Privacy Policy

The Xarista Privacy Policy was last updated on 15 February 2019.
How we use your personal information

This privacy policy relates to the service provided by Xarista Ltd. Xarista allows users to set up a preference profile and use this preference profile when browsing partnering online websites.

Our commitment to protecting your personal information

Whenever you provide personal information to a third party, that party is legally obliged to use your information in line with data protection law.

We take the security of your personal information seriously. We’ve set up security measures, policies and procedures such as:

However no software or application can be completely secure. If you have any concerns that your account could have been compromised (for example, someone could have discovered your password), please follow the instructions on our help and support page.

This privacy policy explains the following:

The Xarista services and who we are

Xarista allows you to:

The key organisations involved in Xarista and their respective roles are as follows:

Xarista Ltd

Xarista Ltd was incorporated in 2018.

Our goal is to create relevant online experiences for users (individuals), in collaboration with online companies.

Find out more on the Xarista website

Xarista is responsible for managing:

For any queries relating to the functionality of the Xarista service, please contact hello@xarista.io.

Third-party online companies

Xarista Ltd is partnering with third-party online companies.

As part of the Xarista service, users can define if they want to / do not want to use Xarista on specific third-party websites.

The third-party online companies are responsible for deciding what information they capture about users visiting their websites.

Personal data

The organisation that is the controller or processor of your personal data will depend on the service to which it relates for example:

Providing and managing the Xarista service

Xarista Ltd describes what services is provided via Xarista. Xarista Ltd describes what personal data is required to provide and manage the Xarista service, for example user registration details. Xarista Ltd manages this data.

Using the services provided by Xarista

The table below lists different situations and which organisation(s) control the personal data in each situation. To find out more about the information falling within each of the below categories, please see the section “What information we collect about you”.

Category of information Data controller(s) Data processor
Xarista mailing list membership(s) Xarista Ltd Contracted bulk emailing and list management service provider
Xarista customer support / service desk information Xarista Ltd N/A
Feedback & surveys Xarista Ltd N/A
Xarista login account information Xarista Ltd N/A
Your data sharing preferences Xarista Ltd N/A
Information inputted into or shared with xarista.io (e.g. user profile information) Xarista Ltd Xarista Ltd; third-party online companies

What information we collect about you

The information processed for the purposes of Xarista can be split into a number of different categories.

Details of the information and personal data falling within each of the categories where Xarista is the controller are set out below.

Please note, Xarista does currently not use cookies to track or store information about you.

Category of information Personal data Special categories of personal data
Xarista mailing list membership(s) We contract a specialist organisation to send out bulk emails and manage our lists of email subscribers. We use only your email address and mailing preferences needed to operate this service. None
Xarista customer support / service desk information The personal data you provide if you contact customer support / the service desk; could include information about your use of the Xarista service. None
Feedback & surveys The personal data you provide if you provide feedback such as responding to one of our surveys. None
Xarista login account information If you’re a new user of Xarista, you may be asked to provide additional information, such as your email address, to set up a new Xarista login account. As a registered user, login information consisting of your email address and password will be processed to enable you to use Xarista service. Yes
Your data sharing preferences Personal data needs to be provided in order to identify you and retrieve or set your data sharing preferences. None
Information inputted into or shared with xarista.io (e.g. user profile information) Personal data will only be captured if you elect to provide it or give consent to source it on your behalf, otherwise your use of Xarista will be anonymous. None

How we use your personal data and why

The processing of your personal data is necessary to provide you with the Xarista services and ensure the functionality of Xarista works.

You won’t be able to use Xarista unless you have agreed to its Terms & Conditions and this Privacy Policy.

The organisation that is the data controller and/or data processor of your personal data will depend on the information in question.

We use organisations under contract to process your personal information. These organisations agree to keep your information secure and only use it to help them verify your identity.

We may need to share your personal information if we are required to do so by law.

Personal data for which Xarista is the controller within the scope of the Xarista services

Category of information Legal basis for using this data Retention period
Xarista mailing list membership(s) Your consent specifically provided when you opted to join a mailing list Varies depending upon which mailing list you are joining
Xarista customer support / service desk information Contract – the processing is necessary for a contract between you and Xarista, or because you have asked Xarista to take specific steps before entering into a contract 12 months
Feedback & surveys Your consent at the point of gathering feedback or taking part in a survey 12 months
Xarista login account information Your consent via acceptance of our Terms & Conditions Retained for lifetime of user relationship
Your data sharing preferences Your consent via acceptance of this Privacy Policy 12 months
Information inputted into or shared with xarista.io (e.g. user profile information) Your consent via acceptance of our Terms & Conditions Retained for lifetime of user relationship

 

Where this data is stored and processed

We only store this personal data within the UK.

In some circumstances we may use services who may process this data outside of the UK. In this instance, Xarista contractually ensures the supplier / business partner protects any personal data in line with GDPR and Xarista’s requirements. This can be done in a number of different ways, for instance by ensuring:

Your rights

Data Protection laws provide a number of rights to you. These rights are listed below.

You can exercise your rights by contacting the appropriate data controller.

If you wish to contact Xarista, please use the contact details at the bottom of this page.

The personal data Xarista holds as a controller within the scope of the Xarista services is limited to:

Your rights applicable to mailing list membership(s), service desk information, feedback & surveys are:

Points of contact for queries

Should you have any queries in relation to the use of your personal data within the Xarista services, or on Xarista generally, you should refer to the table below to find out where to direct your query.

Query Who do I contact?
Queries about the content of your Xarista profile you can view e.g. via the Xarista web interface Contact us
Queries about Xarista functionality and how to use Xarista See our help and support page
Queries about login information or issues See our help and support page
Queries about the Xarista website Contact us
Queries about your data sharing preferences Contact us

Objections and complaints about Xarista

We will investigate and attempt to resolve any data privacy objections and complaints relating to the Xarista services.

We will make every reasonable effort to allow you to exercise your rights as quickly as possible and within the timescales provided by data protection laws.

You can contact our Data Protection Office to make a complaint:

By email

enquiries@xarista.io

By post

Xarista Ltd, 80-83 Long Lane, London EC1A 9ET, UK

We ask that you try to resolve any issues with us first, although you have a right to lodge a complaint with the Information Commissioner’s Office (ICO) at any time about our processing of your personal information.

The ICO is the UK regulator for data protection and upholds information rights.

Contact the ICO

Changes to the privacy policy

The terms of our privacy policy may change from time to time. We will inform you and request your continued agreement if we make any significant changes to our Privacy Policy or Terms & Conditions.