Privacy Policy

Important information and who we are

In this privacy policy, references to "we", "us" and "our" are to "Widgit Software Ltd ". References to "our Website" or "the Website" are to widgit.com. References to "personal data" or "personal details" are to any information about an individual from which they can be identified.

We have appointed a data privacy manager who can respond to questions about this privacy policy and to any requests to exercise your legal rights. To contact the data privacy manager, email privacy@widgit.com or write to:

Privacy
Widgit Software
1st Floor, Bishops House
Artemis Drive
Tachbrook Park
Warwick
CV34 6UD
United Kingdom

For EEA Residents: You can contact us using the details above or via our EU representative by emailing eurep@widgit.com, telephoning +46 850249258 or writing to:

DPO
Olof Palmes Gata 29
4th Floor
111 12
Stockholm
Sweden

This privacy policy was last updated on the 22nd August 2024.

What information we collect and how

The information we collect via the website may include:

• Any personal details you knowingly provide us with through forms on our website, such as your name, address and telephone number.

• Your preferences and use of email subscription, recorded by emails we send you. For example, if you have selected to receive email updates on products and offers.

• Your IP Address. This is a numeric address unique to your computer that is recorded by our web server when you request any page or component on the website. This information is used to monitor usage of the website.

• 'Cookies' - data recorded by the website that allows us to recognise you and your preferred settings so that you don't need to re-enter information on return visits to the site. Such data is saved locally on your computer through the use of cookies. You can configure your browser to reject cookies or to warn you before downloading them.

Under no circumstances will we hold sensitive payment details such as your card number, expiry date or security code. All transactions are handled through our accredited payment bureau, Opayo.

The information we collect during product registration and usage:

Some of our desktop software collects anonymous usage statistics. You can turn this setting off during installation or in the program's settings after installation.

When you activate our desktop software, you can choose to provide your contact details (which may be personal information) for product registration.

Your product registration details will be kept for up to two years after update support for that version of the product ends. Your product registration details will only ever be used to identify you as the owner of the product, and only then when there is a good reason for doing so; for example, to enable you to qualify for a discount when you upgrade from a previous version of the product but did not purchase the previous version directly from Widgit.

You can access, edit, delete or request a copy of your product registration details by contacting Widgit. You can also ask us to restrict how your product registration details are processed. If you want to access, edit, delete, restrict or request a copy of your product registration details then you will need to provide your product key and some of your registration details to confirm that you are the registered product owner.

What we do with your information

Any personal data we collect will be used in accordance with the UK General Data Protection Regulation in addition to all applicable law concerning the processing of personal data and privacy. If you have opted to be kept informed of any of our products or services, we will use your email address in order to send you that information. In such a case you will always be offered the option to opt in/out of further communication.

We will only use your personal data when we have a lawful basis for doing so. Typically, we will only use your personal data for the following reasons:

• To process your order and to provide after sales service. If your order requires shipping, we may pass your details to a courier service to deliver the products you have purchased.

• If you have opted to be kept informed of any of our products or services, we will use your email address in order to send you that information. In such a case you will always be offered the option to opt in or out of further communication. We use MailChimp to process our mailing lists.

• Where it's necessary for our legitimate interests or those of a third party, and where your interests and fundamental rights do not override those interests.

• Where we need to comply with a legal or regulatory obligation.

We have categorised the data (including personal data) that we use as follows:

• Technical - your IP address, login credentials and the data sent by your browser, such as its type and version and your device's operating system.
• Activity - information about how you use the website
• Contact - email address and telephone number.
• Communication - details of your communication preferences, such as whether or not you have consented to receive marketing information.
• Financial - your payment details.
• Transaction - details about payments to and from you and details of products and services you have purchased from us.

We have categorised the purposes we use the data for as follows:

Purpose	Category of data	Lawful basis for processing, including legitimate interest
Registration and logging in - when you create or log into an account on our website	Identity, Technical, Contact, Communication	Contractual
Order processing - when you make a purchase from our website	Identity, Technical, Contact, Communication, Financial, Transaction	Contractual, Legitimate Interest (e.g. to recover a debt)
Communication - when we need to inform you about things like changes to your account on our website	Identity, Contact, Communication	Contractual, Legal Obligation, Legitimate Interest (e.g. to keep our records up to date and accurate)
Support - when we provide technical support, or need to let you know about technical issues with the website	Identity, Technical, Contact, Communication	Contractual, Legal Obligation, Legitimate Interest (e.g. provision of services and security)
Marketing - when we suggest products or services that may be of interest to you	Identity, Contact, Communication	Legitimate Interest (e.g. to develop our products and services and grow our business)
Analytics - when we use statistics and analysis to help us improve the website	Technical, Activity	Legitimate Interest (e.g. to learn how customers use the website so that we can improve and develop our services, and to inform our marketing strategy)

If we need to use your personal data for another purpose, we will try to ensure that it's compatible with the purposes described here. If it isn't completely compatible then we will notify you by updating this policy, explaining the legal basis for the new purpose.

Sharing personal data

We may need to share your personal data with one or more third parties (our "sub-processors"). We require third parties to respect the security of your personal data and to treat it with accordance to all applicable law. We do not allow third parties to use your personal data for their own purposes. We only permit third parties to process your personal data in accordance with our instructions and for the purposes we specify.

Some of the third parties that we might share your personal data with are outside the European Economic Area. When this is the case, we use written contracts to ensure that personal data has the same or similar protections that it would have in the European Economic Area.

This is a list of the third parties ("sub-processors") that we use:

• Amazon Web Services (EU)
  Widgit uses Amazon Web Services to host our website and databases.

• CloudFlare (EU)
  Widgit uses Cloudflare for content distribution, security and DNS services.

• Opayo (UK/EU)
  Widgit uses Opayo to process secure payments.

• The Education Company (UK)
  Widgit uses customer relationship management tools from The Education Company.

• Sage (UK)
  Widgit uses Sage to securely process order details and invoices.

• Vision33 (UK)
  Widgit uses Vision33 to securely transfer order details.

• MailerSend (EU)
  Widgit uses MailerSend to send emails related to user accounts.

• MailChimp (USA)
  Widgit uses MailChimp to send emails related to our products, services and general marketing.

• Microsoft (UK/EU/USA)
  Widgit uses Microsoft Office and related Microsoft services in day-to-day operations.

• ZenDesk (EU/USA)
  Widgit uses ZenDesk to manage support issues.

• Transglobal Express (UK)
  Widgit uses Transglobal Express to arrange shipping.

• Our International Partners
  Widgit products and services are sold outside the UK by our trusted international partners. If you have purchased our products or services from one of our international partners then they will be able to help with sales and support issues.

Cookies

For a list of the cookies we use, see the list at the bottom of this page. Please note that if you set your browser to disable or reject cookies, parts of the website may not be accessible or function properly.

Security

We have security measures in place to prevent your personal data from being accidentally lost, disclosed, used or accessed in an unauthorised way. We also limit access to your data to the employees and third parties that need access to it.

All Widgit staff with access to your data are subject to a duty of confidence and have been trained in privacy awareness and the handling of personal data.

Data Retention (How long we keep your personal data for)

If you have created an account on the website but have not made any purchases and have not logged in for 12 months, your account will be deleted.

For tax reasons, we are legally required to keep basic information about our customers (including Contact, Identity, Financial and Transaction data as described) for 6 years after they cease being customers.

In some circumstances you can ask us to delete your personal data (for more information, see 'Your other rights').

Your right to object

You have the right to object to processing of your personal data where we are relying on a legitimate interest (or that of a third party) and you feel that it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

Your other rights

You have certain rights under data protection laws in relation to your personal data. If you wish to exercise any of the rights described here, please contact us using the details in "Important information and who we are".

Request access to your personal data
You can ask for a copy of the personal data we hold about you to check that we are lawfully processing it.

Request correction of the personal data that we hold about you
You can ask us to correct any incomplete or inaccurate data we hold about you, although we may need to verify the accuracy of the new data you provide to us.

Request erasure of your personal data
You can ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see "Your right to object"), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with applicable law. Note that we may not always be able to comply with your request of erasure for specific legal reasons which you will be informed of, if applicable, at the time of your request.

Request restriction of processing of your personal data
You can ask us to suspend the processing of your personal data:

1. if you want us to establish the data's accuracy
2. where our use of the data is unlawful but you do not want us to erase it
3. where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims
4. when you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

Request the transfer of your personal data to you or to a third party
You can ask us to provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to information that you initially provided consent for us to use or where we used the information to perform a contract with you.

Withdraw consent at any time
If we are relying on consent to process your personal data then you can withdraw that consent at any time. This does not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

Other websites

This privacy policy relates to Widgit's websites and services. Any other websites which may be linked to by our website are subject to their own policy, which may differ from ours.

---

Cookies

What are "cookies"?

Cookies are very small text files that are stored in your browser by the websites you visit.

Cookies can be used to identify you to a website, to help it remember your preferences or to track your usage of the website so that the people who run it can give you a better service.

How widgit.com uses cookies

The Widgit website uses a number of cookies, which are described below.

Cookie	Owner	Duration	Description
AWSALBTG	widgit.com	7 days	Load balancing
AWSALBTGCORS	widgit.com	7 days	Load balancing
currency	widgit.com	30 days	Currency preferences
customer	widgit.com	Browser session	Customer login session
language	widgit.com	30 days	Language preferences
OCSESSID	widgit.com	Browser session	Visitor session
point_enabled	widgit.com	90 days	Widgit uses 'Point' to support the text on our web pages. Point is on by default. If you turn 'Point' on or off then it will use a cookie to remember your choice.

The Widgit website also uses the "ZenDesk Web Widgit" to enable visitors to chat to our support team, and YouTube for embedded videos.