Last updated: 23 October 2019About this privacy notice
At Fabriq, we respect your privacy and are committed to protecting your personal data. The Fabriq sustainability data platform uses some personal data in relation to account holders and this “privacy notice” explains how and why we collect, store, use and that share personal data, as well as your rights to control our use of it.Information about us
For the purpose of the Data Protection Act 1998 (the Act), the data controller is Fabriq Ltd trading as Fabriq ("we"/"Fabriq"). We are registered in United Kingdom under company number 07826977 and have our registered office at 8 Hermitage Street, London W2 1BE, United Kingdom.Types of personal data obtained, purposes and legal basis
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). We process a minimal amount of personal data through the Fabriq platform, and data protection laws require us to explain what data we collect, for what purpose and on what legal (or ‘lawful’) basis.
If you are a Fabriq account holder: we will hold your name, username, organisation, email address and phone number for the purpose of providing you with secure access to your account. We do this on the basis that it is necessary for our legitimate interests in operating the Fabriq sustainability data platform to monitor and improve the performance of buildings. You (or your employer) will have provided these details through the account creation process. If you want to update your details, you can log in and do so. If you no longer require your account or want to delete your data, please email us (see “How to contact us” below). We will hold your information until you or we delete your account.Cookies and similar technologies
The personal data used to create your account on the Fabriq sustainability data platform is not shared with third parties, except for EnergyDeck Ltd, who host and maintain the software and database behind Fabriq.International transfers of personal data, and the measures in place to safeguard it
We do not transfer the personal data used to create your account on the Fabriq sustainability data platform outside the European Economic Area (EEA). If EnergyDeck Ltd use a hosting provider that stores data outside the EEA, it will always employ one or more of the following mechanisms that are designed to help safeguard your privacy rights:
The personal data we hold about you is your data, and you have certain rights over the data under applicable data protection laws. This section summarises the rights you have where your personal data is protected under GDPR.
For further information on each of these rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals rights under the General Data Protection Regulation.
If you would like to exercise any of these rights, the easiest way is by dropping us an email (see “How to contact us” below).Your rights to lodge a complaint with the regulator
At all times, you have the right to report a concern or lodge a complaint with the Information Commissioner’s Office. Please refer to the ICO at https://ico.org.uk/concerns/ or by calling them on 0303 123 1113. Of course, we hope that we can resolve your issue quickly and fairly ourselves.Automated processing of your personal data
You have a right to object to any decisions being taken through the processing of your personal data by automated means if they produce legal effects concerning you or similarly significant effects on you. We can confirm that we do not undertake any automated decision-making, or profiling, based on the processing of personal data, within Fabriq accounts.Keeping your personal information secure
We have appropriate security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way. In addition, we limit access to your personal data to those employees, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.Changes to this privacy notice
We may change this privacy notice from time to time by amending this page.How to contact us
If you have any questions, concerns or just want some more information about our privacy management, drop us a line at firstname.lastname@example.org