Privacy notice
Who we are
The controller for personal data collected through this website is SW Digital Services Limited, a company registered in England and Wales, company no. 17178287. ClearIMS is our product name (formerly AI-27001).
- Contact: [email protected]
- Registered office: 34 Larkin Lane, Kingswood, Hull, England, HU7 3NA
What we collect and why
When you use the apply, call or booking forms on this site, we collect what you put in them: your name, work email, company, role, phone number (if you give one), your message (for example, what’s driving ISO 27001 for you), and any preferred call times or the call time you book.
If you ask us to email you your readiness check results, we collect your email address, your company (if you give it) and your answers, so we can send the results. If your organisation is a company or LLP, one member of our team may also follow up once by email about them, unless you tick the box on the results form asking us not to. If you are a sole trader or in a partnership, we will only follow up if you tick the box asking us to. We will not add you to a mailing list, and you can also tell us not to follow up by replying to the results email.
We use these details to reply to you, to arrange and hold any call you book (including emailing you a calendar invite), and to assess how we can help. We do not use them for anything else. Apart from the readiness check and demo company follow-ups described in this notice, we do not send marketing emails to people who have only filled in a form. If we contacted you first, see If we emailed you first.
If we emailed you first
We sometimes email people at UK companies that look likely to need ISO 27001, for example because a tender, a customer or a job advert asks for it. We only email work addresses at incorporated companies, and only about ClearIMS. To do this we keep your name, work email, job title, company name and number, and a note of the public source where we found your company and why it seemed relevant (such as a tender notice or your company’s website). The email itself tells you where we found you.
Our lawful basis is legitimate interests: telling businesses that may need it about a product that helps. Every email has an unsubscribe link, and replying “no” works too. If you opt out, we keep only your email address (or company domain) on a do-not-contact list, so we never email you again. If you don’t reply, we send at most one follow-up, and delete your details 12 months after our last email. If we noted your details but never emailed you, we delete them 6 months after we noted them.
If you use the demo company
Our demo company at app.clearims.com/demo is open to anyone with a work email. When you use it, we collect the work email you enter, and record which parts of the demo you use and for how long. We use this to give you access and, if your organisation is a company or LLP, to follow up with you once about ClearIMS unless you ask us not to when you enter your email. If you are a sole trader or in a partnership, we will only follow up if you ask us to when you enter your email. Any follow-up email has an unsubscribe link.
Our lawful basis is legitimate interests: showing businesses that may need it how ClearIMS works, and following up with those who looked. We keep these details for 12 months. You can ask us to delete them at any time by emailing [email protected].
Lawful basis
Our lawful basis under UK GDPR is legitimate interests (responding to an enquiry you chose to send us) or, where you ask us about a plan or setup consulting, steps taken at your request prior to entering into a contract.
How long we keep it
We keep enquiry details for 24 months from the date you send them. If you become a customer, we keep them for as long as the contract requires, and then in line with our obligations under that contract.
Cookies and analytics
Unless you accept our analytics cookie, this website sets no optional cookies. We use essential cookies only where they are needed for a service you have asked for (signing in to your account, and paying), described below. Without the analytics cookie, we record anonymous page counts only: the page visited, the time, the referring site’s hostname and any campaign tag in the link (for example, which LinkedIn post you came from). There are no IP addresses and no identifiers that could single you out.
If you choose Accept in the cookie banner, we set two first-party cookies:
cims_consentremembers your choice, so we don’t ask on every page. It lasts six months. If you choose Reject, this is the only optional cookie we set.cims_vidis a random ID that lets us see which pages the same visitor looked at across visits. If you then contact us or book a call, we link that browsing history to your enquiry so we can follow up properly. It lasts six months.
These cookies are ours alone. There is no third-party tracking, no advertising and no data sold or shared. Our lawful basis for the analytics cookie is your consent. You can change your mind at any time with Cookie settings at the bottom of every page; choosing Reject deletes the ID cookie.
Essential cookies, which do not need your consent. If you sign in to your account, we set one cookie, clearims_account, which keeps you signed in for up to eight hours; it is used only for the account to work, and you can sign out at any time. When you reach the card payment step, or update your card from your account, the payment form from Stripe loads on that page, and Stripe may set its own cookies or similar technologies to prevent fraud and make the payment secure. Stripe’s scripts are not loaded on other pages. Signing up and booking a call work whether you accept or reject the analytics cookie.
Sharing
Form submissions are stored on our own server and sent to us by email so we can reply. The companies that host this website and carry our email process your details for us, only on our instructions and under contract. We do not sell or share your details with third parties for their own purposes.
Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you;
- ask us to correct it if it is wrong;
- ask us to delete it;
- object to, or ask us to restrict, our processing of it;
- ask for a copy of it in a portable format.
To exercise any of these, email [email protected]. We will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113. We would welcome the chance to put things right first.
Changes
This notice is a draft under review. We will update it here when it changes, and the date of the latest version will be shown on this page.