Introduction

OpenITC respects each individuals right to personal privacy. We will collect and use information through our Web site only in the ways disclosed in this statement. This statement applies solely to information collected at our Web sites.

Your personal information is collected in order to fulfill our obligations as part of a contract with you, because you have consented to our use of your personal data, or because it is in our legitimate business interests to use it.

Part I. Information Collection

Information Collected by us

OpenITC collects information through our Web site(s) at several points. We collect the following information about primary visitors: IP address

We also collect the following general data that is not personally identifiable information:

• Referral site - If you come to our site via a link, the location of the referral is captured. This is used to help us know where our users come from.
• Browser type - This information is captured to help us optimize our site to match the latest technology used by our customers.
• Operating system - This information is captured to help us optimize our site to match the latest technology used by our customers.
• Movements through our site - We keep track of pages you visit to help us provide a more personalized and relevant shopping experience.
• Search Engine Keywords - This information is captured to help us optimize our marketing strategy.

We collect this information through the following methods:

• Webserver access logs.

We do employ cookies. A cookie is a small text file that our Web server places on a users computer hard drive to be a unique identifier. Cookies enable OpenITC to track usage patterns and deliver customized content to users. Our cookies do have an expiration date. Our cookies do not collect personally identifiable information.

Information you supply

You may supply us information through the following methods:

• Customer Billing System and its registration forms, used to collect customers full name, full address, e-mail address and telephone number. We also collect your IP address here.

To receive our products and services, full name, full address, e-mail address, telephone number and IP address are mandatory because we use this information to determine place of supply and to prevent fraudulent orders. Other information we request is optional.

Information from third parties

Additional information may be obtained from third parties where it is of legitimate business interest. Examples of such third parties are (but not limited to) Companies House and credit reference agencies.

Part II. Information Usage.

The information collected by OpenITC will be used for safely processing your online order and for contacting you about your transactions. Users who provide information will receive their purchased services.

Registered users will receive additional announcements from us about products, services, special deals, and a newsletter. Out of respect for the privacy of our users we present the option to not receive these types of communications.

The information we collect will be used to create customer profiles based on browsing or purchasing history. We will supplement information collected at our Web site with data from other sources such as credit reference agencies to authorise purchases.

OpenITC may share information regarding purchases with payment gateways and resellers for the express purpose of completing a transaction or verifying that a transaction is not fraudulent. In each case these companies do not share or resell private information for any purpose outside of completing the transaction.

We offer links to other Web sites. Please note: When you click on links to other Web sites, we encourage you to read their privacy policies. Their standards may differ from ours.

Our Web site offers customer support chat and a ticket based customer support desk. Please note customer support chat, ticket based customer support and e-mails are uncontrolled and public domain therefore you must not post personally identifiable information here.

Part III. Access to Information

We are legally obliged to retain certain personal data for a length of time for legal, tax and accounting purposes.

Your data will not be kept any longer than necessary. Once it is safe to do so we will discard your personal data by the best possible means determined by us such as replacing it with a suitable one-way hash or removing it entirely.

Users may access their own personal information and contact us about inaccuracies they may find. This may be done via our billing and ticketing system at https://clients.openitc.co.uk/

Part IV. Problem Resolution

If problems arise, users may contact OpenITC via our "contact us" link (http://www.openitc.co.uk/contact.php) on the OpenITC website. We are committed to resolving disputes within 90 business days.

Part V. Data Storage and Security

OpenITC protects user information with the following security measures: Multiple Secured Firewalls, Secure authentication methods via SSH and SSL, SSL certificate and encryption on our billing system, brute force detectors, event logging and restricted physical server access.

OpenITC maintains the accuracy of our information by storing encrypted daily backups of all data held at several remote locations.

Part VI. Personal data you store

Many OpenITC products and services allow you to store personal data for which OpenITC is neither the data processor nor data controller. It is your responsibility to ensure GDPR compliance with any data stored through the use of our products and services.