Privacy Policy

legal

Website Terms of Use

Terms & Conditions

Data Protection

Cookie Policy

Non-Circumvention

Acceptable Use

Fluidstack Companies

This Privacy Policy sets out how Fluidstack processes and protects your personal data through use of Fluidstack.io (the Site) or when purchasing services from Fluidstack either directly or via the Fluidstack Console. Please read it carefully to understand the types of personal data Fluidstack collects, how it is used, the circumstances under which it is shared, and your rights in relation to personal data held about you.

1. Who we are

Fluidstack is made up of different legal entities, details of which can be found here. FLUIDSTACK LIMITED a company registered in England with company number 10985545 and registered address at Third Floor, 20 Old Bailey, London, EC4M 7AN, United Kingdom is the controller responsible for the Site. Any questions in relation to this Privacy Policy, please contact legal@fluidstack.io.

2. Personal data we collect

Personal data we need to deliver, manage and improve the Fluidstack services - justified on the basis of our legitimate interests.
1. Username and password, your name, corporate email address, billing address, phone number and any feedback about the Fluidstack services that you decide to provide.
2. You will be asked to provide us with some basic information so that we can set you up with an account and so that we can manage this account, as well as provide services as required. We will ask you to provide some contact information so that we can reach out to you if that is necessary in relation to the Fluidstack services. We will also use the same information to respond to any queries you may have in relation to the Fluidstack services. We will continuously improve the Fluidstack services on the basis of any relevant information that you decide to provide to us
Personal data we need to promote and advertise the Fluidstack services - justified on the basis of our legitimate business interests.
1. We may approach you offline or online (for example on social media or via email) and inquire whether the organisation you represent is interested in the Fluidstack services. We will use whatever information you have decided to publish to do that e.g LinkedIn profile. We will also use whatever information you have decided to share with us offline by way of, say, exchanging business cards, to do that.
2. We will contact you if you fill in any of the web forms on the Site. When we do that we will use the contact details you have decided to provide in the relevant form.
Personal data we need to receive third party services - justified on the basis of our legitimate interests. If the organisation you represent is a supplier to Fluidstack we will ask you to provide us with some basic information so that we can receive and pay for the services your organisation provides to Fluidstack and its end users. Such information typically includes your name, corporate email address and phone number.
Information generated when you browse the Site - justified on the basis of your consent. When you visit the Site, certain technical information about the device you use to access the Site that may identify you will be generated by 'cookies', web-beacons and other similar tracking technologies. Please see the 'cookies' section below for the technical details about this type of data processing. Please use the 'cookies' banner on the Site to exercise your choice regarding accepting or rejecting cookies.
Minors – not collected. We do not intentionally collect personal data from or about minors. If you are the parent or guardian of a minor and believe they have provided us with personal data, please contact us using the information set out in the 'Who we are' section to request deletion.
Customer Data – excluded. Fluidstack does not process any Customer data uploaded to cloud infrastructure in connection with Customer's use of the Fluidstack services. This Customer data is processed by the third party supplier and Fluidstack excludes all liability in this respect.

3. Disclosures of personal data

Fluidstack will treat your information as confidential information. We use various technological solutions providers in order to deliver, manage, improve, promote and advertise the Fluidstack services. Our suppliers are prohibited from using personal data for any purpose other than the delivery of their services to us. Nevertheless, depending on their type, our suppliers may have limited access to your information. These providers include cloud storage providers, customer relationship management systems providers, email services providers, social media companies, analytics providers and others who assist us in promoting, delivering, managing and improving the Fluidstack services and the Site.
In addition, we may also disclose your personal information to third parties in the following circumstances:

Purpose of disclosure	Justification
If Fluidstack buys any business or assets, Fluidstack may disclose your personal information to the prospective seller of such business or assets.	Legitimate interests (to enable the acquired business to offer services to our customers).
If Fluidstack or substantially all of its assets are acquired by a third party, personal information about our customers' representatives will be one of the transferred assets.	Legitimate interests (to allow the prospective buyers to provide you the Services).
If we need to protect the rights, property, or safety of Fluidstack, our customers, or others, we may disclose your personal information to third parties, such as professional advisors and official authorities.	Legitimate interests (to enforce our rights).
We may disclose your personal information to third parties, the court service and/or regulators or law enforcement agencies in connection with proceedings or investigations anywhere in the world where compelled to do so. Where permitted, we will direct any such request to you or notify you before responding unless to do so would prejudice the prevention or detection of a crime.	Legal obligation.

4. Exports outside the EEA or the UK.‍

Your personal data will be stored electronically on computer systems located outside of the United Kingdom (UK) or the European Economic Area (EEA). Where data is transferred outside of the UK or EEA, Fluidstack will impose data protection safeguards similar to those deployed inside the UK and the EEA. Where required by applicable law, Fluidstack will transfer your personal information subject to European Commission and UK Information Commissioner's Office approved contractual terms that impose equivalent data protection obligations directly on the recipient. Please contact us if you would like further details of the specific safeguards applied to the export of your personal data.

5. How long we retain personal data

Fluidstack will hold personal data about you for as long as is necessary in order to conduct the processing detailed above, deal with any specific issues that may raise, or otherwise as is required by law or any relevant regulatory body. Please note some personal data may need to be retained for up to six years to ensure Fluidstack can comply with applicable laws and internal compliance procedures.
Fluidstack restricts access to your personal information to those persons who need to use it for the relevant purpose(s). Our retention periods are based on business needs and your information that is no longer needed is either irreversibly anonymised (and the anonymised information may be retained indefinitely) or securely destroyed.
To determine the appropriate retention period for personal data, Fluidstack considers the amount, nature, and sensitivity of the personal data, the personal risk or harm from unauthorised use or disclosure, the purpose for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

6. Your rights ‍

Under UK GDPR, you have various rights in relation to personal data about you that is processed by Fluidstack. All of these rights can be exercised by contacting us at the email address specified above.
You have the right to:


Be informed (of the processing).	Access (such information).	Rectification (of inaccurate information).
Erasure (of such information).	Restrict processing (in certain cases).	Object to profiling.
Data portability (in certain cases).	Complain to the Information Commissioner's Office.	Withdraw consent (if we have collected your personal information on this basis).

Detailed information on the full content of your rights (and any conditions that may apply) is provided by the UK Information Commissioner's Office and is available on their website: https://ico.org.uk/your-data-matters/.
Asking Fluidstack to stop processing your personal data or deleting your personal data will likely mean that you the organisation you represent will no longer able to use the Fluidstack services, or at least those aspects of the Fluidstack services which require the processing of the types of personal data you have asked to be deleted.
While Fluidstack will not sell personal data about you (or any other data you provide us with) to third-parties, Fluidstack reserves the right to share any data which has been anonymised. You acknowledge and accept that Fluidstack owns all right, title and interest in and to any derived data or aggregated and/or anonymised data collected or created by u

7. Cookies.
For information about the cookies used on the Site and how to change your preferences, please see the Cookie Policy here.

8.Automatic decision-making

If you are a resident of the EEA or UK, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.
Fluidstack does not engage in fully automated decision-making that has a legal or otherwise significant effect using personal data.
Fluidstack uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.
Fluidstack includes elements of automated decision-making in the following services:
1. a temporary 'deny list' of IP addresses associated with repeated failed transactions. This 'deny list' persists for a small number of hours; and
2. a temporary 'deny list' of credit cards associated with 'deny-listed' IP addresses. This 'deny list' persists for a small number of days.

9. Changes to this notice.

Any changes we make to this Privacy Policy in the future will be posted on this page, and where appropriate, notified to you by email. We therefore encourage you to review it from time to time to stay informed of how we are processing your information.