This is the Privacy Policy for https://www.xrdnano.com  It describes who we are, how we obtain and use your personal data, why we are allowed to do so by law, who has access to your personal data, and what your rights are. Please review it carefully.
This website is not intended for children and we do not knowingly collect data relating to children.
You have the right to object to us processing your personal data for our legitimate business interests or for direct marketing purposes (including any related profiling). For more information about your rights and how you can exercise them, please see the section Your rights.

We are XRD Nano Limited and our company registration no is 13230142 and registered office is at Writing to XRD Nano Limited Unit 15, Red Lion Business Centre, Red Lion Road, Surbiton KT6 7QD United Kingdom. We are the owners of https://www.xrdnano.com  We take your privacy seriously and use your personal data as further explained in this Privacy Policy. We are the “controller” of the personal data you provide to us.

Personal data is any information that identifies you personally whether directly (for example, your name) or indirectly (for example, information about your use of our products and services).

We may collect, store and transfer different kinds of personal data about you which as have grouped together as follows:

We collect the following personal data from you:

• Identity and Contact Data includes first name, last name, email address, username, or similar identifier we collect when you create an account with us, give us feedback, or leave a review, or when you enter a prize draw, competition, promotion, or survey with us.

• Marketing and Communications Data includes your preferences in receiving marketing from us and any third parties and your communication preferences. Where you have consented, we use your personal data to contact you about how we can help you find products and services.

• Technical Data includes internet protocol (IP) address, your login data, and any technology on the devices you use to access the website and/or app.

• Profile Data includes your username and password, your interests, preferences, feedback, and survey responses.

• Usage Data includes information about how you use our website, app, products, and services.

• Correspondence We collect any additional personal data that you may provide to us from time to time if you contact us by email, letter or telephone, through our website or app, including where you use the integrated messaging functionality, or by any other means. If you contact us by telephone, we may record the call and make notes in relation to your call for training and service improvement purposes, to comply with our legal obligations, and to be able to deal with any dispute or defense of a claim which may arise in the course of us providing our products and services to you. If you use our messaging functionality, we will store the messages in line with our retention policy

We also obtain information about you from other sources:

• Cookies and similar technologies We track your use of our website through cookies and other similar technologies so that we can provide important features and functionality on our website, monitor its usage, and provide you with a more personalized experienced.

• Third parties We obtain personal data about you from third parties where you have given that third party consent to share such information with us.

We use your personal data for the following purposes:

​

Where applicable, to contact you in relation to a prize draw or competition you have entered.

​

We use your personal data to process your entry to a prize draw, competition or relevant promotion.

​

Direct marketing (including by third parties)

​

If you have provided your consent or we otherwise have the right to do so, we may use your contact details to send you direct marketing and keep you informed of promotional offers by email, SMS, post, or telephone relating to our products and services.
You can unsubscribe from our direct marketing at any time by clicking the “Unsubscribe” link in any of our emails or by contacting us.
Our trusted business partners would also like to use your name, email address, postal address, and telephone number to inform you of similar products, services, and promotional offers. We will only share your personal data with our partners where you have provided us with your consent to do so. You can unsubscribe at any time by clicking the “Unsubscribe” link in any of their emails or managing your preferences via their website.

​

To conduct automated decision-making and profiling

​

We use technology that tracks your use of our website, app, products, and services to help us build a profile of your preferences. What this means for you is that you are more likely to receive direct marketing and promotional offers that are tailored to your specific preferences, based on your previous activity.

​

If you don’t agree with an automated decision that our technology has made in relation to you, you can let us know and we may decide to look into it for you. You may still have the right to object to us processing your personal data for the purpose of automated decision-making or to restrict us from doing so.

​

Please note that the legal basis for us carrying out these activities is that it is in our legitimate interests to do so, having taken into account whether your interests and fundamental rights and freedoms are overridden by this type of processing.

​

To track your usage of our website, communications, products, and services

​

We use cookies and similar technologies to track your activity on our website so that we can provide important features and functionality on our website, monitor its usage, and provide you with a more personalized experienced.

​

To conduct internal training

​

We may use your personal data for internal training purposes so that our staff has the knowledge and expertise they need to ensure we provide you with the best possible user experience. For example, if you contact us by telephone, we may record the call and make notes in relation to your call for training and service improvement purposes.

​

To conduct market research and analytics

​

We may analyze your personal data (potentially in combination with personal data relating to other customers) to better understand our user base. We may also invite certain users to be involved in market research. If you accept our invitation, we will use your feedback to improve our products and services.

​

To maintain our records and improve data accuracy

​

Like any business, we process personal data in the course of maintaining and administering our internal records. This includes processing your personal data to ensure that the information we hold about you is kept up-to-date and accurate.

​

To respond to inquiries, complaints, and disputes

​

We use the personal data we hold about you to help us respond to any inquiries or complaints you have made, or deal with any dispute which may arise in the course of our providing our products and services to you, in the most effective manner.

​

To investigate, detect and prevent fraud and comply with our legal obligations

​

In certain circumstances, we use your personal data only to the extent required in order to enable us to comply with our legal obligations, including for fraud detection, investigation, and prevention purposes. This may require us to provide your personal data to law enforcement agencies, including Trading Standards if they request it.

Data protection law requires us to only process your personal data if we satisfy one or more legal grounds. These are set out in data protection law and we rely on a number of different grounds for the processing we carry out. These are as follows:

Consent

In certain circumstances, we process your personal data after obtaining your consent to do so for the purposes of:

• sending you marketing communications about our products and services;

• sharing your name, email address, postal address and telephone number with our trusted business partners so that they may market to you about their own similar products and services;

• conducting marketing research;

• using your location to deliver specific messaging and to you and to facilitate the messaging functionality on our app and websites (as applicable).

Necessary for the performance of a contract and to comply with our legal obligations

It is necessary for us to process your contact details, to set up your account and for the performance of any contract between us: In particular, we rely on this legal ground to:

• where you enter one of our prize draws, competition or promotions;

• communicate with you about major changes to the terms of this Privacy Policy or to any related or similar information.

In certain circumstances, we also use your personal data only to the extent required in order to enable us to comply with our legal obligations, including to detect, investigate and prevent fraud.

Necessary for the purposes of our legitimate business interests or those of a third party

It is sometimes necessary to collect and use your personal data for the purposes of our legitimate interests as a business, which are to:

• better understand our user base so that we can improve our products and services and marketing activities (which could also benefit you);

• comply with our contractual obligations to third parties, for example to produce aggregated underwriting risk analysis reports for our commercial lenders and commercial insurers;

• develop and improve our website to enhance the user experience;

• train our staff so that we can provide you with a better user service;

• respond to any enquiries or complaints you have made, or deal with any dispute which may arise in the course of us providing our products and services to you; and

• ensure effective operational management and internal administration of our business, document retention, compliance with regulatory guidance and exercise or defense of legal claims.

Please note that where we wish to rely on this legal ground for processing, we are required by data protection law to consider whether our legitimate interests are overridden by your interests or your fundamental rights and freedoms. We may continue to process your personal data on the basis of our legitimate interests only if we determine that your interests, rights and freedoms are not overridden by our legitimate interests.

We have considered these matters and on balance, we consider that the benefits described above are not outweighed by your interests or your fundamental rights and freedoms.

Where we think there is a risk that one of your interests or fundamental rights and freedoms may be affected, we will not process your personal data unless there is another legal ground for us to do so (either that we have obtained your consent to the processing or it is necessary for us to perform our contract with you or to comply with our legal obligations).

We may provide your personal data to:

• our suppliers and services providers, including other companies in our group, who perform certain business services for us and act as “processors” of your personal data on our behalf; and

• other organizations, who use your personal data for their own purposes and are “controllers” of such data in their own right. Such organizations may be located outside the EEA.

In addition, we may disclose your personal data:

• if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to protect the rights, property, or safety of our business, our customers, or others. This includes, in specific cases, exchanging information with other organizations for the purposes of fraud protection; and

• to successors in title or replacement operators of all or part of our business.
  In some cases, the personal data we collect from you may, for the purposes set out above, be transferred outside the European Economic Area (“EEA”) and such destinations may not have laws that protect your personal data to the same extent as in the EEA. We are required by data protection law to ensure that where we or our “processors” transfer your personal data outside the EEA, it is treated securely and is protected against unauthorized access, loss or destruction, unlawful processing, and any processing which is inconsistent with the purposes set out in this Privacy Policy

We retain your personal data for no longer than is necessary for the purpose(s) for which it was provided. What this means in practice will vary between different types of data. When determining the relevant retention periods, we take into account factors including:

• legal obligation(s) under applicable law to retain data for a certain period of time;

• statute of limitations under applicable law;

• potential or actual disputes; and

• guidelines issued by relevant data protection authorities.

Otherwise, we securely erase your personal data from our systems when it is no longer needed.

You have the following rights regarding your personal data:

​

• Right to be informed You have the right to be provided with clear, transparent, and easily understandable information about how we use your personal data and your rights. This is why we are providing you with the information in this Privacy Policy.

• Right of access You have the right to obtain access to your personal data (if we are processing it) and certain other information (similar to that provided in this Privacy Policy). This is so you are aware and can check that we are using your personal data in accordance with data protection law.

• Right to rectification You are entitled to have your personal data corrected if it is inaccurate or incomplete.

• Right to erasure This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your personal data where there is no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.

• Right to restrict processing You have the right to ‘block’ or suppress further use of your personal data in certain circumstances. When processing is restricted, we can still store your personal data, but may not use it further. We keep lists of people who have asked for further use of their personal data to be ‘blocked’ to make sure the restriction is respected in the future.

• Right to data portability You have the right to obtain and reuse your personal data in a structured, commonly used, and machine-readable format in certain circumstances. In addition, where certain conditions apply, you have the right to have such information transferred directly to a third party.

• Right to object to processing You have the right to object to us processing your personal data for our legitimate business interests or for direct marketing purposes (including in each case any related profiling).

• Right to withdraw consent to processing If you have given your consent to us to process your personal data for a particular purpose (for example, direct marketing), you have the right to withdraw your consent at any time (although if you do so, it does not mean that any processing of your personal data up to that point is unlawful).

• Right to make a complaint to the data protection authorities You have the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy with how we have handled your personal data or believe our processing of your personal data does not comply with data protection law.

​

For more information about your rights or if you would like to exercise any of your rights, you are welcome to contact us at the contact details set out below in the footer.

If you would like to exercise your data protection rights or if you are unhappy with how we have handled your personal data, you may contact us by:

• Emailing sales@xrdnano.com

Writing to

XRD Nano Limited

Unit 15, Red Lion Business Centre, Red Lion Road, Surbiton KT6 7QD

United Kingdom

• Submitting a message through our online contact form.

​

If you’re not satisfied with our response to any inquiry or complaint or believe our processing of your personal data does not comply with data protection law, you can make a complaint to the Information Commissioner’s Office (ICO) by:

​

• writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF;

• calling 0303 123 1113; or

• submitting a message through the ICO’s website at: ico.org.uk.

Our website contains hyperlinks to websites owned and operated by third parties. This Privacy Policy does not apply to those other websites. We encourage you to read the privacy statements on the other websites you visit, as they will govern the use of any personal data you provide when visiting those websites. We do not accept any responsibility or liability for the privacy practices of such third-party websites and your use of such websites is at your own risk.

This Privacy Policy was last updated on 22 September 2020

​

This Privacy Policy may be updated from time to time so you may wish to check it each time you provide personal data to us. We won’t alert you to minor changes, but if there are any major changes, we will let you know and where appropriate ask for your consent.