Privacy Notice - Taskr
Taskr
Privacy Notice
February 2024
1. Information on How we use your Personal Data.
This is the Privacy Notice of Kuihi Limited registered number 13789115. We take your privacy very seriously so please read through our Privacy Notice. It includes information about:
- Why we collect and keep information about you.
- What information we collect.
- How long we may keep your information.
- Who may see your information?
- Who we may share your information with
- Your rights concerning your information.
Kuihi Limited (Kuihi) processes personal information (Personal Data) every day. This information is used by Kuihi and their associates as part of their normal work in providing the Taskr service on the Shopify platform. We take our duty to protect your personal information very seriously and all processing will be in line with the UK General Data Protection Regulation (UK GDPR) as tailored by the Data Protection Act 2018 and current general UK legislation.
Personal Data is any information by which an individual person can be identified. This includes a name, identification number, address, email address, IP address, photo, date of birth, and phone number. It also covers any factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of a person.
We will take all reasonable means to keep your Personal Data confidential whether this is held on the computer, on paper, or other media. Every member of staff working with Kuihi has a legal duty to keep information about you secure and confidential. This is also included in associates, contractors and partners' terms and conditions.
For any information, please contact our data protection representative:
Name: Greg Hawkins
Address: 29 Watnall Road, Hucknall, NG15 7LD
Email: privacy@kuihi.io
For independent advice about data protection issues, you can contact:
Name: Information Commissioner
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Email: casework@ico.org.uk
Phone: 03 031 231 113
Website: www.ico.org.uk
2. What Information do we collect?
Kuihi aims to provide you with the highest quality of service. To do this we must keep records about you, and the services we have provided to you or plan to provide to you.
Shopify
- The Taskr service is available on the Shopify platform. We are bound to Shopify under their Partners Program Agreement (https://www.shopify.com/uk/partners/terms) and subject to the terms within that.
- Shopify collect information including Personal Data about anyone using their Shopify platform. They are the Controllers of any information provided to them through such use.
- Shopify has their own Privacy Policies that govern how they process any information collected and processed by them. Please read their policies including their Privacy Policy (https://www.shopify.com/legal/privacy) for details and contact their Data Protection Officer with any queries.
Information we collect through Shopify APIs
- Shopify provide us with certain Personal Data about those who subscribe to Taskr, but they do not provide us with any financial details received from Subscribers.
- Shopify provide us with information on the Subscriber i.e., the business, organisation or person who has installed Taskr and details of their subscription including their name and email they have provided to Shopify for business contact.
- Information on customers and their orders being processed by the Subscriber through their Shopify store including customer’s names, email addresses and billing/shipping addresses.
- The information acquired from Subscribers incudes their IP address and a unique identifier for each Subscriber.
- From each user we obtain their IP address. For this Privacy Notice users are representatives of the Subscriber with access.
Information we collect direct from the Subscriber
- The names and email addresses of their Users.
- The names and email addresses they provide to enable us to provide support when requested through the service.
- We ask the Subscriber to agree to our Terms and Conditions and this Privacy Notice as a condition of using Taskr and record that they have done this.
- We may store cookies on the Subscriber and their users’ devices in order to provide support and to monitor the usage of the service as per our Cookie Policy.
- We generate automated logs relating to the use of Taskr in order to maintain the service and do necessary troubleshooting.
- The Subscriber holds the Personal Data that they collect directly from their customers as Controller.
From all parties we collect what information is needed for the provision of our services.
The Personal Data we hold about you is protected by strict physical, electronic, and other means and includes any information necessary for the provision of our services.
We will also process similar Personal Data about our suppliers, service providers and professional experts.
We only process your Personal Data in accordance with the current UK General Data Protection Regulation. This will be to provide you with appropriate services or to meet contractual or legal obligations including maintaining our accounts and records or because you have consented to provide us with the information.
Kuihi and their associates keep accurate and up-to-date information about the services you receive, and to enable them to provide you with the right advice about potential new services. It also ensures that any concerns you may have about your services can be thoroughly investigated.
If we intend to use the Personal Data for any other purpose, then you will always be asked first unless required to act otherwise by law.
Some data is deemed Sensitive Data and we can only process this with your consent. If the consent is not forthcoming or withdrawn, we may not be able to complete the provision of our services with no liability on our part. Sensitive Data includes information about racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data biometric data, sex life or sexual orientation, and medical information.
3. How we use your Personal Data
Kuihi does not share any Personal Data except as below as necessary:
- To provide our services including support.
- To operate our business.
- To use tracking information to access anonymous data to develop Taskr and to customise our content for Subscribers and their customers.
- To collect usage information to analyse the performance of the service, the behaviour of those using Taskr and improving the service.
- To authenticate the Subscriber’s account by matching Personal Data and to enable access.
4. Who we may share your information with
Personal Data will be seen by the Kuihi staff and contractors looking after you and by others involved in delivering your services. There is sometimes a need to share information about you with other third-party providers so that we can work together to provide you with the best possible service to meet your needs. We will only ever share your information when there is a legitimate need to do so. It may also be necessary to share some information with:
- Suppliers and service providers
- Third party contractors.
- Business associates and other professional advisers.
- Financial organisations.
- Official bodies to comply with legal requirements.
We may share aggregated data with any partners in support of the service.
Service providers include but are not limited to Amazon Web Services, Slack, Shopify, and Google.
Should Kuihi sell the business or some of its assets that involves the transfer of Personal Data they will endeavour to inform the individual that their data is being transferred and would be subject to a different Privacy Notice.
We never share Personal Data with any other organisation for third party marketing purposes.
5. The Legal Basis for the Processing
The legal basis for the processing shall be:
- Processing is necessary for the performance of a contract to which the individual is a party or to take steps at the request of the individual before entering a contract.
- Processing is necessary to comply with our legal obligations.
- Processing is necessary for our legitimate interests or those of a third party except where overridden by the interests of the individual.
- You have given your consent to the processing.
- Processing is necessary for the performance of a task carried out in the public interest.
- Processing is necessary to protect the vital interests of the data subject or another natural person.
‘Processing’ includes but is not limited to collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, combination, erasure, and destruction.
6. Third Party Services
This Privacy Notice only relates to how Kuihi processes your data. It does not apply to any third-party services used by Kuihi or any services referred to through the use of Taskr.
The Subscribers must obtain copies of the Privacy Notices of those third parties and satisfy themselves as to their adequacy for dealing with their Personal Data. As mentioned above this will include Shopify.
This will include any services to which there are links provided on Taskr.
7. Marketing
Kuihi will never sell the Personal Data for marketing or other purposes.
We may use Personal Data to inform Subscribers of any similar services or features that may be of interest to them. The subscriber will have the option to state that they do not wish to receive any further communications from us.
8. Security of Processing
We have implemented and will continue to update technical and organisational measures to ensure Personal Data processed remains secure but absolute security cannot be guaranteed.
Our measures include restricting staff access to data, regular training and secure encrypted procedures being used.
9. Transfers
It may sometimes be necessary to transfer Personal Data overseas from the United Kingdom. When transfers are needed, information may be transferred to countries or territories around the world. Any transfers made will be in full compliance with all aspects of UK GDPR and follow the country-specific legislation.
Shopify is itself based in Canada and Amazon Web Services in the USA.
10. Keeping your information accurate and up to date
We will make sure that the information we hold about you is accurate and up-to date. We may check with you from time to time to make sure we have the right information about you or your next of kin (where appropriate). If the information is not correct, you can ask us to change it.
11. Your Rights
You have the right to be informed about how your Personal Data is used. This document aims to explain how we use your information but if you are unsure or require more information, please ask Kuihi.
- You have the right to have any inaccurate information about you corrected.
- You have the right to have information about you deleted or to stop us from using it when we do not need to keep it anymore. This is subject to our legal rights.
- You have the right to access your records (see below) using a Subject Access Request.
- You have the right to data portability so that you can use your information with an alternative service provider.
- You have the right to object to having your Personal Data processed for direct marketing purposes.
- You have rights concerning automated decision making and profiling.
12. Can I see my records?
You have the right to ask what personal information we hold about you and to request a free copy of the information. This is known as a Subject Access Request (SAR). SARs must be in writing and accompanied by proof of your identity and address. If you want specific information e.g. a particular timeframe, please clarify this.
If someone is requesting information on your behalf, we shall need your written consent and evidence of ID for both of you.
We must provide you with the information you request within 30 days although we will endeavour to do so as soon as possible.
We have the right to charge for unreasonable requests e.g., repeated requests for the same information.
13. How long do we keep your records?
Kuihi keeps the information about you in paper records and in electronic records. Kuihi needs to keep this information to provide you with the best possible service. Certain types of information about you need to be kept for longer than other information. We will not keep information about you longer than is necessary or longer than required by law.
14. Cookies
Taskr may store cookies on your device. Cookies are text files that are stored in a computer system via an internet browser. Many internet sites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which internet pages and servers can be assigned to the specific internet browser in which the cookie was stored. This allows visited internet sites and servers to differentiate the individual browser of the data subject from other internet browsers that contain other cookies. A specific internet browser can be recognised and identified using the unique cookie ID.
See our Cookie Policy for details.
15. Complaints
If you need further information about the information that we keep about you, please contact our support service in the first instance. We will try to answer your questions. If you have any complaints, please send them to our data protection representative as above.
If you are not satisfied with the response, you should contact:
Name: Information Commissioner
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Email: casework@ico.org.uk
Phone: 03 031 231 113
Website: www.ico.org.uk
16. General
You may not transfer any of your rights under this Privacy Notice to any other person. We may transfer our rights where we reasonably believe your rights will not be affected.
If any court finds that any provision of this Privacy Notice is invalid illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this privacy notice will not be affected.
Unless otherwise agreed, no delay or omission by a party in exercising any right or remedy will be deemed a waiver of that or any other right or remedy.
The laws of England and Wales will govern this Notice.
This Notice will be updated from time to time and a copy of the latest version will be available upon request.
Taskr is made by Kuihi Ltd.