Privacy Policy

1. Introduction

Auditee Ltd ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you interact with us, in accordance with the UK General Data Protection Regulation (UK GDPR) and EU GDPR.

Data Controller: Auditee Ltd (Company Registration 15186841) 20 Wenlock Road, London, N1 7GU, United Kingdom privacy@auditee.io

2. What Personal Data We Collect

We may collect the following categories of personal data:

• Customers and Users: Name, job title, email address, phone number.
• Suppliers and Business Partners: Name, email address, phone number.
• Visitors to Our Website: Technical data (e.g., IP address, browser type, device ID, geographic location, pages viewed), and any information you provide through contact forms or newsletter sign-ups.
• Applicants/Candidates: Name, contact details, CV, cover letter, and application materials.

3. How We Use Your Personal Data and Legal Basis

Purpose: Provide our services to customers and partners Legal Basis: Contractual necessity

Purpose: Manage our relationship with suppliers Legal Basis: Contractual necessity

Purpose: Respond to inquiries and demo requests Legal Basis: Legitimate interests (responding to business inquiries)

Purpose: Recruitment activities Legal Basis: Pre-contractual steps (Article 6(1)(b))

Purpose: Marketing communications (newsletters, updates) Legal Basis: Consent (opt-in)

Purpose: Website analytics and improvements Legal Basis: Consent (for non-essential cookies)

If you withdraw your consent or object to our processing, this may affect our ability to provide certain services.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience. Non-essential cookies (analytics, advertising) will only be set with your consent.

Cookie Policy

You can manage your cookie preferences at any time via our cookie banner.

5. Sharing Your Personal Data

We may share your personal data with:

• Service providers acting as processors (e.g., IT providers, marketing agencies).
• Third parties in connection with business transactions (e.g., mergers, acquisitions).
• Regulatory authorities, if required by law.

International transfers outside the UK/EU are protected by appropriate safeguards such as Standard Contractual Clauses (SCCs) and Transfer Impact Assessments.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described above, or as required by law:

• Customer and supplier data: Up to 5 years after relationship ends.
• Applicant data: Up to 12 months after recruitment process concludes unless otherwise consented.
• Website analytics data: As set out in our Cookie Policy.

When no longer necessary, we will securely delete or anonymise the data.

7. Your Rights

You have the following rights regarding your personal data:

• Right to access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with the Information Commissioner's Office (ICO) or relevant EU supervisory authority

To exercise your rights, contact us at: privacy@auditee.io

8. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

9. Changes to This Policy

We may update this policy from time to time. We encourage you to review this page periodically. Changes are effective when posted on this page.

10. Contact Us

If you have any questions about this policy or how we handle your personal data, please contact:

Auditee Ltd Attn. Data Privacy Officer 20 Wenlock Road London, N1 7GU United Kingdom Email: privacy@auditee.io