Privacy notice

Who we are

mypunchout is a product of Ensign Software. The company responsible for your personal data (the "controller") is Ensign Advanced Systems Limited, trading as Ensign Software, registered in England and Wales under company number 02415174.

This notice covers this website, mypunchout.cloud. It is written for UK GDPR and the Data Protection Act 2018.

What we collect

• What you send us through the demo form: your name, your company and your work email address.
• Server logs. Like every website, our servers record each request: your IP address, the page asked for, the date and time, and the browser's description of itself. We use these only to keep the site secure and to find faults.

Analytics. We use Google Analytics to see which pages are useful. If you accept, it records which pages you visit, roughly where you are (town or region), your device and browser, and how you arrived, using cookies to recognise a returning visit. If you don't accept, it sets no cookies and stores nothing on your device: it sends Google an anonymous signal for each page view (the page, the time, and the type of browser and device), so we can count visits without identifying anyone. We don't use advertising tools.

The demo form

We use the details you give us to reply to you and to arrange a demo. Our legal basis is your request: you've asked us to contact you, and replying is in both our interests ("legitimate interests"). We won't add you to a marketing list or pass your details to anyone to sell to you.

Cookies and storage

We only set cookies if you accept them. If you click Accept on our cookie prompt, Google Analytics sets cookies (named _ga and _ga_<id>, lasting up to two years) to tell visits apart. If you choose No thanks, or do nothing, Google Analytics still runs but sets no cookies, and only sends the anonymous page-view signals described above. Choosing No thanks after accepting deletes the analytics cookies.

Your browser remembers your choice in its own storage. You can change it at any time withCookie settings, also linked at the foot of every page.

If you close the announcement bar at the top of the page, your browser remembers that choice in its own storage so the bar stays closed. That setting never leaves your device, and clearing your browser's site data removes it.

Who else sees it

The website runs on servers rented from Hetzner Online GmbH in Germany, which is inside the European Economic Area. The UK recognises the EEA as protecting personal data to UK standards. Hetzner stores the data for us and may not use it for anything else.

Google (Google Ireland Limited and Google LLC) processes the analytics data for us. Google may transfer it to the United States, where Google LLC is certified under the UK Extension to the EU-US Data Privacy Framework. We don't let Google use it for advertising.

We don't sell personal data, and we only share it if the law requires us to.

How long we keep it

• Demo requests: as long as we're talking to you about mypunchout, then deleted unless you become a customer.
• Server logs: a short time, then overwritten automatically.
• Analytics data: 14 months, then deleted automatically by Google Analytics.

Data in mypunchout shops

If you buy from a supplier that runs its shop on mypunchout, that supplier decides what happens to your data, and its own privacy notice applies. We handle that data on the supplier's behalf, under our agreement with them, and only as they instruct.

Your rights

You can ask us to:

• withdraw your consent to analytics at any time (use Cookie settings);
• tell you what personal data we hold about you and give you a copy;
• correct it, or delete it;
• stop or limit how we use it, or object to our using it;
• send it to you, or to someone else, in a common format.

We'll reply within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.ukor on 0303 123 1113. We'd be grateful for the chance to put things right first.

Contacting us

Write to us about anything in this notice at:

Changes

If we change how we handle personal data, we'll update this page and the date at the top. We won't use data you've already given us in a new way without telling you first.