Privacy Policy
At BambooIQ Ltd., we value the privacy and protection of your personal data. This Privacy Policy explains how we collect, use, share, and protect your personal data in connection with your use of our website, www.bambooiq.co.uk, www.bamboo-iq.com, and our SaaS product AlphaIMS. By using our website and services, you agree to the collection and use of your data as described in this policy.
BambooIQ Ltd. ("we", "our", "us") is a company registered in England and Wales with registered office at Unit B, 48-49 Aldgate High Street, City of London, EC3N 1AL, UK. This
Privacy Policy applies to:
The use of our website (s): www.bambooiq.co.uk, www.bamboo-iq.com
The use of our SaaS platform AlphaIMS and its associated foundation platform Cyferd (www.cyferd.com) by employees, users, and their employers.
We comply with the UK Data Protection Act 2018 and the EU General Data Protection Regulation (GDPR).
We collect different types of personal data depending on how you interact with us:
a. Website Use:www.bambooiq.co.uk, www.bamboo-iq.com
When you visit our website, we may collect the following personal data:
Contact Information: Name, email address, phone number.
Technical Information: IP address, browser type, device information, and browsing behavior (via cookies and other tracking technologies).
Marketing Data: Your preferences in receiving marketing communications from us.
b. AlphaIMS Use (SaaS Product)
When you use AlphaIMS, we process sensitive personal data on behalf of, and as specified by your employer. The data collected may include:
User Information: Name, email address, job title, employment history, training, and department.
Sensitive Personal Data: Health-related information, financial data, or other sensitive data provided by yourself as specified and required by your employer for the purpose of compliance and performance management.
Usage Data: Interaction with the platform, activity logs, and usage patterns.
We collect and process your personal data for the following purposes:
a. For Website Use:
To provide and maintain our website, including personalizing content and enhancing user experience.
To communicate with you, including responding to inquiries and providing customer support.
To send you marketing communications, provided you have consented to receive them.
To monitor and analyze usage of our website for improving functionality and security.
b. For AlphaIMS (SaaS Product) Use:
To provide our SaaS services to your employer, including managing employee data as required by your employer to manage compliance and performance requirements.
To support and improve the platform, including resolving technical issues and ensuring security.
To fulfill our contractual obligations to your employer and ensure the correct processing of sensitive data.
We process your personal data under the following legal bases:
Contractual Necessity: We process your personal data to perform our contract requirements with you and / or your employer (for both website use and SaaS services). All of your data protection rights may apply except the right to object.
Legitimate Interests: We process your information because it benefits you, your employer, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
o We use personal data to understand how our Services are used and how our campaigns are performing, in gainining insights which help us dedicate our resources and efforts more efficiently; marketing, advertising and selling our Services to you and others; providing customer services and technical support; and protecting and securing the Authorized Users, Customers, Employers, ourselves and our Services.
Consent: For certain activities, such as marketing communications, we process personal data based on your consent. You have the right to withdraw consent at any time.
Legal Obligation: We may process your personal data to comply with legal obligations (e.g., tax, employment law, Health and Safety law). All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
Vital Interests: In some cases, we may process personal data to protect the vital interests of individuals (e.g., in an emergency).
We retain your personal data for no longer than necessary to fulfill the purposes outlined in this Privacy Policy, including employer, legal, accounting, or reporting requirements. The retention period for different types of data is as follows:
Website Data: Personal data related to website usage will be retained for no longer than 2 years, or as required for ongoing support and improvements.
AlphaIMS Data: Sensitive data processed for SaaS services will be retained in accordance with the contractual agreement between BambooIQ Ltd. and your employer. When no longer necessary, the data will be securely deleted or anonymized.
We do not sell your personal data. However, we may share it with the following parties:
Service Providers: We may share personal data with third-party vendors who support us in providing the website and SaaS services (e.g., hosting services, cloud providers, and payment processors).
Cyferd Inc: for SaaS services to process and store customer data in line with their privacy policy available at cyferd.com.
Legal Compliance: We may disclose personal data when required by law or in response to legal requests (e.g., subpoenas, regulatory investigations).
With Employers: As part of providing AlphaIMS SaaS services, personal data, including sensitive data, is processed as specified by and on behalf of your employer, which may access certain information in line with their policies and contractual obligations.
If your personal data is transferred outside the UK or EU, we ensure that appropriate safeguards are in place, such as the use of Standard Contractual Clauses or reliance on an adequacy decision by the UK or European Commission (e.g., for transfers to the US).
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include encryption, secure server environments, access controls, and regular security audits.
Under the GDPR and UK Data Protection Law, you have the following rights regarding your personal data:
Right of Access: You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for.
Right to Rectification: You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
Right to Erasure: You can request the deletion of your data when it is no longer necessary or if you withdraw consent.
Right to Restriction of Processing: You can request a restriction on how we process your data in certain circumstances.
Right to Data Portability: You can request a copy of your data in a machine-readable format.
Right to Object: You can object to the processing of your data under certain conditions, including for direct marketing purposes.
Right to Withdraw Consent: If we rely on consent as the legal basis for processing, you can withdraw it at any time.
To exercise these rights, please contact us:
Email: willem.otto@bambooiq.co.uk
Office:
Bamboo IQ Limited
Unit B
48-49 Aldgate High street
City of London
EC3N 1AL
United Kingdom
Our website uses cookies and other tracking technologies to improve user experience, analyze usage, and serve targeted advertisements. By using our website, you consent to the use of cookies. You can manage your cookie preferences through your browser settings.
For more details on our cookie practices, please see our Cookie Policy.
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the updated policy on our website and, where appropriate, by email.
If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at:
Bamboo IQ Limited
Unit B
48-49 Aldgate High street
City of London
EC3N 1AL
United Kingdom
Website: www.bambooiq.co.uk
For GDPR-specific inquiries, please contact our Data Protection Officer (DPO) at willem.otto@bambooiq.co.uk.
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Helpline number: 0303 123 1113 Website: https://www.ico.org.uk/make-a-complaint
This privacy policy is designed to ensure transparency and compliance with data protection laws in both the UK and EU. It provides clear information on how BambooIQ Ltd. processes personal data, especially sensitive information, and outlines the rights of individuals under the GDPR.