privacy-policy

Gobby Limited is a Private Limited Company. Gobby is based in 61a High Street South, Rushden, England, NN10 0RA, and is a company registered in England and Wales, registered company number: 11776608.

Gobby operates within the European Economic Community (EEC). Gobby primarily works with Shadowcat Systems Limited (software development partner) and Silverject Insight Limited (data analysis and reporting).

Gobby Limited is registered with the Information Commissioner’s Office (ICO) as a Data Controller for the processing of Personal Data.

Gobby collects only the minimal level of data needed for standard legal processing of financial transactions and data related to contracts, usually between organisations (B2B) and Individuals (B2C).

Occasionally, due to the nature of email addresses in organisations, we will collect an email address that identifies an individual in that organisation, or collect personal private details for the sole function of providing services by consent.

Gobby also collect social media identification only where:

It is freely available in the public realm;
They have been granted specific right to use the information.

This ‘availability’, or ‘right to use’ may be from one of the following reasons:

* A promotional component of an organisation that we have received;
* An actively shared identification method where it is clear that consent is given to use such;
* A consented method of contact by being freely presented as such by the individual, or in response to an opt-in form that was clearly selected;
* Another lawful method of use identified in Article 6 of the GDPR.

Information collected by Gobby is only used for the standard organisational practices of the company. For the most part this is merely to facilitate communication and deliver services. At some times we will use information to inform current or previous customers of any changes within the organisation or to contact them regarding changes that is in the public domain or as part of our service commitment and service delivery.

Gobby do not collect information for:

* Any automated processing;
* Unsolicited direct marketing except under consent (Article 6(a)) or legitimate business interest (Article 6(f));
* Automated profiling; To share with a 3rd Party.

Gobby collects only the minimal level of data needed for standard legal processing of financial transactions and data related to contracts, usually between organisations (B2B) and Individuals (B2C).

Occasionally, due to the nature of email addresses in organisations, we will collect an email address that identifies an individual in that organisation, or collect personal private details for the sole function of providing services by consent. Gobby also collect social media identification only where:

* It is freely available in the public realm;
* They have been granted specific right to use.

This ‘availability’, or ‘right to use’ may be from one of the following reasons:

* A promotional component of an organisation that we have received;
* An actively shared identification method where it is clear that consent is given to use such;
* A consented method of contact by being freely presented as such by the individual, or in response to an opt-in form that was clearly selected;
* Another lawful method of use identified in Article 6 of the GDPR.

Information collected by Gobby is only used for the standard organisational practices of the company. For the most part this is merely to facilitate communication and deliver services. At some times we will use information to inform current or previous customers of any changes within the organisation or to contact them regarding changes that is in the public domain or as part of our service commitment and service delivery.

Gobby do not collect information for:

* Any automated processing;
* Unsolicited direct marketing except under consent (Article 6(a)) or legitimate business interest (Article 6(f)); Automated profiling; To share with a 3rd Party.

Gobby collects data on behalf of its clients (data collectors) for the purposes of survey completion. This data is processed and supplied to the survey owner. The survey owner is required, by Gobby Terms and Conditions, to abide by the UKGDPR and the GDPR of the European Union.

Due to the nature of email addresses in personalised surveys, we may collect and process an email address that identifies an individual, or collect personal private details for the sole function of providing services by consent.

Gobby also collect social media identification only where:

* It is freely available in the public realm; They have been granted specific right to use.

This ‘availability’, or ‘right to use’ may be from one of the following reasons:

* A promotional component of an organisation that we have received; 
* An actively shared identification method where it is clear that consent is given to use such; 
* A consented method of contact by being freely presented as such by the individual, or in response to an opt-in form that was clearly selected; 
* Another lawful method of use identified in Article 6 of the GDPR.

Information collected by Gobby is only used for the standard organisational practices of the company. For the most part this is merely to facilitate communication and deliver services. At some times we will use information to inform current or previous customers of any changes within the organisation or to contact them regarding changes that is in the public domain or as part of our service commitment and service delivery. Gobby do not collect information for:

* Any automated processing;
* Unsolicited direct marketing except under consent (Article 6(a)) or legitimate business interest (Article 6(f));
* Automated profiling;
* To share with a 3rd Party.

Gobby use a number of methods to ensure that they manage data in a responsible manner. We use a combination of private networks, secure access, logging, monitoring and detection on our services. Gobby staff are constantly keeping aware of security changes, best practices and threats and act in a responsible and appropriate manner.

Gobby does not share any personal information with third parties for the purposes of processing or automated profiling except to deliver services contracted for (see the use of software and services below).

Gobby does not share lists or other data for the purposes of direct marketing. Only information necessary for legal processing is shared with our accountants of Denton Tavara Ltd, 61a High Street South, Rushden, England, NN10 0RA.

The rights of any individual whose name, or other data, may be collected in the course of our normal business activities, listed above, will be honoured at all time. You can contact us regarding the exercise, or information relating to, you rights at any time using the information in ‘contact us’ below. These rights include (but may not be limited to):

Transparency:
We will let you know what data we have collected;

Collection:
We will let you know, to the best of ability, where the data was collected from;

Access:
We will let you access the data as long as it does not conflict any other person’s rights, the right to legal processing (Article 6(c)), the rights determined by a private contract (Article 6(b));

Changes:
If you think any of the data we hold is incorrect we will correct such information on your request;

Deletion:
Except where it is required under Article 6(b) and 6(c) we will honour your right to be forgotten and to delete information that you do not wish us to hold; Restriction of Processing: You have the right to restrict any processing that you believe is being performed except those required under Article 6(b) and 6(c);

Communication:
We will attempt to keep you apprised of any of your above rights, and to carry out your data rights requests except where the cost of such an action outweighs the data stored or the risk. This does not affect your statutory rights but allows a financial limit to be set so that we cannot be disproportionately affected by any request following the guidance of Recital 13. We will keep you informed of any decisions made and our reasoning and give you the right to submit a reasonable objection to any decision;

Portability:
Wherever possible we will allow you your right to move the data we have on you to another location except where it is commercial data which we have legally obtained and may retain or delete. This does not affect any of your rights;

Profiling:
You have the right to refuse any profiling of data we hold about you; Automated Decisions: You have the right to refuse any automated decisions based on information we have on you. You have the right to request decisions are made by a natural person.

Gobby uses a number of third party sites to store information. However very few of them are used to store personally identifiable information.

Email:
Gobby maintains its own hosted email service in the UK, the data is not shared.

Staff:
Staff may log in to admin accounts from any location worldwide but the data is maintained in the UK.

Shadowcat Systems:
Shadowcat Systems Limited provide GDPR consultancy and advice. See https://shadow.cat/privacy/

Silverjet Insight:
Silverjet Insight Limited provides survey data analysis, reporting, customer and marketing communications services and consultancy. https://www.silver-jet.co.uk/privacy-policy

Gobby does not collect information on individuals except in the context of direct business relationships. As part of our commitment to changing policies we will be instigating a removal of information policy whereby customers who have passed any legal boundary for the retention of data will be removed from our systems unless they are also a current customer or have specifically requested that we keep their information.

A contacts database may contain data for a period longer than standard legal processing but this is stored in a separate location to any email, business details or other forms of communication. Contacts databases will be regularly purged of old information.

The rights of any data subject will be upheld in accordance with the above statements.

Gobby does not hold data in any international location except where identified in the above 3rd party list. These will be regularly maintained in accordance with the Data Retention policy.

You can contact Gobby on Data Protection by writing to:

Data Protection
Gobby 
61a High Street South
Rushden
England
NN10 0RA

By telephone on +44 (0)1780 769159.

By email at info@gobby.io using the subject line “Data Protection Enquiry”

If you are unhappy with how your Personal Data is processed by Gobby Limited, you have the right to complain to us using the contact address above. If you remain unhappy, following our response to your complaint, you have the right to lodge a further compliant with our Supervisory Authority, The Information Commissioner’s Office (ICO).

The ICO’s address is:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF.

You can also contact them by telephone on 01625 545 745 or via their website at www.ico.org.uk.

Gobby Privacy Policy: Version 1.1 – 9th February 2023