Privacy Policy

This is the Privacy Policy (the "Policy") of SIYTE, a trading name of Purple Transform Limited (Company No. 13145293), a company incorporated under the laws of England and Wales whose registered office is at The Granary, Kingston House Estate, Kingston Bagpuize, Oxfordshire, England, OX13 5AX (hereafter "SIYTE", "we", "us" or "our").

This Policy explains how we collect, use and protect personal data about you when you visit and interact with our website at siyte.com (the "Website"). It also explains your rights in relation to that personal data and how the law protects you.

This Policy applies only to your use of the Website. It does not cover your use of our SiYtE software platform, which is governed by a separate privacy and cookies policy made available to users within that software.

We may change this Policy from time to time. When we do, we will post the updated Policy on this page and update the "last changed" date below. Your continued use of the Website after any change indicates your acceptance of the updated Policy. We encourage you to review this page periodically.

SIYTE (a trading name of Purple Transform Limited) is the controller responsible for your personal data collected through the Website.

For the purposes of data protection legislation, we have registered with the Information Commissioner's Office ("ICO"). Our registration number is ZB282656.

If you have any questions about this Policy, or wish to exercise any of your rights, you can contact us by:

• email at data@purpletransform.com; or
• post at "Data Protection Query, Purple Transform, The Granary, Kingston House Estate, Kingston Bagpuize, Oxfordshire, England, OX13 5AX".

The only way we actively collect personal data about you through the Website is if you choose to submit our contact form. We also collect limited analytics information, but only if you give your consent to optional cookies (see paragraph 6 and our separate Cookies Policy).

The table below sets out what we collect, when, how we use it, and our lawful basis for doing so.

• What information do we collect and process? Information you provide via our contact form, being your name, email address, telephone number, company / organisation name, and any information you include in your message or enquiry.
• When do we collect this? When you complete and submit the contact form on the Website.
• How do we use this information? To receive, respond to and follow up on your enquiry, to provide the information or services you have requested, and to keep a record of our correspondence with you.
• Our lawful basis: Legitimate interests — we need to process this information in order to respond to and manage the enquiry you have chosen to send us, and our use of this information for this purpose does not outweigh your rights and freedoms. Where your enquiry relates to entering into a contract, our basis may also be to take steps at your request prior to entering into a contract.

• What information do we collect and process? Where you have separately agreed to receive marketing communications, your name, email address and contact details.
• When do we collect this? When you submit the contact form and opt in to marketing, or otherwise ask us to send you marketing.
• How do we use this information? To send you information about our products, services and updates that may be of interest to you.
• Our lawful basis: Consent — you can withdraw this consent at any time by contacting us or using the unsubscribe link in any marketing email.

• What information do we collect and process? Analytics and usage information about how you interact with the Website (for example pages visited, approximate location, device and browser information, and session activity).
• When do we collect this? Only where you have accepted optional analytics cookies via our cookie banner.
• How do we use this information? To understand how visitors use the Website so that we can maintain, improve and develop it.
• Our lawful basis: Consent — collected only via optional cookies you have agreed to. You can withdraw this consent at any time (see our Cookies Policy).

We do not use any strictly necessary or functional cookies on the Website, and we do not otherwise track you unless you have opted in to analytics cookies.

When you submit the contact form, your enquiry and the personal data you provide are received by us and stored in our customer relationship management (CRM) and sales engagement tools (such as Apollo) so that the relevant member of our team can respond to and manage your enquiry. Access to this information is limited to those members of our team who need it in order to deal with your enquiry.

Some of the information we collect from you may be shared with the following third parties, and only to the extent necessary:

• a) our hosting, storage and infrastructure providers (currently including Amazon Web Services (AWS));
• b) our CRM, sales and analytics providers who help us receive, store and understand enquiries and Website usage, including the providers of the tools listed in our Cookies Policy (Google Analytics, Apollo and LogRocket);
• c) the ICO and other professional advisers that we may work with from time to time, such as our lawyers and accountants;
• d) other companies within our group; and
• e) law enforcement agencies, regulators or other authorities where we are required to do so by law.

In addition, we may share information with any third party in relation to the sale of some or all of our business or its assets, or as part of any business restructuring or reorganisation. In these circumstances, we will take steps with the aim of ensuring that your rights continue to be protected.

We do not sell your personal data.

The Website may contain links to other websites operated by third parties. We are not responsible for the privacy policies or practices of those other sites, even where you access them via the Website. You should check the policy of each site you visit and contact its owner or operator if you have any concerns or questions.

We use a small number of optional cookies on the Website for analytics purposes only. We do not use any strictly necessary cookies, and no analytics or tracking cookies are set unless and until you accept them via our cookie banner. Full details of the cookies we use, and how to accept, reject or withdraw your consent, are set out in our separate Cookies Policy.

We store your personal data in the UK wherever reasonably possible. Some of the third party providers we use (for example the providers of our analytics and CRM tools) may process personal data outside the UK and/or the EEA. Where personal data is transferred outside the UK and/or EEA, we take steps to ensure that appropriate safeguards are in place (such as the UK's International Data Transfer Agreement, the International Data Transfer Addendum to the EU Standard Contractual Clauses, or an adequacy decision), together with any transfer risk assessment required under applicable data protection legislation.

We retain your personal data for as long as reasonably necessary for the purposes for which it was originally collected, including to respond to and follow up on your enquiry, to comply with our legal obligations, and to resolve disputes. Contact form enquiries are generally retained for no longer than is necessary to deal with the enquiry and any resulting relationship, after which they are deleted or anonymised.

We have implemented technology and organisational policies to safeguard your personal data from unauthorised access and improper use. While we take reasonable steps to protect your information, no transmission of data over the internet can be guaranteed to be completely secure.

Under data protection legislation, you have a number of rights in relation to the personal data we hold about you. In particular, you have the right to:

• (i) request access to a copy of the personal data that we hold about you;
• (ii) ask us to correct any personal data that we hold about you which is inaccurate or incomplete;
• (iii) ask us to erase personal data that we hold about you, or to restrict or object to our processing of it, in certain circumstances;
• (iv) withdraw your consent at any time where we are relying on consent to process your personal data (for example for analytics cookies or marketing), without affecting the lawfulness of processing carried out before you withdrew it; and
• (v) request that we transfer your personal data to another organisation, in certain circumstances.

To exercise any of these rights, please contact us using the details in paragraph 1. We will respond to your request in accordance with applicable data protection legislation.

You also have the right to make a complaint to the ICO at any time. We would, however, appreciate the chance to address your concerns before you approach the ICO, so please consider contacting us in the first instance.

If at any time you would like to contact us about your views on this Policy, or any enquiry relating to your personal information, you can do so by sending an email to us at data@purpletransform.com, or write to us at "Data Protection Query, Purple Transform, The Granary, Kingston House Estate, Kingston Bagpuize, Oxfordshire, England, OX13 5AX". You also have the right to make a complaint to the ICO by contacting them at any time.