Introduction

Resource Guru Limited ("Resource Guru", "we", "our" or "us") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, share and protect personal data when you:

• visit our websites;
• contact us;
• request a demonstration of our services;
• subscribe to our communications;
• participate in surveys, events or webinars;
• apply for employment with us; or
• otherwise interact with us in connection with our business.

This Privacy Policy applies where Resource Guru acts as a data controller and determines the purposes and means of processing personal data.

Where Resource Guru processes personal data on behalf of customers through the provision of our services, we generally act as a data processor. Such processing is governed by our customer agreements.

Who We Are

Resource Guru Limited is the controller responsible for the personal data described in this Privacy Policy. Our registered office is at 86-90 Paul Street, London, EC2A 4NE, UK and our registered company number is 07622607.

If you have any questions about this Privacy Policy or how we handle your personal data, please email us at happytohelp@resourceguruapp.com FAO: Privacy Team, or use the contact details here.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your personal data has been handled unlawfully. Our ICO registration number is: Z3001946.

Personal Data We Collect

Depending on how you interact with us, we may collect information including, but not limited to:

Identity and Contact Data

• Name
• Business email address
• Job title
• Employer or organisation
• Telephone number
• Postal address

Account and Relationship Data

• Customer account details
• Subscription information
• Billing and payment information
• Communications preferences
• Records of our interactions with you

Communications and Support Data

• Information contained in emails, support requests, enquiries and correspondence
• Survey responses
• Product feedback
• Event and webinar participation information

Technical and Usage Data

• IP address
• Browser type and version
• Device information
• Website usage information
• Log and diagnostic information

Recruitment Data

Where you apply for a role with us, we may collect information relating to your application, employment history, qualifications, references, interview notes, recruitment assessments and the recruitment process.

We may also collect information necessary to assess your suitability for a role and, where applicable, to comply with legal and regulatory requirements relating to employment.

How We Obtain Personal Data

We may obtain personal data:

• directly from you;
• from your employer, organisation or colleagues;
• when an authorised representative of your organisation provides your details to us;
• through events, webinars, surveys and business introductions;
• from publicly available professional sources, such as company websites and professional networking platforms;
• through your use of our websites and interactions with our business; and
• via other means.

We do not intentionally collect personal data that is not relevant to our business relationship with you or your organisation.

How We Use Personal Data

The table below explains how we use personal data and the lawful bases we rely on.

Purpose	Categories of Information	Lawful Basis
Managing customer and supplier relationships	Identity, contact and account information	Performance of a contract and legitimate interests
Providing customer support and responding to enquiries	Contact information, communications and support information	Performance of a contract and legitimate interests
Managing subscriptions, billing and payments	Identity, contact and account information	Performance of a contract and legal obligations
Improving our products and services	Communications, feedback, survey responses and usage information	Legitimate interests
Analysing customer feedback and product requests	Communications, feedback and relationship information	Legitimate interests
Website administration, security and fraud prevention	Technical and usage information	Legitimate interests and legal obligations
Marketing our products and services	Identity, contact and relationship information	Legitimate interests and, where required, consent
Recruitment and hiring activities	Recruitment information	Legitimate interests, contract and legal obligations
Compliance with legal and regulatory obligations	Any relevant category of information	Legal obligations

Where we rely on legitimate interests, we have considered the impact on individuals and concluded that the processing is necessary, proportionate and does not override individuals' rights and freedoms. Our legitimate interests include operating, improving, securing and growing our business, supporting customers, understanding customer needs, developing our products and maintaining effective business relationships.

Marketing Communications

We may send information about our products, services, events, webinars, research, industry insights and other business-related updates that we believe may be relevant to you or your organisation.

Where required by law, we will obtain your consent before sending marketing communications.

You may opt out of marketing communications at any time by using the unsubscribe mechanism included in our communications or by contacting us using the details provided in this Privacy Policy.

We may retain limited information about your marketing preferences and opt-out requests to ensure that we respect your choices in future communications.

We do not sell personal data to third parties.

Automated Tools and Technologies

We may use technology-assisted and automated tools to support activities such as analysing customer feedback, improving our products and services, responding to enquiries, maintaining service quality and supporting internal business operations.

These tools assist our personnel and business processes and are used to improve efficiency, consistency and service quality.

They are not used to make decisions that produce legal effects or similarly significant effects on individuals.

Sharing Personal Data

We may share personal data with:

• Professional advisers, including lawyers, accountants, auditors and insurers;
• Providers of cloud hosting, communications, customer relationship management, analytics, customer support, payment processing, business productivity tools and other technology services that support our business operations;
• Regulatory authorities, law enforcement agencies and courts where required by law. We may also disclose personal information where necessary to establish, exercise or defend legal claims, enforce our agreements, investigate suspected unlawful activity or protect the rights, property or safety of Resource Guru, our customers or others;
• Prospective purchasers, investors or advisers involved in a merger, acquisition, financing or sale of business assets; and
• Other organisations where you have instructed us to do so or where we have another lawful basis for sharing.

We require third parties processing personal data on our behalf to protect it appropriately and to process it only for authorised purposes.

International Transfers

Some of our service providers may process personal data outside the United Kingdom.

Where we transfer personal data outside the UK, we ensure that appropriate safeguards are in place in accordance with applicable data protection laws. These safeguards may include:

• UK adequacy regulations;
• The UK International Data Transfer Agreement (IDTA);
• The UK Addendum to the EU Standard Contractual Clauses;
• The EU Standard Contractual Clauses; or
• Another lawful transfer mechanism recognised under applicable law.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including to comply with legal, regulatory, tax, accounting and reporting requirements.

The retention periods applied depend on the nature of the data, the purpose for which it was collected and any legal or operational requirements. We periodically review the personal data we hold and our retention practices to ensure that data is not retained for longer than necessary.

Where personal data is no longer required, we securely delete the data or anonymize it or, if this is not possible, securely store your personal data and isolate it from any further processing until deletion is possible.

Your Rights

Subject to applicable law, you may have the right to:

• Access your personal data;
• Request correction of inaccurate data;
• Request deletion of your data;
• Request restriction of processing;
• Object to processing based on legitimate interests;
• Request transfer of your data;
• Withdraw consent where processing is based on consent; and
• Lodge a complaint with the ICO.

In certain circumstances, applicable law may limit or qualify the exercise of these rights. We may also need to verify your identity before responding to a request.

We will respond to requests in accordance with applicable data protection laws. To exercise your rights, please contact us using the details provided above.

Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration and disclosure.

These measures include governance processes, policies, access controls, monitoring, encryption, staff training and other safeguards appropriate to the nature and sensitivity of the information we process.

We regularly review and update our security measures to help ensure they remain appropriate to the risks associated with our processing activities.

Cookies and Similar Technologies

We use cookies and similar technologies on our websites. For further information about how we use cookies and how you can manage your preferences, please see our Cookie Policy.

Data Protection Representatives

Where we process the personal data of individuals in the European Union and European Economic Area, we have appointed DataRep as our Data Protection Representative for the purposes of the General Data Protection Regulations in the EU/EAA and the Federal Act on Data Protection in Switzerland.

If we have processed or are processing your personal data, you may be entitled to exercise your rights under GDPR/FADP in respect of that personal data. For more information on the rights you have in respect of your personal data, please refer to the national Data Protection Authority in your country, the European Commission in the EU, or the Federal Data Protection and Information Commission in Switzerland.

We have appointed DataRep as our representative so that you can contact them directly in your home country. DataRep has locations in each of the 27 EU countries, Norway & Iceland in the EEA and Switzerland.

If you wish to raise a privacy question to us or otherwise exercise your rights in respect of your personal data, you may do so by:

• Sending an email to DataRep at datarequest@datarep.com quoting [Resource Guru Limited] in the subject line.
• Contacting DataRep using their online webform at www.datarep.com/data-request

To learn more about how DataRep will handle your personal data please refer to their Privacy Policy at www.datarep.com/privacy-policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, technology, legal requirements or privacy practices.

Any updates will be published on this page and the "Last Updated" date will be amended accordingly.

We encourage you to review this Privacy Policy periodically.