How Nimbyx handles personal data collected through the Bytewise website - for visitors, enquiries and general browsing.
ICO registration reference ZC196580.
1. About this policy
1.1 This policy explains how Nimbyx Limited ("Nimbyx", "we", "us" or "our") handles personal data collected through our public website at www.bytewise.co.uk (the "Website") - for example when you browse the site, fill in a form or get in touch.
1.2 Who Nimbyx is: Nimbyx is the company that owns and runs Bytewise, and builds software and services for schools and other educational settings. We operate only in the United Kingdom.
1.3 What Bytewise is: Bytewise is the online meal-ordering and top-up system that Nimbyx owns and runs.
1.4 Company details: Nimbyx Limited is a private limited company registered in England and Wales (company number 17288718), registered office Rose House, Old Sawmill Place, Bell Lane, Little Chalfont, Amersham, Buckinghamshire, HP6 6FA.
1.5 This is a short, website-only policy. It does not cover the personal data we handle when running the Bytewise service for schools, operators and guardians (for example pupil, guardian and payment data) - that is explained in full in our Privacy Notice.
2. The information we collect
We keep data collection on the Website to a minimum. Depending on how you use the site, we may collect:
- Enquiry and contact details - your name, email address, telephone number, organisation and the content of your message, when you complete a form, request a demo or contact us.
- Sign-up details - your name and email address if you subscribe to updates or a newsletter.
- Technical information - basic details such as your IP address, browser type and device information, collected automatically to keep the site working and secure.
- Cookie data - information from the strictly necessary and functional cookies we set, as described in our Cookie Policy. We do not use analytics or advertising cookies.
We do not intentionally collect special-category data through the Website, and we ask that you don't include sensitive personal information in enquiry forms or messages.
3. How and why we use it
We use the information above to:
- respond to your enquiry, demo request or message;
- send you updates or marketing you have asked for (you can opt out at any time);
- keep the Website secure and working properly; and
- understand, in general terms, how the site is used so we can improve it.
Our lawful bases are our legitimate interests (to respond to enquiries, run and secure our website, and promote our services in a way you would reasonably expect), consent (for any marketing you opt in to, which you can withdraw at any time) and, where relevant, to meet a legal obligation.
4. Cookies
The Website uses only first-party cookies that are strictly necessary or functional. We do not use analytics, advertising or third-party cookies. Full details are in our Cookie Policy.
5. Who we share it with
We do not sell your personal data. We share it only with the trusted providers that help us run the Website and respond to you - for example our hosting and email providers - each bound to protect it and use it only on our instructions. We may also disclose information where the law requires it, or to protect our rights or prevent fraud. The providers behind Bytewise are listed in our Privacy Notice.
6. Where your data is held
Website and enquiry data is held in the United Kingdom. Where any data is transferred outside the UK or EEA (for example email delivery), we make sure it has an equivalent level of protection, using Standard Contractual Clauses or the UK International Data Transfer Addendum.
7. How long we keep it
- Enquiries and messages: kept for as long as needed to deal with your query and for a reasonable period afterwards.
- Marketing sign-ups: kept until you unsubscribe or ask us to stop.
- Technical and security logs: kept only for as long as needed to operate and protect the site.
8. Your rights
You have the right to access the personal data we hold about you, and to ask us to correct it, delete it, restrict or object to its use, or provide it in a portable format. You can also withdraw consent to marketing at any time, and complain to the Information Commissioner's Office (ICO) if you are unhappy with how we handle your data.
To exercise any of these rights, contact our Data Protection Officer at dpo@nimbyx.co.uk. There is no charge, and we aim to respond within one month.
9. Updates to this policy
We may update this policy from time to time. The current version is always available on the Website, with the version date shown at the top.
10. Contacting us
For general queries, email support@nimbyx.co.uk. For data-protection queries, email our Data Protection Officer at dpo@nimbyx.co.uk, or write to us at Nimbyx Limited, Rose House, Old Sawmill Place, Bell Lane, Little Chalfont, Amersham, Buckinghamshire, HP6 6FA.
11. Related policies
Please also read our Cookie Policy, available on the Nimbyx Website.
12. Parent company ownership
Nimbyx Limited has a parent company, Rocket Rose Holdings. Although Rocket Rose Holdings holds an interest in Nimbyx, no customer data is shared with, or accessible by, the parent company or its staff. Only employees of Nimbyx Limited have appropriate access to customer data.