We may collect, use and store the following categories of personal data about you.
Privacy Policy
Legal InformationThis page explains the personal data Rostone Operations may collect, how it is obtained, why it is used and the rights available to you.
On this page
- 01
The data we collect
Communication Data
This includes communications you send to us through website forms, email, text messages or social media. We use this data to respond to enquiries, maintain records and pursue or defend legal claims.
Customer Data
This includes your name, contact information, billing details and purchase history. We process this information to provide the products or services you have purchased and to retain transaction records.
User Data
This includes information you submit for publication on our website or other online services. We use it to operate and secure the website, deliver relevant content and manage our business.
Technical Data
This includes your IP address, browser information, login details and information about how you interact with the website. We use it to analyse usage, administer the website and understand the effectiveness of marketing activities.
Marketing Data
This includes your preferences for receiving marketing communications from us or relevant third parties. We use this information to provide promotions, relevant content and advertisements.
Timesheet Application Data
This relates directly to your use of the Timesheet Refresh application. The application accesses and processes information within the Google Sheet in which it is installed, together with timesheet data from a connected third-party service. The application does not collect, store or transmit this data to its own servers.
- 02
How we collect your data
We may collect personal data in the following ways:
Directly from you: when you complete forms on our website, contact us by email or otherwise provide information to us.
Automatically: when you use our website, certain technical information may be collected through cookies and similar technologies.
From third parties: we may receive information from publicly available sources, including Companies House and the Electoral Register in the United Kingdom.
Through the Timesheet Application: the application accesses timesheet data from your connected third-party service account solely to update your Google Sheet.
- 03
Purpose of data use
The data we access or process may be used for the following stated purposes:
Providing products and services that you have purchased.
Operating, administering and securing our website and business.
Delivering relevant content, communications and advertisements.
Synchronising timesheet data from the connected third-party service to your Google Sheet by clearing outdated data and writing new or updated information.
- 04
Third-party services and disclosures
We may send marketing communications where this is based on your consent or our legitimate business interests.
We may share personal data with selected third parties, including:
Service providers supporting IT, hosting or system administration.
Professional advisers, including lawyers, bankers and auditors.
Government bodies that require reporting of processing activities.
Third parties involved in a sale, transfer or restructuring of part or all of our business.
Timesheet Workflow Service: the Timesheet Refresh application uses a script scope to communicate with an external workflow service that triggers data synchronisation between the third-party timesheet service and your Google Sheet. Data processed by that external service is subject to its own privacy policy.
We require third parties to respect the security of your data and to process it only for specified purposes and in accordance with our instructions.
- 05
International transfers
We are subject to applicable General Data Protection Regulation requirements.
Where personal data is transferred outside the United Kingdom, we take steps intended to ensure that a similar level of protection applies. This may include transferring information to countries recognised by UK regulatory authorities as providing adequate protection, or using appropriate contractual safeguards.
- 06
Data security and retention
For tax purposes, we are legally required to retain basic customer information for six years after the individual or organisation ceases to be a customer.We maintain security measures designed to prevent personal data from being accidentally lost, misused or accessed without authorisation.
Access is limited to employees, partners and service providers who have a legitimate business need to use the information. Those parties are required to keep it confidential.
We also maintain procedures for responding to suspected personal data breaches.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including applicable legal, accounting and reporting requirements.
- 07
Your legal rights
Under applicable data protection law, you may have rights relating to your personal data, including the right to:
Request access to your personal data.
Request correction of inaccurate or incomplete information.
Request erasure of personal data in relevant circumstances.
Request restriction of processing.
Request transfer of your personal data.
Object to certain processing activities.
Withdraw consent where processing is based on consent.
For tax purposes, we are legally required to retain basic customer information for six years after the individual or organisation ceases to be a customer.You will not ordinarily be required to pay a fee to exercise these rights. A reasonable fee may apply, or a request may be refused, where it is clearly unfounded, repetitive or excessive.
We aim to respond to legitimate requests within one month. We will notify you where additional time is required.
Rostone Operations may collect, use and store personal data where necessary to operate its website, provide services, communicate with users and support relevant business activities.