GDPR Compliance

Our commitment

We treat data protection as a core responsibility. We apply the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability across everything we do.

Data controller

For the purposes of the GDPR, the data controller is Software Insight Ltd, 35 Bull Street, West Midlands B4 6AF, Birmingham, United Kingdom. You can reach our data protection contact at privacy@softwareinsight.co.uk.

Lawful bases for processing

We only process personal data where we have a lawful basis to do so: consent, performance of a contract, compliance with a legal obligation, protection of vital interests, a public task, or our legitimate interests.

Your rights under the GDPR

Subject to certain conditions, you have the following rights:

• Right to be informed — about how your data is used.
• Right of access — to obtain a copy of your personal data.
• Right to rectification — to correct inaccurate or incomplete data.
• Right to erasure — to request deletion in certain circumstances.
• Right to restrict processing — to limit how we use your data.
• Right to data portability — to receive your data in a portable format.
• Right to object — to processing based on legitimate interests or for marketing.
• Rights related to automated decision-making and profiling.
• Right to withdraw consent — at any time, where processing relies on consent.

International data transfers

Where we transfer personal data outside the UK or EEA, we ensure an adequate level of protection through mechanisms such as adequacy decisions or Standard Contractual Clauses, together with supplementary measures where appropriate.

Data breach notification

We maintain procedures to detect, report, and investigate personal data breaches. Where a breach is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority, and you, as required by law.

How to exercise your rights

To make a request, email privacy@softwareinsight.co.uk with details of your request. We will respond within one month, as required by the GDPR. We may need to verify your identity before acting on a request.

Supervisory authority

If you are in the UK and believe we have not handled your data properly, you may contact the Information Commissioner's Office (ICO) at ico.org.uk. If you are in the EEA, you may contact your local data protection authority.