Privacy Policy
Last updated: November 10, 2023
SBBI Group respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, share, and protect personal data. It also outlines your privacy rights and how the law protects you.
Information We Collect
We only collect personal data that is necessary, relevant, and adequate for the purpose of running our business and providing services to you.
This includes:
- Contact information such as name, email address, phone number, postal address
- Financial information such as bank account details for billing and payment
- Demographic data such as company, job title, preferences, interests
- Website usage data such as IP addresses, cookies, web beacons
- Any other personal data you choose to provide during your interactions with us
How We Use Personal Data
We use your personal data lawfully, fairly, and in a transparent way. Our main purposes include:
- Providing and customising our services
- Sending service notifications, reminders, technical notices
- Responding to your customer support needs
- Marketing and advertising our products and services
- Analysing how our services are used for improvement
- Detecting, preventing, and investigating security incidents
We only process your personal data if we have a lawful basis for doing so, including:
- When we have your consent
- To fulfil a contract with you
- To comply with our legal obligations
- To protect your vital interests or those of others
- To perform a task carried out in the public interest
- To pursue our legitimate interests, where those interests are not overridden by your rights and interests
You have the right to withdraw consent, stop certain uses of your data, or object to our legitimate interests at any time.
How We Share Personal Data
We do not sell or trade your personal data. We only disclose data to:
- Service providers and partners who assist us in operating the business and delivering services, based on our instructions and policies
- Law enforcement agencies or government authorities if legally required to do so for comply with laws
- Any successors to all or part of our business, in case of a merger, acquisition, or other company sale
We require all third parties to respect your privacy and comply with data protection laws. We only allow them to process your personal data for specified purposes and in accordance with our contractual instructions.
Data Retention
We retain your personal data only for as long as needed to fulfil the purposes outlined in this policy unless a longer retention period is required by law. Common retention periods for certain types of data are:
- Account information: Active account lifespan
- Marketing data: 24 months
- Website activity: 12 months
- Financial transactions: 7 years
Data Protection and Security
We implement appropriate technical and organisational measures to protect your personal data. Our security controls are designed to maintain an appropriate level of data confidentiality, integrity, availability, resilience, and ability to restore the data.
Some of the safeguards we use include:
- Encryption of data in transit and at rest
- Secure access controls to systems and data
- Network security monitoring and protections
- Testing and audits of technology controls
- Internal policies and procedures for data handling
Despite our efforts, no security controls are 100% effective. We cannot guarantee that your data will never be breached or accidentally compromised. If a breach occurs, we will promptly notify you as required by law
.
Your Data Rights and Choices
You have certain rights regarding your personal data, subject to limitations:
- Access your data
- Correct inaccurate or incomplete data
- Delete your data
- Restrict or object to processing of your data
- Receive an electronic copy of your data for portability
- Opt-out of marketing communications
- File a complaint with us and your local data protection authority
If you wish to exercise any of these rights, please contact us using the contact details at the end of this policy.
Cross-Border Data Transfers
We primarily store and process your data in the regions where we operate. However, some of our third-party service providers may access or store the data outside of those regions. Whenever we transfer your data cross-border, we make sure appropriate safeguards are in place in compliance with applicable laws.
Cookies and Tracking Technologies
We use cookies and similar technologies on our websites and services. These helps provide and improve our services, personalize your experience, monitor website performance, and display relevant advertising.
You can manage your cookie preferences through your browser settings and our cookie consent manager. Blocking certain types of cookies may impact your user experience.
Changes to This Policy
We may occasionally make changes to this privacy policy to reflect evolving laws, regulations, business practices, and customer feedback. We will post any updates on our websites. Please check back periodically for the latest version.
Contact Us
If you have any questions about our privacy practices or this policy, please contact us.