Privacy Policy
How Rey360 Technologies Ltd collects, uses, and protects your personal data
1. Who We Are
Rey360 Technologies Ltd ("Rey360", "we", "us", "our") is the data controller responsible for personal data collected through this website (www.rey360tech.com). We are registered in England and Wales (Company No. 16654863) and also operate in the Federal Republic of Nigeria.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what your rights are. It applies to data collected through the Rey360 Technologies corporate website only — in particular, through the contact form. It does not apply to data collected through any Rey360 product or platform (including Toviri), which will have its own privacy documentation.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What Data We Collect
a. Data You Provide — Contact Form
When you submit an enquiry through our website contact form, we collect:
- Your name
- Your email address
- Your phone number (if you choose to provide it)
- The content of your message
You are not required to provide this information. If you choose not to, we will be unable to respond to your enquiry.
b. Technical Data — Collected Automatically
When you visit our website, we may automatically collect certain technical information through standard web server logs and analytics tools. This may include:
- Your IP address (which may be considered personal data under Nigeria and UK GDPR)
- Browser type and version
- Device type and operating system
- Pages visited and time spent on the site
- Referring URL (the page you visited before arriving at our website)
This data is collected to help us understand how the website is used and to maintain its performance and security. We rely on our legitimate interest in operating a functional, secure website as the legal basis for processing this data.
3. How We Use Your Data
We use the personal data we collect for the following purposes:
| Purpose | Data Used | Legal Basis (UK GDPR) |
|---|---|---|
| Responding to your enquiry | Name, email, phone, message | Legitimate interest (responding to a direct enquiry) |
| Maintaining records of communications | Name, email, message content | Legitimate interest (record-keeping) |
| Improving website functionality and user experience | Technical data (IP, browser, pages visited) | Legitimate interest (operating a functional website) |
| Monitoring website security and preventing misuse | IP address, technical data | Legitimate interest (security) |
| Complying with legal obligations | Any data where legally required | Legal obligation |
We will not use your personal data for any purpose that is incompatible with the purposes described above without first informing you and, where required, obtaining your consent.
4. Data Sharing
We do not sell, rent, or trade your personal data to any third party.
We may share your data with the following categories of recipients, strictly on a need-to-know basis:
- Website hosting and infrastructure providers — to host and operate the website on our behalf
- Analytics service providers — to help us understand how the website is used (see Cookies section)
- Professional advisors — such as lawyers and accountants where necessary for legitimate business purposes
- Law enforcement or regulatory authorities — where we are legally required or permitted to do so
Where we share data with third-party service providers, we ensure that appropriate data processing agreements are in place and that those providers process data only on our instructions and in compliance with UK GDPR.
5. International Data Transfers
Rey360 Technologies Ltd operates in both the United Kingdom and the Federal Republic of Nigeria. In the course of our operations, personal data collected through this website may be accessed by members of our team or service providers located in Nigeria.
Nigeria is not currently on the UK's list of countries with an adequacy decision under UK GDPR. Where personal data is transferred from the UK to Nigeria, we ensure that appropriate safeguards are in place in accordance with Article 46 of the UK GDPR. These safeguards may include contractual clauses approved by the ICO or other lawful transfer mechanisms.
If you would like more information about the specific safeguards we apply to international data transfers, please contact us at info@rey360tech.com.
6. Data Retention
We retain personal data only for as long as is necessary for the purpose for which it was collected, and in accordance with our legal obligations. Our specific retention periods are as follows:
| Contact form enquiries | 12 months from the date of your enquiry, unless we enter into a business relationship, in which case data may be retained for the duration of that relationship plus 6 years |
| Website technical/analytics data | Up to 26 months, in line with standard analytics platform defaults |
| Legal compliance records | As required by applicable law (typically up to 6 years for financial and contractual records) |
After the applicable retention period, we will securely delete or anonymise your personal data.
7. Your Rights Under UK GDPR
Under the UK General Data Protection Regulation, you have the following rights in relation to your personal data:
- Right of Access — You have the right to request a copy of the personal data we hold about you.
- Right to Rectification — You have the right to request that we correct any inaccurate or incomplete personal data.
- Right to Erasure — You have the right to request that we delete your personal data, subject to certain exceptions.
- Right to Restrict Processing — You have the right to request that we restrict the processing of your personal data in certain circumstances.
- Right to Data Portability — Where we process your data by automated means on the basis of your consent or a contract, you have the right to receive your data in a structured, machine-readable format.
- Right to Object — You have the right to object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent — Where we process your data on the basis of consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us at info@rey360tech.com. We will respond within one month of receiving your request, as required by UK GDPR. In some cases, we may need to verify your identity before processing your request.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. These measures are reviewed and updated regularly.
However, no method of data transmission over the internet or electronic storage is 100% secure. While we take every reasonable step to protect your personal data, we cannot guarantee absolute security.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, inform you directly.
9. Cookies
Our website may use cookies — small text files placed on your device — to improve functionality and analyse usage. We use the following categories of cookies:
- Strictly Necessary: Essential for the website to function. These cookies cannot be disabled.
- Analytics / Performance: Help us understand how visitors use the website (e.g. pages visited, time on site). We use this data in aggregated, anonymised form. These cookies require your consent.
- Functional: Remember your preferences to improve your experience. These cookies require your consent.
When you first visit our website, you will be asked to consent to non-essential cookies. You can manage or withdraw your cookie consent at any time through your browser settings or our cookie preference tool (where available).
Please note that disabling certain cookies may affect the functionality of this website.
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policy of every website you visit.
11. Children's Privacy
This website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you are a parent or guardian and believe that your child has submitted personal data through our website, please contact us at info@rey360tech.com and we will delete such data promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or for other operational reasons. When we make material changes, we will update the Effective Date shown at the top of this document.
We encourage you to review this Privacy Policy periodically. Your continued use of the website following any changes constitutes your acceptance of the updated Policy.
13. Contact Us and Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact us:
Data Controller: Rey360 Technologies Ltd
Email: info@rey360tech.com
Website: www.rey360tech.com
Postal Address: 27, Downend Road, Bristol, UK
