Simply Do Ideas Limited - Privacy Policy

1. Introduction to this Policy

1.1.  This privacy policy (“Policy”) relates to the website at https://simplydo.co.uk and any subdomain or any such related website and/or applications associated with this website (together the “Website” or “Site” or “Platform”).

1.2.  You should read this Policy carefully as it contains important information about how we will use your Information (as defined below in Clause 4.1). In certain circumstances (see below) you will be required to indicate your consent to the processing of your Information as set out in this Policy when you first submit such Information to or through the Site. For further information about consent see Clause 5 below.

1.3.  We may update this Policy from time to time in accordance with Clause 17 below. This Policy was last updated on 31/03/2025.

2. About us

2.1.  The terms “us” or “we” refer to Simply Do Ideas Limited, the owner of the Site. We are a company registered in England and Wales under company number 09760655 whose registered office is at Innovation Centre Of Enterprise, Merlin House, Caerphilly Business Park, Van Road, Caerphilly, United Kingdom, CF83 3GS. The term “you” refers to the individual accessing and/or submitting Information to the Site.

2.2.  Our Data Protection Officer can be contacted via email on dataprotection@simplydo.co.uk.

3. Data Protection

3.1. References in this Policy to:

• 3.1.1.  “Privacy and Data Protection Requirements” means: our obligations under relevant data protection laws and legislation in the UK, for example the General Data Protection Regulation (GDPR).
• 3.1.2.  “Personal Data”, “Data Controller” and “Data Processor” and “processing” shall have the meanings given to them in the GDPR.
• 3.1.3. “Client” means our customer using our Site. For example, to host innovation challenges and other innovation activity or your own organisation that uses or subscribes to our services.

3.2. For the purposes of applicable Privacy and Data Protection Requirements, we are a Data Processor on behalf of our Client who are Data Controllers.  We are, therefore, responsible for the processing of your Personal Data on behalf of the Client in accordance with applicable Privacy and Data Protection Requirements. “Personal Data” has a legal definition but, in brief, it refers to information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier. Such information must be protected in accordance with applicable Privacy and Data Protection Requirements.

4. Information we may collect about you

4.1.  When you use the Site and/or when you otherwise deal with us we may collect the following information about you (“Information”) unless otherwise specified:

• 4.1.1. personal information including first and last name and professional details, such as your professional title and department;
• 4.1.2. professional contact information including current professional address details, such as postcode, professional email address, and/or professional phone number;

• 4.1.3. information about professional websites, and social media links;
• 4.1.4. technical information including IP address, operating system, browser type and related information regarding the device used, the length of visit and interactions;
• 4.1.5. Information obtained through our correspondence and monitoring in accordance with Clause 4.2 below; and
• 4.1.6. details of any enquiries made by you through the Site, together with details relating to subsequequent correspondence (if applicable).

4.2.  In some circumstances we may use cookies on our Site. See Clause 16 below for further information on our use of cookies.

4.3.  Occasionally we may receive information about you from other sources, for example our business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, or search information providers you connect with through the Site, or from any third-party websites and applications that integrate or communicate with the Site in relation to you. If so, we will add this information to the Information we already hold about you in order to help us carry out the activities listed in Clause 6.

5. How long we keep your Information

5.1.  Subject to Clause 5.2, unless otherwise agreed, we will keep your Information only for the purposes set out in Clause 6.1 for 12 months from the date of your last active session where the legal basis for the processing is that it is necessary for the performance of the contract between us or for longer for the purposes of keeping any accounts you hold open with us for the legitimate interest of providing our services under our contract or until consent is withdrawn (whichever is sooner).

5.2.  If required, we will be entitled to hold Information for longer periods in order to comply with our legal or regulatory obligations.

6. Legal basis for processing your information

Under applicable Privacy and Data Protection Requirements we may only process your Information if we have a “legal basis” (i.e. a legally permitted reason) for doing so. For the purposes of this Policy, our legal basis for processing your Information is set out below.

Why we will process your Information

The legal basis for which is...

• To support accounts that you sign-up for.
  This is necessary for the performance of the contract between us and our Client. Information is processed to enable us to provide services to our users and Clients.
  
• To enable higher-level account holders to identify you (for example, staff in our Client organisations to which you are interacting with may view data about you).
  This is necessary for the performance of the contract between us and our Client. Information is processed to enable us to provide services to our users and Clients.
  
• To send you company and relevant updates by email, such as news and important changes.
  This is necessary for the performance of the contract between us and our Client. Information is processed to enable us to provide services to our users and Clients.
  
• To arrange billing, and administration of services or products you purchase from us.
  This is necessary for the performance of the contract between us and our Client. Information is processed to enable us to provide services to our users and Clients.
  
• To research into usage and behaviour for improving and changing our services, including personalisation to your needs.
  This is necessary for the performance of the contract between us and our Client. Information is processed to enable us to provide services to our users and Clients.
  
• To operate, administer, maintain, provide, analyse and improve the Site and the services available to you through the Site.
  This is necessary for the performance of the contract between us and our Client. Information is processed to enable us to provide services to our users and Clients.
  
• To investigate and address any comments, queries or complaints made by you regarding the Site or our services, and any similar or related comments, queries or complaints from other users.
  This is necessary for the performance of the contract between us and our Client. Information is processed to enable us to provide services to our users and Clients.
  
• To ensure that content from the Site is presented in the most effective manner for you and for your device.
  This is necessary for the performance of the contract between us and our Client. Information is processed to enable us to provide services to our users and Clients.
  
• To allow you to participate in interactive features of the Site, including inputting information.
  This is necessary for the performance of the contract between us and our Client. Information is processed to enable us to provide services to our users and Clients.
  
• To notify you about changes to the Site.
  This is necessary for the performance of the contract between us and our Client. Information is processed to enable us to provide services to our users and Clients.
  
• Where required by (but not limited to) any request or order from law enforcement agencies and/or HMRC in connection with any investigation to help prevent unlawful activity.
  This is necessary to comply with our legal obligations, including obligations relating to the protection of Personal Data.
  
• To contact you for marketing purposes (see 'Marketing and opting out' in Clause 8 below).
  We may contact you via post, email address, or phone number, used for your work or professional activity, based on our legitimate interest to do so.
  
• To disclose your information to selected third parties as permitted by this Policy (see Clause 7 below).
  This processing is subject to your continued consent to the processing of your data for that specific purpose (see 'Marketing and opting out' in Clause 8 below).

7. Your consent to processing

7.1.  As noted above, you will be required to give consent to certain processing activities before we can process your Information as set out in this Policy. Where applicable, we will seek this consent from you when you first submit Information to or through the Site.

7.2. If you have previously given consent you may freely withdraw such consent at any time. You can do this through updating or deleting your account on the Site or by notifying us in writing.

7.3. If you withdraw your consent, and if we do not have another legal basis for processing your information, then we will stop processing your Information. If we do have another legal basis for processing your information then we may continue to do so subject to your legal rights (for which see Clause 14 below).

7.4.  Please note that if we need to process your Information in order to operate the Site and/or provide our services, and you object or do not consent to us processing your Information, the Site and/or those services may not be available to you.

8. Marketing and opting out

8.1.  Where you have previously ordered or enquired about products or services from us we may contact you by your professional email about similar or related products, services and offers that may be of interest to you. If you prefer not to receive any direct marketing communications from us, or you no longer wish to receive them, you can opt out at any time (see below).

8.2.  If we feel it is relevant, we may contact you by your professional telephone and email to provide information about products, services, offers and other information we think may be of interest to you. If you would rather not receive such information from us, or you no longer wish to receive it, you can opt out at any time (see below).

8.3.  If you wish to exercise this right to stop processing your information for marketing purposes, you should contact us by sending an email the address in Clause 2, or contact the relevant Client Data Controller using their given contact details, giving us or them enough information to identify you and deal with your request. Alternatively, you can follow the unsubscribe instructions in emails you receive.

9. Disclosure of your Information

9.1.  Unless otherwise agreed, we may disclose your Information (including Personal Data):

• 9.1.1. to other companies within our group of companies (which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006);
• 9.1.2. to our service providers or third-party contractors, such as (but not limited to) Hubspot, Hunter, Amazon Web Services, Microsoft, and Google to enable them to undertake services for us and/or on our behalf (and we will ensure they have appropriate measures in place to protect your Information);
• 9.1.3. to any prospective buyer or seller (and their representatives) in the event that we sell or buy any business or assets;
• 9.1.4. if we are under a duty to disclose or share Personal Data in order to comply with any legal obligation, including (but not limited to) any request or order from law enforcement agencies and/or HMRC in connection with any investigation to help prevent unlawful activity; and
• 9.1.5. to other third parties only if you have specifically consented to us doing so.

9.2.  We may disclose aggregated, anonymous information (i.e. information from which you cannot be personally identified), or insights based on such anonymous information, to selected third parties, including (without limitation) analytics and search engine providers to assist us in the improvement and optimisation of the Site. In such circumstances we do not disclose any information which can identify any individual personally.

10. Keeping your Information secure

10.1.  We will use technical and organisational measures in accordance with industry best practice to safeguard your Information, including the use of passwords, multi-factor authentication (wherever possible), antivirus and antimalware software, and data encryption.

10.2.  While we will use all reasonable efforts to safeguard your Information, you acknowledge that the general use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any Information that is transferred from you or to you via the internet.

11. Monitoring

We may monitor and record communications with you (e.g. emails) for the purposes of provision of services, quality assurance, training, fraud prevention and compliance purposes. Any information that we receive through such monitoring and communication will be added to the information we already hold about you and may also be used for the purposes listed in Clause 6.1 above.

12. Overseas transfers

12.1.  The Site data is hosted by Amazon Web Services at a datacentre based in London, UK. However, unless otherwise agreed, we may from time to time need to transfer your Information to countries outside the European Economic Area, which comprises the EU member states plus Norway, Iceland and Liechtenstein (“EEA”). Non-EEA countries that we may need to transfer your Information to include:

• 12.1.1. USA, because some of our service providers may be based there.

12.2.  Such countries may not have similar protections in place regarding protection and use of your data as those set out in this Policy. Therefore, if we do transfer your Information to countries outside the EEA we will take reasonable steps in accordance with applicable Privacy and Data Protection Requirements to ensure protections, as may be required by law for that jurisdiction, are in place to ensure the security of your Information

12.3.  By submitting your Information to us in accordance with this Policy you consent to these transfers for the purposes specified in this Policy.

12.4.  In some organisational use cases, the data will be required to remain in the UK (i.e. data sovereignty). In these use cases, any service providers requiring data to leave the UK will be disabled.

13. Information about other individuals

If you give us information on behalf of a third party, you confirm that the third party has appointed you to act on his/her/their behalf and has agreed that you can: give consent on his/her/their behalf to the processing of his/her/their Information; receive on his/her/their behalf any data protection notices; and give consent to the transfer of his/her/their Information abroad (if applicable).

14. Your rights

14.1.  If you are an individual, this section sets out your legal rights in respect of any of your Personal Data that we are holding and/or processing. If you wish to exercise any of your legal rights you should put your request in writing to us (using our contact details in Clause 2) giving us enough information to identify you and respond to your request.

14.2.  You have the right to request access to information about Personal Data that we may hold and/or process about you, including: whether or not we are holding and/or processing your Personal Data; the extent of the Personal Data we are holding; and the purposes and extent of the processing.

14.3.  You have the right to have any inaccurate information we hold about you be corrected and/or updated. If any of the Information that you have provided changes, or if you become aware of any inaccuracies in such Information, please let us know in writing giving us enough information to deal with the change or correction.

14.4.  You have the right in certain circumstances to request that we delete all Personal Data we hold about you (the ‘right of erasure’). Please note that this right of erasure is not available in all circumstances, for example where we need to retain the Personal Data for legal compliance purposes. If this is the case, we will let you know.

14.5.  You have the right in certain circumstances to request that we restrict the processing of your Personal Data, for example where the Personal Data is inaccurate or where you have objected to the processing.

14.6.  You have the right to request a copy of the Personal Data we hold about you and to have it provided in a structured format suitable for you to be able to transfer it (the ‘right to data portability’). Please note that the right to data portability is only available in some circumstances, for example where the processing is carried out by automated means. If you request the right to data portability and it is not available to you, we will let you know.

14.7.  You have the right in certain circumstances to object to the processing of your Personal Data. If so, we shall stop processing your Personal Data unless we can demonstrate sufficient and compelling legitimate grounds for continuing the processing which override your own interests. If, as a result of your circumstances, you do not have the right to object to such processing then we will let you know.

14.8.  We do not use automated processing for the purpose of profiling or decision making, but if we did, you would have the right in certain circumstances not to be subject to a decision based solely on automated processing, for example where a computer algorithm (rather than a person) makes decisions which affect your contractual rights. Please note that this right is not available in all circumstances. If you request this right and it is not available to you, we would let you know.

14.9.  You have the right to object to direct marketing, for which see Clause 8 above.

15. Complaints

We’d really appreciate it if you could raise, in the first instance, any concerns that you have directly with ourselves. If we are unable to resolve any such matter and you still have any concerns about how we collect or process your Information then you also have the right to lodge a complaint with a supervisory authority, which for the UK is the UK Information Commissioner’s Office (“ICO”). Complaints can be submitted to the ICO through the ICO helpline by calling 0303 123 1113. Further information about reporting concerns to the ICO is available at https://ico.org.uk/concerns/.

16. ‘Cookies’ and related software

16.1.  Our software may issue ‘cookies’ (small text files) to your device when you access and use the Site and you will be asked to consent to this at the time (e.g. when you first visit our Site). Cookies do not affect your privacy and security since a cookie cannot read data off your system or read cookie files created by other sites.

16.2.  Our Site uses cookies and other tracking and monitoring software to: distinguish our users from one another; collect standard Internet log information; and to collect visitor behaviour information. The information is used to track user interactions with the Site and allows us to provide you with a good experience when you access the Site, helps us to improve our Site, and allows us to compile statistical reports on Site visitors and Site activity.

16.3.  You can set your system not to accept cookies if you wish (for example by changing your browser settings so cookies are not accepted), however please note that some of our Site features may not function if you remove cookies from your system.

17. Changes to this Policy

We keep this Policy under regular review and may change it from time to time. If we change this Policy we will post the changes on this page, and place notices on other pages of the Site as applicable, so that you may be aware of the Information we collect and how we use it at all times. You are responsible for ensuring that you are aware of the most recent version of this Policy as it will apply each time you access the Site.

18. Links to other websites

18.1.  Our Site may contain links to other websites. This Policy only applies to our Site. If you access links to other websites any Information you provide to them will be subject to the privacy policies of those other websites.

18.2.  We have no control over third party websites or systems and accept no legal responsibility for any content, material or information contained in them. Your use of third party sites or systems will be governed by the terms and conditions of that third party. It is your responsibility to ensure you are happy with such third-party terms and conditions.

18.3.  The display of any hyperlink and/or reference to any third-party website, system, product or service does not mean that we endorse that third party's website, products or services and any reliance you place on such hyperlink, reference or advert is done at your own risk.

19. Accessibility

This Policy aims to provide you with all relevant details about how we process your Information in a concise, transparent, intelligible and easily accessible form, using clear and plain language. If you have any difficulty in reading or understanding this Policy, or if you would like this Policy in another format (for example audio, large print or braille), please get in touch with us.

20. Contact us

We welcome your feedback and questions on this Policy. If you wish to contact us, please email our Data Protection Officer at the email address in Clause 2.