How we use your personal information
Our commitment to protecting your personal information
Whenever you provide personal information to a third party, that party is legally obliged to use your information in line with data protection law.
We take the security of your personal information seriously. We’ve set up security measures, policies and procedures such as:
However no software or application can be completely secure. If you have any concerns that your account could have been compromised (for example, someone could have discovered your password), please follow the instructions on our help and support page.
The Xarista services and who we are
Xarista allows you to:
The key organisations involved in Xarista and their respective roles are as follows:
Xarista Ltd was incorporated in 2018.
Our goal is to create relevant online experiences for users (individuals), in collaboration with online companies.
Xarista is responsible for managing:
For any queries relating to the functionality of the Xarista service, please contact firstname.lastname@example.org.
Third-party online companies
Xarista Ltd is partnering with third-party online companies.
As part of the Xarista service, users can define if they want to / do not want to use Xarista on specific third-party websites.
The third-party online companies are responsible for deciding what information they capture about users visiting their websites.
The organisation that is the controller or processor of your personal data will depend on the service to which it relates for example:
Providing and managing the Xarista service
Xarista Ltd describes what services is provided via Xarista. Xarista Ltd describes what personal data is required to provide and manage the Xarista service, for example user registration details. Xarista Ltd manages this data.
Using the services provided by Xarista
The table below lists different situations and which organisation(s) control the personal data in each situation. To find out more about the information falling within each of the below categories, please see the section “What information we collect about you”.
|Category of information||Data controller(s)||Data processor|
|Xarista mailing list membership(s)||Xarista Ltd||Contracted bulk emailing and list management service provider|
|Xarista customer support / service desk information||Xarista Ltd||N/A|
|Feedback & surveys||Xarista Ltd||N/A|
|Xarista login account information||Xarista Ltd||N/A|
|Your data sharing preferences||Xarista Ltd||N/A|
|Information inputted into or shared with xarista.io (e.g. user profile information)||Xarista Ltd||Xarista Ltd; third-party online companies|
What information we collect about you
The information processed for the purposes of Xarista can be split into a number of different categories.
Details of the information and personal data falling within each of the categories where Xarista is the controller are set out below.
|Category of information||Personal data||Special categories of personal data|
|Xarista mailing list membership(s)||We contract a specialist organisation to send out bulk emails and manage our lists of email subscribers. We use only your email address and mailing preferences needed to operate this service.||None|
|Xarista customer support / service desk information||The personal data you provide if you contact customer support / the service desk; could include information about your use of the Xarista service.||None|
|Feedback & surveys||The personal data you provide if you provide feedback such as responding to one of our surveys.||None|
|Xarista login account information||If you’re a new user of Xarista, you may be asked to provide additional information, such as your email address, to set up a new Xarista login account. As a registered user, login information consisting of your email address and password will be processed to enable you to use Xarista service.||Yes|
|Your data sharing preferences||Personal data needs to be provided in order to identify you and retrieve or set your data sharing preferences.||None|
|Information inputted into or shared with xarista.io (e.g. user profile information)||Personal data will only be captured if you elect to provide it or give consent to source it on your behalf, otherwise your use of Xarista will be anonymous.||None|
How we use your personal data and why
The processing of your personal data is necessary to provide you with the Xarista services and ensure the functionality of Xarista works.
The organisation that is the data controller and/or data processor of your personal data will depend on the information in question.
We use organisations under contract to process your personal information. These organisations agree to keep your information secure and only use it to help them verify your identity.
We may need to share your personal information if we are required to do so by law.
Personal data for which Xarista is the controller within the scope of the Xarista services
|Category of information||Legal basis for using this data||Retention period|
|Xarista mailing list membership(s)||Your consent specifically provided when you opted to join a mailing list||Varies depending upon which mailing list you are joining|
|Xarista customer support / service desk information||Contract – the processing is necessary for a contract between you and Xarista, or because you have asked Xarista to take specific steps before entering into a contract||12 months|
|Feedback & surveys||Your consent at the point of gathering feedback or taking part in a survey||12 months|
|Xarista login account information||Your consent via acceptance of our Terms & Conditions||Retained for lifetime of user relationship|
|Information inputted into or shared with xarista.io (e.g. user profile information)||Your consent via acceptance of our Terms & Conditions||Retained for lifetime of user relationship|
Where this data is stored and processed
We only store this personal data within the UK.
In some circumstances we may use services who may process this data outside of the UK. In this instance, Xarista contractually ensures the supplier / business partner protects any personal data in line with GDPR and Xarista’s requirements. This can be done in a number of different ways, for instance by ensuring:
Data Protection laws provide a number of rights to you. These rights are listed below.
You can exercise your rights by contacting the appropriate data controller.
If you wish to contact Xarista, please use the contact details at the bottom of this page.
The personal data Xarista holds as a controller within the scope of the Xarista services is limited to:
Your rights applicable to mailing list membership(s), service desk information, feedback & surveys are:
Points of contact for queries
Should you have any queries in relation to the use of your personal data within the Xarista services, or on Xarista generally, you should refer to the table below to find out where to direct your query.
|Query||Who do I contact?|
|Queries about the content of your Xarista profile you can view e.g. via the Xarista web interface||Contact us|
|Queries about Xarista functionality and how to use Xarista||See our help and support page|
|Queries about login information or issues||See our help and support page|
|Queries about the Xarista website||Contact us|
|Queries about your data sharing preferences||Contact us|
Objections and complaints about Xarista
We will investigate and attempt to resolve any data privacy objections and complaints relating to the Xarista services.
We will make every reasonable effort to allow you to exercise your rights as quickly as possible and within the timescales provided by data protection laws.
You can contact our Data Protection Office to make a complaint:
Xarista Ltd, 80-83 Long Lane, London EC1A 9ET, UK
We ask that you try to resolve any issues with us first, although you have a right to lodge a complaint with the Information Commissioner’s Office (ICO) at any time about our processing of your personal information.
The ICO is the UK regulator for data protection and upholds information rights.