Privacy Policy

Effective Date: 04/04/2025, 20:43:28

Introduction & Organisational Info:

We, at Calathea IP Ltd, are dedicated to serving our customers and contacts to the best of our
abilities. Part of our commitment involves the responsible management of personal information collected through
our website calathea.co.uk, and any related interactions. Our primary goals in processing
this information include:

  • Enhancing the user experience on our platform by understanding customer needs and preferences.
  • Providing timely support and responding to inquiries or service requests.
  • Improving our products and services to meet the evolving demands of our users.
  • Conducting necessary business operations, such as billing and account management.

It is our policy to process personal information with the utmost respect for privacy and security. We adhere to
all relevant regulations and guidelines to ensure that the data we handle is protected against unauthorised
access, disclosure, alteration, and destruction. Our practices are designed to safeguard the confidentiality and
integrity of your personal information, while enabling us to deliver the services you trust us with.

  • We do not have a designated Data Protection Officer (DPO) but remain
    fully committed to addressing your privacy concerns. Should you have any questions or require further
    information about how we manage personal information, please feel free to contact us at
    info@calathea.co.uk or +44 07478742885.

Your privacy is our priority. We are committed to processing your personal information transparently and with
your safety in mind. This commitment extends to our collaboration with third-party services that may process
personal information on our behalf, such as in the case of sending invoices. Rest assured, all activities are
conducted in strict compliance with applicable privacy laws.

Scope and Application:

Our privacy policy is designed to protect the personal information of all our stakeholders, including website
visitors, registered users, and customers. Whether you are just browsing our website
calathea.co.uk, using our services as a registered user, or engaging with us as a valued
customer, we ensure that your personal data is processed with the highest standards of privacy and security.
This policy outlines our practices and your rights related to personal information.

Data Storage and Protection:

Data Storage:

  • Personal information is stored in secure servers located in the following locations:
    undefined. For services that require international data transfer, we ensure
    that such transfers comply with all applicable laws and maintain data protection standards equivalent to
    those in our primary location.
  • Data Hosting Partners: We partner with reputable data hosting providers committed to using state-of-the-art
    security measures. These partners are selected based on their adherence to stringent data protection
    standards.

Data Protection Measures:

Encryption: To protect data during transfer and at rest, we employ robust encryption technologies.
Security Audits and Monitoring: Regular security audits are conducted to identify and remediate potential vulnerabilities. We also monitor our systems for unusual activities to prevent unauthorised access.

Data Sharing and Disclosure

At Calathea IP Ltd, we are committed to safeguarding your personal information and ensuring it
is treated with the utmost respect. This commitment extends to how we handle the sharing and disclosure of your
data. Below we outline our practices in this area:

Sharing Personal Information:

  • Third-Party Service Providers: We may share your information with third-party service
    providers who perform services on our behalf. Such trusted parties may have access to personally
    identifiable information on a need-to-know basis and will be contractually obliged to keep your information
    confidential. These partners are prohibited from using your personal information for any purpose other than
    to provide these services to Calathea IP Ltd, and they are required to maintain the
    confidentiality of your information.
Service Name Provider Purpose(s) Collected Personal Data Type(s) Privacy Policy Link
Mailchimp The Rocket Science Group LLC
  • Marketing and Advertising
  • First and Last Name
  • Email address and/or Phone number
  • Device ID
  • IP Address
  • Browser Information and Language
  • Operating system and version
  • Interaction logs (e.g., clicks, time spent on pages)
 https://mailchimp.com/legal/privacy/
Google Analytics Google Ireland Limited
  • Marketing and Advertising
  • Analytics and Performance Tracking
  • First and Last Name
  • Date of birth
  • National identification numbers (e.g., Social Security Number, Passport ID)
  • Email address and/or Phone number
  • Address and City
  • Device ID
  • IP Address
  • Operating system and version
  • Browser Fingerprint
  • Real-time location (e.g., GPS)
  • IP-based approximate location
  • Browsing history
  • Browser Information and Language
  • Interaction logs (e.g., clicks, time spent on pages)
  • Purchase history
 https://business.safety.google/privacy/?hl=en
Google Tag Manager Google Ireland Limited
  • Tag Management
  • Aggregated Data about Tag Firing
 https://business.safety.google/privacy/?hl=en

Data Processing Agreements:

When we share your data with third-party service providers, we do so under the protection of Data Processing
Agreements (DPAs) that ensure your information is managed in accordance with GDPR and other relevant data
protection laws. These agreements mandate that third parties implement adequate technical and organisational
measures to ensure the security of your data.

Transparency and Control:

We believe in transparency and providing you with control over your personal information. You will always be
informed about any significant changes to our sharing practices, and where applicable, you will have the option
to consent to such changes.

Your trust is important to us, and we strive to ensure that your personal information is disclosed only in
accordance with this policy and when there is a justified reason to do so. For any queries or concerns about how
we share and disclose personal information, please reach out to us at info@calathea.co.uk or
+44 07478742885.

User Rights and Choices:

At Calathea IP Ltd, we recognise and respect your rights regarding your personal information,
in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. We
are committed to ensuring you can exercise your rights effectively. Below is an overview of your rights and how
you can exercise them:

Your Rights:

  • Right of Access (Article 15 GDPR): You have the right to request access to the personal information we
    hold about you and to obtain information about how we process it.
  • Right to Rectification (Article 16 GDPR): If you believe that any personal information we hold about you
    is incorrect or incomplete, you have the right to request its correction or completion.
  • Right to Erasure (‘Right to be Forgotten’) (Article 17 GDPR): You have the right to request the deletion
    of your personal information when it is no longer necessary for the purposes for which it was collected,
    among other circumstances.
  • Right to Restriction of Processing (Article 18 GDPR): You have the right to request that we restrict the
    processing of your personal information under certain conditions.
  • Right to Data Portability (Article 20 GDPR): You have the right to receive your personal information in a
    structured, commonly used, and machine-readable format and to transmit those data to another controller.
  • Right to Object (Article 21 GDPR): You have the right to object to the processing of your personal
    information, under certain conditions, including processing for direct marketing.
  • Right to Withdraw Consent (Article 7(3) GDPR): Where the processing of your personal information is based
    on your consent, you have the right to withdraw that consent at any time without affecting the
    lawfulness of processing based on consent before its withdrawal.
  • Right to Lodge a Complaint (Article 77 GDPR): You have the right to lodge a complaint with a supervisory
    authority if you believe our processing of your personal information violates applicable data protection
    laws.

Exercising Your Rights:

To exercise any of these rights, please contact us at info@calathea.co.uk or
+44 07478742885. We will respond to your request in accordance with applicable data
protection laws and within the timeframes stipulated by those laws. Please note, in some cases, we may need to
verify your identity as part of the process to ensure the security of your personal information.

We are committed to facilitating the exercise of your rights and to ensuring you have full control over your
personal information. If you have any questions or concerns about how your personal information is handled,
please do not hesitate to get in touch with us.

Cookies and Tracking Technologies:

At Calathea IP Ltd, we value your privacy and are committed to being transparent about our use
of cookies and other tracking technologies on our website calathea.co.uk. These
technologies play a crucial role in ensuring the smooth operation of our digital platforms, enhancing your user
experience, and providing insights that help us improve.

Understanding Cookies and Tracking Technologies:

Cookies are small data files placed on your device that enable us to remember your preferences and collect
information about your website usage. Tracking technologies, such as web beacons and pixel tags, help us
understand how you interact with our site and which pages you visit.

How We Use These Technologies:

  • Essential Cookies: Necessary for the website’s functionality, such as authentication and security. They
    do not require consent.
  • Performance and Analytics Cookies: These collect information about how visitors use our website, which
    pages are visited most frequently, and if error messages are received from web pages. These cookies help
    us improve our website.
  • Functional Cookies: Enable the website to provide enhanced functionality and personalisation, like
    remembering your preferences.
  • Advertising and Targeting Cookies: Used to deliver advertisements more relevant to you and your
    interests. They are also used to limit the number of times you see an advertisement and help measure the
    effectiveness of the advertising campaign.

Your Choices and Consent:

Upon your first visit, our website will present you with a cookie consent banner, where you can:

  • Accept All Cookies: Consent to the use of all cookies and tracking technologies.
  • Reject Non-Essential Cookies: Only essential cookies will be used to provide you with necessary website
    functions.
  • Customise Your Preferences: Choose which categories of cookies you wish to allow.

Changes to Our Cookie Use:

We may update our use of cookies and tracking technologies to improve our services or comply with legal
requirements. We will notify you of any significant changes and seek your consent where necessary.

For more detailed information about the cookies we use, their purposes, and how you can manage your preferences,
please visit our detailed Cookie Policy https://calathea.co.uk/privacy-policy.

Should you have any questions or concerns about our use of cookies and tracking technologies, please do not
hesitate to contact us at info@calathea.co.uk or +44 07478742885. Your
privacy and the integrity of your personal data are of utmost importance to us.

Direct Marketing and Communications:

At Calathea IP Ltd, we may use your personal information to send you direct marketing
communications about our products, services, promotions, and other relevant information that we believe may be
of interest to you. We are committed to ensuring that our direct marketing practices are transparent, lawful,
and in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR)
and the ePrivacy Directive.

Obtaining Consent for Direct Marketing:

  • Opt-In Consent: We will obtain your explicit opt-in consent before sending you direct marketing
    communications, where required by law. This means that you will have the opportunity to actively consent
    to receiving marketing messages from us before we send them to you.
  • Unsubscribe Option: Every direct marketing communication we send will include clear instructions on how
    to unsubscribe or opt-out from receiving future marketing communications. You can exercise your right to
    opt-out at any time, and we will promptly honour your request to stop sending you marketing messages.

Types of Direct Marketing Communications:

We may use your personal information to send you direct marketing communications via various channels, including:

  • Email
  • SMS

Managing Your Preferences:

You have control over the direct marketing communications you receive from us. You can manage your communication
preferences by using the unsubscribe link provided in our marketing emails or text messages.