GDPR

Primority Ltd is committed to ensuring that your privacy is protected. This page explains your rights under UK data protection law and how to use them. Full details of what we collect and why are in our Privacy Policy.

Who We Are

Primority Ltd, company registration number SC389943. Registered office: Westpoint, 4 Redheughs Rigg, South Gyle, Edinburgh, EH12 9DQ.

Registered with the Information Commissioner's Office (ICO), registration reference ZB178361.

Our privacy contact is connect@primority.com.

A Business-to-Business Company

We are a business-to-business organization and do not hold information on consumers or private individuals, other than those communicating with us in a business-to-business context.

Controller and Processor

Primority Ltd is the data controller for website, enquiry and customer account data collected via the website. For Customer Personal Data stored in the Primority platform, the customer is the controller and Primority is the processor. The data processing terms required by Article 28 of the UK GDPR sit in our SaaS subscription agreement (clause 7 and Schedule 4).

What We Collect and Why

We may collect your name and job title, contact information including your email address, information relevant to customer surveys or offers, and your public IP address. We use this to understand your needs, provide a better service, keep internal records and improve our products and services. See the Privacy Policy for the full list.

For website and sales data, we rely on the following lawful bases: contract, or steps toward a contract, for demos and sales; legitimate interests for improving the service; and consent for marketing.

Your Rights

Under the UK GDPR you have the right to:

• Be informed about how your personal data is collected and used.
• Access your personal data and receive a copy of it.
• Rectification, so that inaccurate or incomplete data is corrected.
• Erasure of your personal data in certain circumstances.
• Restrict processing of your personal data in certain circumstances.
• Data portability, to receive data you gave us in a structured, commonly used, machine-readable format.
• Object to processing, including an absolute right to object to direct marketing.
• Rights relating to automated decision-making and profiling.

You can opt out of our emails and communications at any time.

How to Make a Request

Email connect@primority.com. We will always comply with requests to remove you from our records. If any information we hold about you is incorrect or incomplete, we will promptly correct it.

For requests sent to Primority as controller (website or enquiry data), we will respond without undue delay, and within one month. As processor, we notify the customer of a data-subject request within 5 business days.

Your Data in the Primority Platform

Your records are always your data to keep. You can export any data out of Primority at any time, but if you decide the system is not for you and want to leave, we'll work with you to give you a bulk export of data in the structure you need.

How Long We Keep Data

We keep personal data only for as long as we need it.

• Website and sales enquiries: we keep these for 2 years after our last contact with you.
• Customer account and contract records: we keep these for as long as we need to meet our legal, tax and accounting obligations, including HM Revenue & Customs (HMRC) record keeping requirements.
• Platform data at the end of a contract: you can export your data at any time. When your contract ends, you have 30 days to request a full export, and we will work with you to provide a bulk export in the structure you need. Your platform data is then permanently deleted within 30 days of that export window closing.

• Backup copies: we keep backup copies for a minimum of 30 days to support any request for a full export. Additional time may be given if it is requested in advance and agreed by Primority.

Hosting and Transfers

Hosting is Microsoft Azure. Locations are customer specific. Transfers of customer platform data outside the United Kingdom take place only where authorised. The listed sub-processors and locations are those authorised in the SaaS agreement.

Personal Data Breaches

As processor, we notify the customer of a personal data breach without undue delay and within 48 hours.

Sub-Processors

• Microsoft (Microsoft Azure): cloud hosting of the platform. Location: EU/UK.
• Anthropic (Claude): optional AI features. Location: Global. Covered by Anthropic's DPA, including EU SCCs and the UK IDTA.
• DeepL: translation. Location: EU (Germany).
• OpenAI: optional AI features. Location: EU/UK.

Sharing Your Information

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so.

Complaints

If you are unhappy with how we have used your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Questions about your data? Email us at connect@primority.com.