About this policy
This policy explains how Foresight ERP Limited uses personal data when you visit foresighterp.com, contact us, consider or buy our services, use an account provided by your organisation, or communicate with our support and commercial teams.
Foresight ERP Limited is the controller for the personal data covered by this policy. You can contact us about privacy through the contact details published on foresighterp.com.
Foresight ERP Limited is registered in England and Wales under company number 17268138. Its registered office is 124 City Road, London, England, EC1V 2NX.
Where a customer uses Foresight ERP to store or manage personal data about its staff, customers, suppliers or other people, that customer will usually be the controller and Foresight ERP will act as its processor. In that situation, the customer’s privacy policy explains how it uses the data, and our processing is governed by our agreement with that customer.
Personal data we collect
The information we collect depends on how you interact with us. It may include:
- your name, work email address, telephone number, employer, job title and other business contact details;
- messages, meeting notes, demonstration requests, feedback and other correspondence;
- your user account, organisation, role, permissions and authentication records;
- subscription, contract, invoice and payment administration information;
- support requests, diagnostic information and communications with our team;
- technical and usage information, such as your IP address, device and browser information, timestamps, pages viewed, referring page, cookie choices, and security or audit logs; and
- your marketing preferences and interactions with our communications.
Where personal data comes from
We collect personal data directly from you when you complete a form, contact us, attend a meeting, create or use an account, or ask for support. We may also receive personal data from the customer or other organisation that manages your account, from business contacts who refer you to us, from public business sources, and through our website and service when you use them.
How we use personal data
We use personal data to:
- respond to enquiries, arrange demonstrations and take steps requested before entering into a contract;
- set up and administer customer relationships, subscriptions and user accounts;
- provide support, maintain the service and communicate operational changes;
- protect accounts, investigate misuse, prevent fraud and maintain security and audit records;
- issue invoices, keep financial records and meet our legal and regulatory obligations;
- send relevant business marketing where the law allows and record marketing preferences;
- understand and improve our website, service and customer experience; and
- establish, exercise or defend legal claims and respond to lawful requests.
Lawful basis
We process personal data where it is necessary to perform a contract with you or take steps at your request before entering into a contract, to comply with a legal obligation, or for our legitimate interests. Our legitimate interests include responding to business enquiries, administering customer relationships, providing and improving our services, protecting our systems and users, promoting our services and protecting our legal rights. Where the law requires consent, we rely on consent and you may withdraw it at any time.
Marketing
We may send relevant information about Foresight ERP to business contacts where the law allows. You can unsubscribe using the link in a marketing email or by contacting us. We will keep enough information to record and respect an opt-out.
You have the right to object at any time to the use of your personal data for direct marketing. If you object, we will stop using it for that purpose.
Customer data in the service
Customers may use Foresight ERP to process personal data about their staff, customers, suppliers and other people. For that data, the customer usually decides why and how it is used and acts as controller. Foresight ERP acts as processor and uses the data to provide and secure the service in accordance with the customer’s documented instructions and our agreement with that customer, unless the law requires otherwise.
If you wish to exercise a right concerning data held in a customer’s Foresight ERP environment, contact that customer first. We will assist the customer as required by our agreement and data protection law.
International transfers
Some organisations that process personal data for us may be located outside the United Kingdom or may access data from another country. Where data protection law requires it, we use a recognised safeguard for the transfer, such as adequacy regulations or approved contractual clauses, together with any additional measures that are appropriate. You may contact us for further information about the safeguards used.
How long we keep personal data
We retain personal data only for as long as necessary for the purposes described in this policy. When determining how long to keep it, we consider the nature of the information, the duration of our relationship with you, our contractual and legal obligations, security requirements, and applicable time limits for bringing or defending legal claims.
We review the personal data we hold and delete or anonymise it when it is no longer required, unless applicable law requires or permits us to retain it for longer. We may keep limited information where this is necessary to record and respect a request not to receive marketing.
Security
We use technical and organisational measures designed to protect personal data against accidental or unlawful loss, alteration, disclosure, access or destruction. Access is limited according to role and business need. No system is completely secure, and we review our safeguards and respond to suspected incidents under our incident management process.
Your rights
Depending on the circumstances and the lawful basis, you may have the right to:
- ask for a copy of your personal data;
- ask us to correct inaccurate or incomplete personal data;
- ask us to delete personal data;
- ask us to restrict how we use personal data;
- object to processing based on legitimate interests or to direct marketing;
- receive personal data in a portable format where the right applies; and
- withdraw consent at any time, without affecting processing that took place before withdrawal.
These rights are not absolute. We may need to verify your identity and may retain information where the law permits or requires it. You can make a request using the contact details published on foresighterp.com. If we process the relevant information only on behalf of a customer, we may refer your request to that customer.
Complaints
Please contact us first if you have a concern so that we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator. You can find further information at ico.org.uk/make-a-complaint or telephone 0303 123 1113.
Children
Our website and services are intended for organisations and are not directed to children. We do not knowingly collect personal data from children through the website for our own purposes.
Changes to this policy
We may update this policy when our services, suppliers or legal obligations change. We will publish the current version on foresighterp.com and change the last updated date. If a change materially affects how we use personal data, we will take reasonable steps to bring it to the attention of affected people.
Contact us
Questions and requests about this policy can be sent to Foresight ERP Limited using the contact details published on foresighterp.com.
Contact Foresight ERP