Privacy Statement
Cribsync (”we”/”us”) is committed to protecting your privacy and being open and clear about how we use your personal data.
This privacy notice is for our Customers and Hosts (both as defined in our Terms of Service) and its purpose is to let you know how and why we use and process the personal data you entrust us with, how we keep it safe, who we share it with and to explain the legal rights you have in relation to your personal data.
We may update this privacy notice from time to time and we will post the changes on this page. If we make an important change that we need to tell you about, we will email you to let you know.
If you have any questions about this notice, please contact info@cribsync.com or write to us at 69 West School Road, Dundee, Scotland, DD3 8PG.
Our commitment to you
We process your personal data in accordance with the overarching principles and requirements set out in the in the UK General Data Protection Regulation and the Data Protection Act 2018 (“Data Protection Law”). What this means is that Cribsync processes your data in a way that is:
- Lawful, fair and transparent;
- Compatible with the purposes that we have told you about;
- Adequate and necessary, we only use the data we need to use for the reason we told you;
- Accurate and up to date;
- Not excessive, we only keep your data for as long as we need it; and
- Secure and protected.
When you joined Cribsync to find a Host, we ask you to provide us with personal data to set up your account. Personal data is information that can be used to directly or indirectly identify you, such as your name, an ID number or an online identifier. Our lawful basis for processing this data under Data Protection Law is contract e.g. it is necessary for us to process the data to fulfil the terms and conditions of our agreement with you.
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
For Customers: What personal data do we use?
To set up your account we will ask you to provide your name, address, email address, phone numbers, username, gender, date of birth and location data.
For Hosts: How and why do we collect your personal data?
When you become a member of the Cribsync platform, we ask you to provide us with personal data to set up your account. Personal data is information that can be used to directly or indirectly identify you, such as your name, an ID number or an online identifier. Our lawful basis for processing this data under Data Protection Law is contract e.g. it is necessary for us to process the data to fulfil the terms and conditions of our agreement with you.
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
For Hosts: What personal data do we use?
To set up your account we will ask you to provide your name, address, email address, phone number, date of birth , location data and pictures of your property. We also process your financial information which includes your bank account and payment card details so you can set up a preferred payment method.
Who do we share your data with?
We will only share your information with third parties where it is necessary for us to do so and where the law permits us to do so.
Where third parties process data on our behalf, we have in place contracts which stipulate that they may not use your personal information for their own purposes and are permitted to only use your personal information in accordance with our instructions and the law .
We employ third party technology companies to assist us with the development and maintenance of our website (Microsoft). These companies may have access to your personal information in the course of providing us with their services.
We do not process your personal data outside the UK. In the event we need to transfer your personal data to a country outside the UK we will put appropriate safeguards in place to protect your personal data.
How do we keep your data safe?
We have put in place appropriate security measures to protect your personal information and prevent it from being lost, destroyed, damaged, used, altered or disclosed. The data is hosted on cloud servers by Microsoft.
How long do we keep your data for?
We will only keep your data for as long as we need to for the reason we have collected it. If you close your account, we will retain your data for 6 months after you leave us in order to allow you the opportunity to reactivate your account or retrieve information from us. In certain circumstances, we may retain data if we have a legal or regulatory obligation to do so.
Your legal rights
You have a number of rights under data protection law in relation to your personal information and if you want to exercise any of these rights, please contact us at info@cribsync.com and we will be happy to help. These rights are as follows:
- right to request access to your personal information - you can request a copy of the personal information we hold on you;
- right to request correction of your personal information - if any personal information we hold on you is incorrect, you can request to have it corrected;
- right to request erasure of your personal information - you can ask us to delete your personal information in certain circumstances;
- right to object to processing or restrict processing of your personal information - you may object to our processing of your personal data in certain circumstances;
- right to request the transfer of your personal information - to provide you, or a third party you have chosen, with your personal information;
- right not to be subject to automated decision-making and profiling; and
- right to withdraw consent – where we process your data on the basis of consent, you can notify us that you want to withdraw consent any time.
If you have any data protection complaints, you may contact the Information Commissioner's Office (ICO) by post at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Email: casework@ico.org.uk Telephone: 0303 123 1113.
We’d like to try and help with any concerns you may have before you contact the ICO, so please get in touch with info@cribsync.com in the first instance.