Privacy Policy – Third party applications
To help us deliver SME Professional and our other Services we require to share information and data with various third-party applications. We list those applications here. A third-party provider may require access to perform services on our behalf.
Atlassian
We use Atlassian for feature request and bug tracking. Customer names and contact details may be stored within a development ticket.
Atlassian complies with the EU-U.S. Privacy Shield Frameworks.
https://www.atlassian.com/legal/privacy-policy
BulkSMS
We occasionally use BulkSMS to send individual text messages to customers. BulkSMS will store the name and mobile telephone number of the recipient. Any BulkSMS account held by Customers and used as an integration with SME Professional is a separate contractual agreement between BulkSMS and the Customer.
https://www.bulksms.com/company/data-protection-and-privacy-policy.htm
Dropbox Business
We use Dropbox Business for our own internal storage – this data includes, for example, our Microsoft Excel, Microsoft Powerpoint, Microsoft Word, PDF and image files.
Dropbox complies with the EU-U.S. Privacy Shield Frameworks.
https://www.dropbox.com/privacy
Eventbrite
We use Eventbrite to allow bookings for training sessions and events. Eventbrite will store the name, email address, IP address and telephone numbers of attendees.
Eventbrite complies with the EU-U.S. Privacy Shield Frameworks.
FreeAgent
We use FreeAgent to provide accounting software for our business. The software stores the names, email addresses, telephone numbers and addresses of customers or potential customers for the purposes of sending quotations and invoicing.
https://www.freeagent.com/website/privacy/
GoCardless
We process Direct Debit payments via GoCardless. Name, address, email address and financial details (such as account holder name, account number, sort code) of the GoCardless end-customer (i.e. the purchaser of services/goods from a merchant using GoCardless to collect payments) will be stored on their systems.
https://support.gocardless.com/hc/en-gb/articles/360000281005-GoCardless-and-GDPR
Google Inc.
We use Google Analytics to help us understand the way people use SME Professional and our websites so that we can continue to make them better. To provide this Google collects anonymised statistical data about the use of our website, software and applications.
Google complies with the EU-U.S. Privacy Shield Frameworks.
Read Google Analytics’ Privacy Policy
Mailchimp software (The Rocket Science Group LLC d/b/a MailChimp )
We use Mailchimp for sending newsletter and promotional emails. To do this Mailchimp stores user names, email addresses and analytical data. We use that data to ensure we only send emails relevant to the individual.
The Rocket Science Group complies with the EU-U.S. Privacy Shield Frameworks.
https://mailchimp.com/legal/privacy/
Mandrill software (also The Rocket Science Group LLC d/b/a MailChimp )
We use Mandrill for sending transactional emails from SME Professional and from websites we have developed. To do this Mandrill stores user names, email addresses and analytical data relating to emails Customers send from SME Professional. We use that data to ensure we only send emails relevant to the individual.
The Rocket Science Group complies with the EU-U.S. Privacy Shield Frameworks.
https://mailchimp.com/legal/privacy/
Microsoft
We use Office365 to provide email accounts for our business. It is likely that emails stored within Office365 will contain customer information – for example, a request received to one member of the team to request a customer call back from another. The Office365 platform also includes calendars, person contact lists, task lists and notes, all of which may contain customer information. Desktop, Laptop, Tablet and Mobile devices will continue to retain local ‘cached’ copies of some elements of this data.
We use Teams for VOIP telephone systems and agreed screensharing during support calls. We record calls for training and monitoring purposes.
Call Detail Records produced by a telephone call or other telecommunications transactions. The record contains various attributes of the call, such as time, duration, completion status, source number and destination number;
We use Teams for internal electronic communications. It is likely these discussions may regard a customer from time-to-time.
Microsoft complies with the EU-U.S. Privacy Shield Frameworks.
https://privacy.microsoft.com/en-us/privacystatement
Imperva
https://www.imperva.com/Other/Legal
Wrike
We use Wrike as a task management and task delegation tool. Customer details, such as name, email address and telephone numbers may be stored in the software from time-to-time.
Wrike have European Data Centres and have certified with the EU-US Privacy Shield.
https://www.wrike.com/blog/what-wrike-is-doing-to-comply-with-gdpr/
ZamZar
We use the Zamzar Developer API framework to convert Microsoft Word DOCX files to PDF file format. Files are stored temporarily during the conversion process and then immediately deleted.
https://www.zamzar.com/privacy.php
Zoho
Our customer support ticketing system and ticket related emails are provided by Zoho. Names, email addresses and telephone numbers will appear in Zoho along with all discussion between the person raising the ticket and ourselves.
Zoho also provides our lead management software which stores names, email addresses and telephone numbers.
Zoho store Data in EU Data Centres. Zoho Corporation participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework with respect to any transfer of data to the US.
https://help.zoho.com/portal/kb/articles/zoho-desk-eu-data-protection
Data centres
SME Professional hosting
We use a range of UK based data centres to host our software on our dedicated servers and to provide off-site backup functionality.
Website and API form hosting
We use UK based data centres to host our websites and our API integrations.
Portal hosting
We use Amazon Web Services (AWS) to host our landlord, tenant, vendor and buyer portals. Data is pulled via Application Programming Interfaces (APIs) from the data centres hosting SME Professional software.
ISO27001 accredited
All our data centres are ISO27001 accredited.