Privacy Policy

1. About us

SCAHH LTD ("SCAHH", "we", "us" or "our") provides software-as-a-service products to businesses.

SCAHH LTD is registered in England and Wales under company number 14551622.

Our registered office is:

SCAHH LTD
Suite RA01
195–197 Wood Street
London
England
E17 3NU

For privacy and data protection enquiries, contact us at info@scahh.co.uk.

2. What information we collect

The information we collect depends on how you use SCAHH.

For most users, this may include:

• your name;
• your email address;
• your telephone number, where provided;
• your organisation and account details;
• information about your use of the SCAHH platform;
• communications you have with us; and
• technical information such as your IP address, browser or device information, login activity and security records.

If you are responsible for purchasing SCAHH, we may also process billing, subscription and transaction information.

Payments are processed through Stripe. Payment card details are provided directly to Stripe and SCAHH does not store full payment card numbers.

We may receive personal information directly from you, from the organisation you work for or provide services to, or automatically when you use our websites or services.

Customers may also use SCAHH to store information about their employees, workers, contractors or other individuals. This may include information such as contact details and emergency contact information.

3. How we use your information

We may use personal information to:

• provide and operate SCAHH;
• create and manage accounts;
• provide customer support;
• manage subscriptions and payments;
• communicate with customers and users;
• maintain the security and reliability of our services;
• investigate problems, misuse or suspected fraud;
• understand and improve how our services are used;
• send marketing communications where permitted by law;
• comply with legal, regulatory, accounting and tax obligations; and
• establish, exercise or defend legal claims.

We must have a lawful basis for processing personal information.

Depending on what we are doing, we generally rely on:

• contract, where processing is necessary to provide our services or manage our relationship with a customer;
• legitimate interests, where necessary to operate, support, secure and improve SCAHH, prevent misuse and communicate with business customers;
• legal obligations, where we are required to process information by law; or
• consent, where consent is required.

Where we rely on consent, you can withdraw it at any time.

4. Information our customers put into SCAHH

SCAHH is a business-to-business service.

Our customers may enter personal information about their employees, workers, contractors or other individuals into SCAHH.

Where the customer decides what information is collected and why it is required, the customer will normally be the data controller and SCAHH will act as a data processor on the customer's behalf.

SCAHH processes this information in accordance with the customer's instructions and our agreement with them.

If your employer or another organisation has entered information about you into SCAHH and you have questions or requests concerning that information, you should normally contact that organisation.

We will assist our customers with data protection requests where required.

5. Who we share information with

We do not sell personal information.

We may share personal information with organisations that help us provide SCAHH and operate our business, including:

• cloud hosting and infrastructure providers;
• payment providers, including Stripe;
• email and communications providers;
• customer support providers;
• analytics, security and monitoring providers;
• other technology suppliers;
• accountants, lawyers, insurers and other professional advisers; and
• regulators, law enforcement agencies or public authorities where required by law.

We may also disclose information in connection with a sale, investment, merger, restructuring or acquisition involving all or part of our business.

Where another organisation processes personal information on our behalf, we put appropriate contractual and security arrangements in place.

6. International data transfers

Some of the organisations we use to provide our services may process personal information outside the United Kingdom.

Where UK data protection law restricts such a transfer, we use an appropriate lawful transfer mechanism or safeguard.

This may include transferring information to a country recognised by the UK as providing an adequate level of protection or using approved contractual safeguards.

7. How long we keep information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected.

How long we keep information depends on factors including:

• the nature and purpose of the information;
• how long our relationship with the customer continues;
• contractual requirements;
• legal, tax and accounting requirements;
• security and audit requirements; and
• whether information may be required in connection with a complaint, dispute or legal claim.

Where we process information on behalf of a customer, retention and deletion may also depend on that customer's instructions and our agreement with them.

When information is no longer required, we will delete, anonymise or securely dispose of it where appropriate.

8. Security

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

Access to personal information is restricted to people and systems that require it.

No online system can guarantee absolute security, but we take reasonable steps to protect the information we hold.

9. Marketing

We may contact business customers and prospective business customers about SCAHH products, services and relevant updates where permitted by applicable data protection and electronic communications laws.

You can opt out of marketing emails at any time using the unsubscribe link in the email or by contacting us.

Opting out of marketing will not stop important service communications relating to your account, security, billing or use of SCAHH.

10. Cookies

Our websites and services may use cookies and similar technologies.

Some cookies are necessary for our services to work. Others may help us understand how our services are used and improve their performance.

Where consent is required for non-essential cookies, we will ask for it before using them.

You can manage your preferences using the cookie controls provided on our website.

11. Your rights

UK data protection law gives you rights over your personal information.

Depending on the circumstances, you may have the right to:

• ask for a copy of your personal information;
• ask us to correct inaccurate information;
• ask us to delete information;
• ask us to restrict how information is used;
• object to certain uses of your information;
• request transfer of your information in certain circumstances; and
• withdraw consent where we rely on consent.

These rights are not absolute and may not apply in every situation.

Where SCAHH is responsible for deciding how your information is used, you can exercise your rights by contacting info@scahh.co.uk.

Where SCAHH processes information on behalf of one of our customers, we may refer your request to that customer because they will normally be responsible for responding to it.

We may ask for information to confirm your identity before dealing with a request.

12. Younger users

SCAHH is a business service and is not marketed or sold directly to children.

However, our business customers may employ younger workers and may use SCAHH to process information relating to them.

Where this happens, the customer is responsible for ensuring that its collection and use of that information is lawful and appropriate.

13. Complaints

If you have a concern about how SCAHH has handled your personal information, please contact us at info@scahh.co.uk.

We will investigate privacy and data protection concerns and respond as soon as reasonably practicable.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

Information about the ICO and how to make a complaint is available at ico.org.uk.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our services, business practices or legal obligations.

The latest version will be published on our website and the date at the top will show when it was last updated.

Where we make a significant change to how we use personal information, we will take reasonable steps to make affected users aware of it.

15. Contact us

For questions about this Privacy Policy or how we handle personal information, contact:

SCAHH LTD
Suite RA01
195–197 Wood Street
London
England
E17 3NU

Email: info@scahh.co.uk