Last updated 23 May 2018

Privacy Policy

Compound and its subsidiaries and affiliates (collectively, “Compound”, “us” or “we”) understand that your privacy is important to you. We are committed to respecting your privacy and protecting your personal data, which is any information that is capable of identifying you as an individual person, collected via all websites or apps that post a link to this Privacy Policy (collectively, “the Sites”).

This Privacy Policy describes how we handle and protect your personal data in connection with the Sites, in our capacity as data controllers. Please see our Terms of use for more information about our online terms and policies in general.

Information we collect

Compound collects personal data on certain areas of the Sites when you register for or apply for jobs through the Compound Website, register for Compound newsletters and alerts, sign up for conferences and events, and/or participate in public user posting areas (such as bulletin boards, discussion forums and surveys). The personal data collected varies across the Sites and may include information that you provide, such as your name, mailing address, email address, telephone number, fax number, and background information required to apply for a job.

For instance, by registering for Compound newsletters or alerts, you agree to receive the correspondence to which you have subscribed at the e-mail address that you provided at registration. Only Compound or its agents will contact you using this e-mail address. We will send e-mails to this address related to your registration.

We may also automatically collect information about the devices you use to interact with our Sites. The information we automatically collect may include IP address, device identifier, web browser, and browsing information collected through cookies, web beacons, pixels, clear gifs, and other similar technologies (collectively “Cookies and Other Tracking Technologies”) on our Sites. We may also automatically collect information about how you use the Sites, such as what you have searched for and viewed on the Sites. The information automatically collected may be associated with any personal data you have provided.

Use of information

The personal data we collect may be used where we have your specific consent to do so, or where Compound has a legitimate interest in or other legal basis for processing such information. In some situations, the collection of personal data may be required for the operation of the Sites or to provide our services and products. Compound uses your personal data to fulfil your requests for information, process your requests to participate in conferences and events, personalise content that you view or receive on the Sites, evaluate and improve our services, distribute newsletters and alerts to you, recruit and evaluate job applicants, analyse the Sites’ performance and functioning, publish your letters to the editor or comments, prevent fraud, enforce our terms of use, comply with all applicable laws and corporate reporting obligations, enforce Compound’s agreements, and accomplish other purposes you may initiate or request. We may keep any of your personal data on file and use it to contact you.

Compound may use first and third party Cookies and Other Tracking Technologies to manage our Sites and our services and collect analytics about how you use them. The information provided throughout this Privacy Policy about cookies also applies to these other tracking technologies. Please refer to our Cookie Policy for more details regarding our use of cookies.

Our Sites do not collect personal data about your online activities over time and across third party websites or online services. Therefore, “do not track” signals transmitted from web browsers do not apply to our Sites, and we do not alter any of our data collection and use practices upon receipt of such a signal.

Data recipients and international data transfers

Personal data collected on the Sites may be transferred from time to time to Compound subsidiaries and affiliates, as well as to our third party service providers located throughout the world, including in countries where the local law may grant you fewer rights than you have in your own country. Additionally, the Sites may be viewed and hosted by Compound and our third party service providers anywhere in the world. Where required by law, we have put in place legal mechanisms designed to ensure adequate data protection of your personal data that is processed by Compound subsidiaries, affiliates and third- party service providers, including the transfer of your personal data to countries other than the one in which you reside. If you would like more information about these legal mechanisms, which may include the EU’s Standard Contractual Clauses, please contact us at the address below. By using any of the Sites and providing information on any of them, you voluntarily consent to such trans-border transfer and hosting of such information.

Compound will not intentionally disclose or transfer (and will take reasonable steps to prevent the unauthorised or accidental disclosure of) your personal data to third parties without your consent, whether for such third parties’ own marketing purposes or otherwise, except as follows. Compound may provide access to your personal data to third party service providers engaged by Compound to provide services related to the Sites, provided that such third- party service providers will first agree to maintain the strict confidentiality of such information and provide the same level of data security as provided by Compound.

We also may share your personal data with third party service providers who perform services and functions on our behalf to support our interactions with you, including, for example, processing recruitment materials, administering surveys or contests, or communicating with you. These third party service providers are not permitted to use or disclose your personal data except as necessary to perform services on our behalf or to comply with legal requirements.

In addition, we may disclose information about you:

If we are required to do so by law or legal process;
To law enforcement authorities or other government officials;
When we believe disclosure is necessary or appropriate to prevent physical harm or financial loss or in connection with an investigation of suspected or actual illegal activity;
If disclosure is necessary to protect the vital interests of a person;
To enforce our Terms of use;
To protect our property, services and legal rights;
To prevent fraud against Compound, our subsidiaries, affiliates and/or business partners;
To support auditing, compliance, and corporate governance functions; or
To comply with any and all applicable laws. We maintain processes designed to ensure that any processing of personal data by third party service providers is consistent with this Privacy Policy and protects the confidentiality, availability, and integrity of your personal data.

In addition, we may disclose or transfer your personal data in the event of a re-organisation, merger, sale, joint venture, assignment, or other transfer or disposition of all or any portion of our business.

User forums

You should be aware that whenever you publicly disclose information online, that information could be collected and used by others. Compound is not responsible for any action or policies of any third parties who collect information that users publicly disclose in any such forums on the Sites.

Links to third-party sites

Compound may provide links to third-party websites or information as a service to our users. If you use these links, you will leave the Sites. Such links do not constitute or imply an endorsement, sponsorship, or recommendation by Compound of the third party, the third- party website, or the information contained therein, and Compound shall not be responsible or liable for your use thereof. Such use shall be subject to the terms of use and privacy policies applicable to those sites.

The Sites may allow you to sign into and/or associate your social network accounts including, but not limited to, Twitter, LinkedIn, Facebook, and YouTube, with Compound. The Sites also may allow you to log in to an account provided you by Compound using certain social network account credentials.

By associating your social network account with Compound or logging in to a Compound account using your social network account credentials, you give us permission to access information that you have made available in your public profile for that social network account. The information available in your public profile varies based on the social network and your settings, but may include your email address, real name, profile picture, gender, and location. We use the information we receive from your social network account in accordance with the social network’s terms of use and this Privacy Policy. Please refer to the privacy settings in your social network account for information about what data is shared with Compound and other connected applications and to manage the data that is shared through your account, including information about your activities using our Sites.

If you would like to disconnect a social media account from us, refer to the settings of that social network account and its provider.

Security

Compound has implemented generally accepted standards of technology and operational security to protect personal data from loss, misuse, alteration, or destruction. Only authorised Compound personnel and third party service providers are provided access to personal data, and these employees and service providers are required to treat this information as confidential. Despite these precautions however, Compound cannot guarantee that unauthorised persons will not obtain access to your personal data.

Data retention policy

Compound retains personal data, as necessary, for the duration of the relevant business relationship. We may also retain personal data for longer than the duration of the business relationship should we need to retain it to protect ourselves against legal claims, use it for analysis or historical record-keeping, or comply with our information management policies and schedules. If you request that we delete your personal data, Compound will make reasonable attempts to delete all instances of the information in their entirety. For requests for access, corrections, or deletion, please refer to the “Your Rights” section of this Privacy Policy.

Children

The Sites are not designed for or directed at children 17 years of age or younger, and Compound does not intentionally collect or maintain personal data about anyone under this age.

Your rights

Where granted by local law, you may have the right to request access to the personal data that we have collected about you for the purposes of reviewing, modifying, or requesting deletion of the data. You may also have the right to request a copy of the personal data that we have collected about you and to have any inaccuracies in that data corrected. In certain circumstances, you may also request that we cease processing your personal data.

If you would like to make a request to access, review, or correct the personal data we have collected about you, or to discuss how we process your personal data, please contact us at hello@compound.uk.com. To help protect your privacy and security, we will take reasonable steps to verify your identity, such as requiring a password and user ID, before granting access to your personal data. We will make reasonable attempts to promptly investigate, comply with, or otherwise respond to your requests as may be required by applicable law.

Different laws may prevent us from providing access to your personal data or otherwise fully complying with your request depending upon the circumstances and the request, such as for example, where producing your information may reveal the identity of someone else. We reserve the right to charge an appropriate fee for complying with your request where allowed by applicable law, and/or deny your requests where they may be manifestly unfounded, and/or excessive, or otherwise objectionable or unwarranted under applicable law.

In addition, and where granted by local law, you have the legal right to lodge a complaint with a competent data protection authority.

You may also unsubscribe from mailing lists or any registrations on any of the Sites. To do so, please either follow instructions on the page of the Site on which you have provided such information, subscribed or registered or contact us at the address provide at the bottom of this Privacy Policy.

By using the Sites, you consent to the collection, use, and storage of your personal data by us in the manner described in this Privacy Policy and elsewhere on the Sites. We reserve the right to make changes to this Privacy Policy from time to time. We will alert you to any such changes by updating this Privacy Policy. If we make material changes to this Privacy Policy that increase our rights to use personal data that we have previously collected about you, we will obtain your consent either through an email to your registered email address or by prominently posting information about the

Data Processing Addendum

This is a special section dedicated to the fulfilment of our obligations under GDPR. It contains a summary of key components of our Data Protection and Privacy Policies.

Who will be responsible for your personal data?

The Data Controller - (person who collects and uses your personal data) is Compound Digital Technologies Ltd Our contact details are shown above.

Who looks after Data Protection at Compound?

Alistair Wilson, Managing Director of Compound.

Why do you need my personal information?

We need to process personal information for lots of different reasons. For example, we may have a legal obligation to process the information, or we have a service contract with you or you have consented to give it via our marketing channels.

There may be a time delay between you procuring a service from us, and our delivery of that service. In the meantime, we need to store this information so we can keep in contact if needed.

You can choose to not leave your details if you wish, but may miss being contacted.

How can I alter my preferences?

You may contact us at any point via the details provided on this page to update us.

What personal data about me will the Data Controller get?

This will vary depending on what service you are procuring. We will only gather enough information to allow them to carry out the function that is required, and will only inform you of future and relevant services if you choose to be added to our email list. All messages sent will contain an unsubscribe option. Any specific information required will be set out on the individual forms and documents or will be explained to you.

Will my data be given to anyone else?

Compound uses software platforms within the delivery of its services and products. Your data may be shared if it is necessary in order to deliver a service. We may share your data with other teams in Compound, with partner agencies or organisations in order to deliver our service to you. We never sell client data. We may also have a legal obligation to share personal data, in accordance with the Data Protection Act.

How long will my data be kept by the Data Controller?

The Data Protection Act says that we can only keep personal information for as long as it is necessary. More details about how long we will keep your data is set out in our data retention schedule.

What are my rights under the Data Protection Act?

The right to be informed.
The right of access.
The right to rectification
The right to erasure
The right to restrict processing
The right to data portability
The right to object
Rights related to automated decision making, including profiling

Details about what these rights mean and how you can assert your rights, please see our Rights our guide

What if I have a complaint about the way my information has been treated?

You can complain to the Information Commissioner’s Office (ICO) if you have any concerns about how your information has been gathered or used, or if you do not think your rights (as outlined above) have been dealt with properly. The ICO is the independent supervisory authority in England, and can be contacted by letter to: The Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, or Telephone: 0303 123 1113. Website: www.ico.org.uk

Contact us

If you have any questions about our Cookie Policy, please contact us at:

Compound Digital Technologies Ltd 5th Floor, 167-169 Great Portland Street London W1W 5PF United Kingdom