Privacy Policy
m2Commerce is committed towards the responsible, respectful and protected use of your personal data. The privacy policy explains how we collect, store and process your information when you use the m2Commerce website. Also, it provides ways to exercise your data subject rights.
This privacy policy will explain these things:
- Who we are?
- Where to contact us?
- What personal data we use and how we collect it?
- The categories of third parties with whom we share your personal data.
- How we retain your information and keep it secure?
- Your rights and how to exercise them.
Who we are?
For the purpose of data protection law, the “controller” is m2Commerce, the company incorporated and registered in London its registered office address: 4th Floor, Silverstream House, 45 Fitzroy Street, Fitzrovia London, W1T 6EB
If you would like more information about this policy, or to exercise your data subject rights, please contact us using the following details:
E-mail: hello@m2commerce.co.uk
Post: 0203 355 8081
Data we collect
We collect data when you subscribe to the m2Commerce Newsletter.
- You provide us with the following data: Email address
- The data is stored in third party services.
- We retain this data indefinitely unless a data subject right is exercised.
- We process this data for digital marketing.
- We process this data under the legal basis of consent.
Job Applications
The data is collected when you apply for a job at m2Commerce.
- The following data is provided to us:
Name,
Email address,
Biographical information,
Any other information provided - The data is stored in third-party services.
- We retain this data indefinitely unless a data subject right is exercised.
- We process this data for recruitment activities.
- We process this data under the legal basis of legitimate interests and legal obligations.
General enquiries
The data is collected when you contact us by email or phone.
- The following data is provided to us:
Name,
Email address,
Any other information provided - The data is stored in third-party services.
- We retain this data indefinitely unless a data subject right is exercised.
- We process this data for sales activities, business development and general support.
- We process this data under the legal basis of legitimate interests, contractual necessity and legal obligations.
Behavioural Tracking
This data is collected when you use the m2Commerce website.
The following data is provided to us:
- Marketing information.
- Technical information.
- Usage data
The data is stored in cookies and third-party services.
Who do we share data with?
Your personal data can be provided to the following recipients for the purpose set out in the notice.
Service providers
- Digital office services: Dropbox, Google Mail, Google Drive, Slack
- Marketing Services: LinkedIn Ads and Marketing Solutions, Google Adwords Conversion and Dynamic Remarketing, Adroll Pixel and Roundtrip, Facebook Connect and Custome Audience, Dotmailer.
- Analytics services: Google Analytics, Hotjar
- Content Services: Google Tag Manager, MyFonts
- Solicitor
Any parties where we need to do it legally or have permission for doing so.
Any other parties where we have specific consent to do so.
How do we keep data secure?
We follow certain security measures to preserve data integrity, to prevent its loss and regulate access to it. Your data is accessible to our authorized employees and third parties that process your data on your behalf.
We have the following security measures in place.
- Training and enforcement of data security practices.
- Restriction of access to personal information.
- Use of secure technologies (eg SSL, encryption)
- Animosity and aggregation of data.
- Regular reviews of information collection, storage and processing practices to protect against unauthorised access.
- Scenario planning and crisis-management exercises to ensure we are ready to respond to cybersecurity attacks and data security incidents.
Data Transfer outside the EEA
Although we are based in London, we may transfer your personal information to a specific location outside the Economic area of London, if we consider it necessary or desirable.
In such cases, to safeguard your privacy rights, transfers will be made to recipients to which a European Commission “adequacy decision” applies (this is a decision from the European Commission confirming that adequate safeguards are in place in that location for the protection of personal data), or will be carried out under standard contractual clauses that have been approved by the European Commission as providing appropriate safeguards for international personal data transfers, or by the adoption of EU-US Privacy Shield.
Your Information Rights
Data Protection Laws provide the following laws for individuals.
- Right to be informed of how personal data is collected and used.
- Right of access to your personal data.
- Right to rectify your personal data that it should be true, accurate and complete.
- Right to erasure your personal data.
- Right to restrict or object to:
Processing of personal data for remarketing,
Our continued processing of your personal data,
Decisions being taken by automated means which significantly affect you. - Right to portability of your personal data in a commonly used format.
Lodging a complaint
You have the right to lodge a complaint with the supervisory authority, the ICO.