privacy within the company.
We strive to protect your personal information through physical, technical and organizational measures aimed at reducing the risks of loss, misuse, unauthorized access, disclosure and improper alteration of this data.
We make commercially reasonable efforts to ensure the security of our systems. However, please note that this is not a guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical technical or managerial safeguards. If we become aware of a personal data breach, we will notify the competent supervisory authority within 72 hours where the breach is notifiable under Article 33, and we will inform affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms under Article 34.
How Long We Retain Your Information
We have determined retention periods based on the purpose of the processing and the rules set forth within the GDPR, as well as the legal and business requirements. For example, the GDPR requires us to remove data when it has served its purpose and is no longer of use. We review the personal data we regularly collect to ensure that the personal data we have is up-to-date and is not retained longer than needed or required by the regulation.
By way of indication: inquiry and support correspondence is retained for at least 24 months after the matter is closed; unsuccessful applicant CVs for 12 months after the decision unless you consent to a longer talent-pool period; marketing contact data until you opt out and for a short suppression period thereafter; and cookie data for the lifespans set out in our Cookie Notice. Conversation data processed on the platform is retained under the terms of the applicable Data Processing Agreement.
If you wish to have more detailed information about our retention times, please contact us at dpo@isara.ai.
Cookies
We use cookies and other similar technologies to collect data on how our website is used. Through this analysis, we are able to improve and optimize our website user experience. For example, we get information on which service pages you go to, what blog texts you might be interested and how you navigate between the pages. In order to develop our website, it is important to know what kind of website content is most efficient and functional; this way, we know what stays, what goes and what needs to be tweaked. The data we collect also helps us personalize services and marketing to you. We can, for example, define our customer personas and share content with you that you really respond to or might prove more useful. This involves profiling for marketing purposes; you can object to it at any time (Article 21(2)), and where we rely on consent you can withdraw it at any time. We set non-essential cookies (including analytics and marketing cookies) only after you have given consent through our cookie banner, and you can change or withdraw your choices at any time using the banner or the "Cookie settings" link on our website. Managing cookies through your browser settings is an additional option but is not a substitute for these controls.
For more information, please check our Cookie Notice.
Your Rights
Under the law, you are granted certain fundamental rights when data about you is being processed. We will ensure to reach out without undue delay (no more than 30 days) when you submit a request related to exercising your data subject rights. Although uncommon, when applicable for official or legal reasons, we may be unable to address the specific request you make related to your rights.
Also, if a request is manifestly unfounded or excessive, we may either charge a reasonable fee taking into account the administrative costs, or refuse to act on the request. In this scenario, we will inform you of the reasons.
As a data subject, you have the right to: request confirmation and a copy of your Personal Data; rectify or update inaccurate data; erase your data in certain circumstances; restrict processing in certain circumstances; export your data where technically feasible; withdraw consent where processing is based on it; and, in some cases, object to processing.
If you feel that you have not received a satisfactory response from us, you may have the right under applicable laws to consult with the data protection authority in your country.
For your protection, we may need to verify your identity before responding to your request. You may personally exercise these rights or appoint a legal representative to make requests on your behalf.
If you wish to exercise your rights, or if you have any other questions relating to your rights or this privacy statement, please contact us at dpo@isara.ai.
You may also make such a request by writing to us at:
Attn: Data Protection Office
5-27 Old Street
London EC1V 9HL
You also have the right to lodge a complaint with a supervisory authority. You can find a list of Supervisory Authorities here.
Modifications to This Privacy Policy
Isara Systems Ltd reserves the right to change this Privacy Policy at any time by posting revisions on this web page. Such changes will be effective upon posting and the current version published on our website shall apply.
Please revisit this page to stay aware of any changes. If the Privacy Policy is part of an agreement with you, we will notify you by e-mail or other appropriate means in case of an amendment.