Automatic data collection for operating the website

The information wedo this by emailing us at [email protected] or writing to us at the address noted above.

Rights for Data Subjects in the European Union

If you are an EEA Resident and would like to make enquiries about your rights or this Privacy Policy, please contact our EU Representative at [email protected]. Alternatively, they can be reached by post (The DPO Centre, Alexandra House, 3 Ballsbridge Park, Dublin, D04C 7H2) or +353 1 631 9460. www.dpocentre.com.

10. Queries and Complaints

Verb Brands Limited has a dedicated representative who can be approached for any questions, comments and requests regarding this privacy policy or our Data Privacy Management System. Our Group Data Protection Officer welcomes communication around our policies and practices at [email protected]. If you’re not satisfied with our response, or believe we’re not processing your personal data in accordance with the law, you can approach the UK regulator for further guidance at www.ico.org.uk/concerns.

This Privacy Policy applies to all personally identifiable Data Verb Brands Limited processes. By using the Website and our services, your information may be transferred to, stored, and processed in and between the United Kingdom, the United States of America, the European Union and any other country or region of the World. The Website contains links to other sites. Please be aware that we are not responsible for the content or privacy practices of those other sites. We encourage our users to be aware when they leave our Web collect automatically is grouped by its purpose into one of three categories, either:

Operating the Website includes for the purposes of

• delivering its pages;
• allowing you to participate in any interactive features on our Website;
• processing and logging your requests;
• maintaining the Website and resolving any technical issues that may occur in its operation;
• investigating and preventing illegal activities; and may include
• personalising the Website for you including by processing and recording the pages you request as you land on them and navigate between them;
• logging information about the software and equipment you use to request pages;
• storing information about your preferences, thus allowing us to customise the Website according to your individual interests; and
• recognising you when you return to our Website.

Automatic data collection for measurement

Measurement includes for the purposes of:

• improving our Website’s technical performance (for example, the speed with which its pages are loading for its visitors);
• improving its content performance (for example, where unpopular content may be revealed as having been produced poorly than normal, or reflect the changing needs of our visitors);
• testing new versions of the Website (wholly or partially) on a sample of its audience, and measuring the differences in performance between the versions. This involves the storage of information about which version of the website you’ve seen. Measurement rarely involves the study of any individual, but statistical techniques in measurement do rely on personal data. Automatic data collection for advertising Advertising includes for the purposes of collecting information about your online activities on the Website and across third-party websites or other online services so that:
• Verb can notify you about changes to any products or services we offer or provide;
• Verb can show advertising;
• this advertising may be shown to you and personalised in relation to your previous behaviour;
• Verb can measure the delivery and performance of the advertising it places; and
• Verb can use reporting on the Website’s visitors, including using data collected from across third-party websites, to inform marketing plans and decisions.

3. Verb’s Legal Basis for Processing

Before processing any personal data, we ensure that at least one lawful basis under GDPR is met. We will not disclose personal data for any purpose other than what the data was originally collected for; unless there is an overriding legal basis that enables this processing.

We may collect, hold, use and disclose the information collected to compile statistical data and to maintain our database; to develop or improve our website; respond to any queries; notify you of any upcoming marketing, training or other events that we think may be of interest to you; provide you with publications; manage quality control and compliance issues; manage systems administration; provide you or your organisation with advice; notify you about important changes or developments to our services; contact you for your views on our services or to determine the suitability for employment.

We may also process your personal data in the following circumstances:

4. Data Sharing: Who Verb may share information with and why

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction. We will not disclose your Personal Data to any third party except in accordance with this Privacy Policy, however, we may allow other people and organisations to use Personal Data we hold about you in the following circumstances:

• To contractors, service providers, and other third parties we use to support our business and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganisation, dissolution, or other sale or transfer of some or all of our assets, whether as a going concerning or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our Website users is among the assets transferred. If we, or substantially all of our assets, are acquired or are in the process of being acquired by a third party, in which case Personal Data held by us, about our customers, will be one of the transferred assets.
• To third parties to market their products or services to you if you have not opted out of these disclosures. We contractually require these third parties to keep personal information confidential and use it only for the purposes for which we disclose it to them. For more information, see “What choices do you have about how we use and disclose your information?”. We employ companies and individuals to perform functions on our behalf and we may disclose your Personal Data to these parties for the purposes, for example, for fulfilling orders, delivering packages, sending postal mail and email, removing repetitive information from customer lists, analysing data, providing marketing assistance, providing search results and links (including paid listings and links) and providing customer service. Those parties are bound by strict contractual provisions with us and only have access to Personal Data needed to perform their functions, and may not use it for other purposes. Further, they must process the Personal Data in accordance with this Privacy Policy and as permitted by the General Data Protection Regulation (2016) and the Data Protection Act (2018).
• To fulfill the purpose for which you provide it.
• For any other purpose disclosed by us when you provide the information.
• With your consent.
• If we have been legitimately asked to provide information for legal or regulatory purposes or as part of legal proceedings or prospective legal proceedings.
• From time to time, these other people and organisations (Verb suppliers) to whom we may pass your Personal Data may be outside the European Economic Area. We will take all steps reasonably necessary to ensure that your Personal Data is treated securely and in accordance with this Privacy Policy and the General Data Protection Regulation (2016) and the Data Protection Act (2018).

Verb’s Data Processors

Verb uses these data processors to assist with the safeguarding, storage and processing your personal data.

Relationships with our clients and customers

• HubSpot
• GSuite
• Office 365
• Amazon Web Services
• Google Cloud Platform

Measurement

• Google Tag Manager
• Google Analytics (but not its “Advertising Features”)

Advertising

• Google Analytics (including its “Advertising Features”)
• Google AdWords
• DoubleClick
• Facebook
• LinkedIn

5. Data Transfers: Where Verb may Transfer your Data to

Personal data will only be disclosed on a confidential basis to external service providers so that they can provide services such as financial, technological or administrative assistance. When we share data with an external third party; these operations are governed by a Data Processing Agreement (DPA) or other relevant contractual terms and we perform regular due diligence on any external companies we work with to ensure that high levels of data integrity are maintained.

Any transfers taking place outside the EEA are only permitted with the provision of an Adequacy decision, Standard Contractual Clauses (SCC’s/IDTA’s) or any other lawful transfer mechanism. Where necessary, we may need to share data with external organisations such as law enforcement, regulatory bodies, fraud prevention agencies, partners or advisors. Before any data is shared, we ensure that all technical and organisational controls are firmly in place and a Data Protection Impact Assessment is undertaken, where applicable, if the sharing or transfer is considered high risk. We do not sell your data to any third parties.

6. Data Security: Data Transfers and Security Protocols

We have a dedicated Information Security team who are in place to offer protection across all our networks and IT assets to assist with data security and data loss prevention. All our systems are robustly secured and follow industry standards that champion safe information security processes in business. We also have a specialised Incident Response Team on hand to respond quickly to any data related issues including the prevention and detection of cyber criminals. For our UK and Irish clients, cloud providers we use have servers based within the UK and EEA jurisdictions. As a company we promote a ‘paperless’ culture where possible.

We have strict security measures to protect Personal Data. We work to protect the security of your information during transmission by using Secure Sockets Layer (SSL) software, which encrypts information you input.

We maintain physical, electronic and procedural safeguards about the collection, storage and disclosure of personally identifiable customer information. Our security procedures mean that we may occasionally request proof of identity before we disclose personal information to you.

If you communicate with us using the internet, we may occasionally email you about our services and products. When you first give us Personal Data through the Website, we will normally give you the opportunity to say whether you would prefer us not to contact you by email. You can also always send us an email (at the address set out below) at any time if you change your mind.

Please remember that communications over the internet, such as emails and web mails (messages sent through a website), are not secure unless they have been encrypted. Your communications may go through several countries before they are delivered – this is the nature of the internet. We cannot accept responsibility for any unauthorised access or loss of Personal Data that is beyond our control.

These third-party websites and advertisers, or internet advertising companies working on their behalf, sometimes use technology to send (or ‘serve’) the advertisements that appear on the Website directly to your browser. They automatically receive your IP address when this happens. They may also use cookies, JavaScript, web beacons (also known as action tags or single-pixel gifs), and other technologies to measure the effectiveness of their ads and to personalise advertising content. We do not have access to or control over cookies or other features that they may use, and the information practices of these advertisers and third-party websites are not covered by this Privacy Policy. Please contact them directly for more information about their privacy practices. In addition, the Network Advertising Initiative offers useful information about internet advertising companies (also called ‘ad networks’ or ‘network advertisers’), including information about how to opt-out of their information collection.

We exclude all liability for loss that you may incur when using these third-party websites.

7. Data Security: How verb keep information secure and deal with security incidents

Group only keep your data for as long as necessary, unless there is an overriding legal ground. We will not retain data if it is deemed unlawful to do so. Data may be held for purposes relating to the establishment, exercise or defence of legal claims which the group or our clients may face. Where we represent you in any legal case, we retain the data for seven years from the conclusion of the litigation case. We will also typically keep data concerning your account for at least seven years from the date you end your contract with us. Some data may be deleted before this time depending on the category of that data in line with our commercial legitimate interests and retention schedule, for example, data provided to us during an unsuccessful job application will be retained no longer than 12 months after the recruitment exercise. Personal data that is no longer necessary is deleted securely in line with Verb’s Data Disposal Policy. Our Data Retention and Data Disposal policies are available upon request.

8. Data Retention: How long Verb may keep your data for

Verb adheres to the retention periods set out at Group level (Croud Group) and will only keep your data for as long as necessary, unless there is an overriding legal ground. We will not retain data if it is deemed unlawful to do so. Data may be held for purposes relating to the establishment, exercise or defence of legal claims which the group or our clients may face. We will also typically keep data concerning your account for at least seven years from the date you end your contract with us. Some data may be deleted before this time depending on the category of that data in line with our commercial legitimate interests and retention schedule, for example, data provided to us in the course of an unsuccessful job application will be retained no longer than 12 months after the recruitment exercise. Personal data that is no longer necessary is deleted securely in line with Verb’s Data Disposal Policy. Our Data Retention and Data Disposal policies are available upon request.

9. Your Data Privacy Rights All data subjects have individual rights.

On a case by case basis, you have the following rights in relation to your personal data processed by Verb Brands Limited:

• The right to be informed about how your personal data is collected and used
• The right to request access to a copy of any personal data that we hold about you
• The right to rectify personal data we may hold which is identified as incorrect or misleading
• The right to erasure of any personal data; also known as ‘the right to be forgotten’
• The right to restrict further processing of your personal data
• The right to data portability where technology allows us to send personal data onto a new controller
• The right to object to the processing or certain processing activities
• Rights in relation to automated decision-making including profiling.

Please be aware that the rights listed in this section only apply to individuals and cannot be used to request data relating to business entities. Please be aware that your rights of access do not automatically entitle you to physical or digital copies of any documentation we hold.

Verb Brands is part of the ‘Croud Group’ and we refer all Data Privacy matters our Data Protection Officer (DPO) at group level. Please head to the footer of this notice for further information on Croud. You can ask us for a copy of this Privacy Policy and of any amended Privacy Policy by writing to the above address or by emailing us at [email protected]. If you would like access to the Personal Data that we hold about you, you can site and to read the privacy statements of any other site that collects personal data.

Verb Brands Limited is registered under company number 07828770. Our registered office is at Cannon Place, 78, Cannon Street, London, EC4N 6AF.

Verb Brands Limited forms part of the ‘Croud Group’ also known as Croud Inc Ltd, Croud Inc. and Croud Australia Pty. Ltd. (“Croud”). Croud Inc Ltd is registered under company number 07542498 with registered offices at Cannon Place, 78, Cannon Street, London, EC4N 6AF. You can access Croud’s privacy policy here.

We may amend this Privacy Policy from time to time without notice to you, in which case, we will publish the amended version on the Website. You confirm that we shall not be liable to you or any third party for any change to this Privacy Policy from time to time. It is your responsibility to check regularly to determine whether this Privacy Policy has changed.

For EEA Residents: Please contact our EU Representative at [email protected]. Alternatively, they can be reached by post (The DPO Centre, Alexandra House, 3 Ballsbridge Park, Dublin, D04C 7H2) or +353 1 631 9460. www.dpocentre.com

©Verb Brands Limited 2022