This is a communication issued by Thesiad Limited (“Thesiad”), a company incorporated in England and Wales with registered number 16497805, whose registered office is at 128 City Road, London, EC1V 2NX.
This website (the “Site”) means thesiad.ai, staging.thesiad.ai and the pages they serve, and this Statement also covers how our products, Scout (app.scout.thesiad.ai) and Mitos (app.thesiad.ai), process personal data — see “Our products” below. Terms defined in the Terms and Conditions governing use of this Site are adopted in this Statement (defined below). For Data Protection purposes, Thesiad is the Controller and responsible for your personal data. Personal Data means any information about an individual from which that person can be identified. If you have any questions about this Privacy Policy please contact us using the information set out below.
This Privacy Policy Statement (the “Statement”) shall be governed by and construed in accordance with the law of England and Wales.
Thesiad is committed to protecting the security of your personal information in accordance with the General Data Protection Regulation ((EU) 2016/679) as it forms part of the law of England and Wales (“UK GDPR”) and the Data Protection Act 2018 (“DPA 2018”).
Thesiad recognises that in using the contact form on this Site you may be required to entrust important personal information to us, and we wish to assure you that we take seriously our responsibilities in protecting and safeguarding this information. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
This Statement may be updated at any time.
We will retain, where applicable, your personal information in accordance with the relevant data protection laws for so long as it is needed. We will review not less than annually whether or not personal information held by us is still needed and, if not, we will permanently delete it. To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
By using this Site you agree and consent to the processing, disclosure and transfer (and international transfer, where applicable, including outside the EEA (as defined below)) of your personal data by Thesiad for the purposes set out in this Statement.
Please read the Terms and Conditions of Website Use together with this Statement carefully before using this Site. The Cookie Policy referred to in the Terms and Conditions is the “Cookies” section of this Statement. These Terms and Conditions set forth the legally binding terms and conditions that govern your access to and use of this Site. If you wish to access or browse the remainder of this Site, then you are reminded that by doing so you will bring into existence a binding legal agreement accepting the Terms and Conditions and this Statement on your own behalf and, where applicable, on behalf of any client or other person that you represent, act as agent for and/or are associated with.
Information We May Collect
We may collect information about you when you use this Site or when you contact Thesiad or enter into commercial or other relations with Thesiad. In particular, we may collect and process information you give us by filling in forms on our Site or by corresponding with us by phone, e-mail or otherwise. The information you give us may include your name, e-mail address, company, title or position, phone number, the answers you give to the questions on our contact form, personal description and financial information (such as to establish your status as a person or entity at whom this Site is targeted); usage data relating to this Site; marketing and communications data and preferences, etc. We may also automatically collect technical information, including your IP address, and information about your visit to the Site, such as pages you viewed or searched for, page interaction information and any phone number or email address used to contact us. We may also collect, use and share aggregated data which does not reveal your identity, for instance to analyse use of this Site, how we interact with users and to help improve this Site and its functionality.
Submissions made through our contact form are delivered to us by e-mail (to info@thesiad.ai) through a service hosted on Microsoft Azure in the UK. Where the form displays an anti-spam check, that check is provided by Cloudflare and processes your IP address and browser information to distinguish people from automated traffic.
We are legally required to have a legal basis for collecting and using your personal data and the following are among the legal bases we rely on: to identify you; where it is necessary for compliance with a legal obligation that we are subject to (we will identify the relevant legal obligation when we rely on this legal basis); where we have obtained your active agreement to use your personal data for a specified purpose, for example if you subscribe to an email newsletter; and for legitimate interests, which means we may use your personal data where it is necessary to conduct our business and pursue our legitimate interests, for example to respond to your enquiry, to prevent fraud and to enable us to give you the best and most secure customer experience. We will make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests. We will not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
In the absence of your prior consent we will not send you direct marketing communications, or share your personal information with any third party for marketing purposes, or if you have withdrawn your consent.
Our products
Scout and Mitos produce due diligence reports for our users. To do so they process information about companies and the people connected with them drawn from public registers and public sources — including Companies House, the FCA Register, The Gazette, the Charity Commission, the Disqualified Directors Register and news and adverse-media sources — together with any documents a user chooses to upload. Personal data within that information (for example the names, roles and appointment histories of directors, officers and persons with significant control) is processed for the purpose of providing those reports, under our legitimate interests in operating a due diligence service and on our users’ instructions. Public-register information is reproduced under the Open Government Licence where it applies.
Account data for product users (name, work e-mail, organisation, and records of use) is processed to provide and secure the service under the Terms of Use accepted in the app. Product data is held on Microsoft Azure infrastructure in the United Kingdom and the European Union, encrypted in transit and at rest, and is never used to train AI models. Where a user uploads documents containing third-party personal data, the user is responsible for having a lawful basis to do so; Thesiad processes such data only to provide the service to that user.
If you believe a report contains personal data about you and wish to exercise your rights, contact us at info@thesiad.ai.
LinkedIn and Similar Social Networks
The Thesiad website may offer the opportunity to “connect” website content via the social network LinkedIn or similar social networks. Social networks such as this almost always use cookies. If you are a member of LinkedIn or such other social network and do not want the social network cookies to be placed on your system, we suggest that you refrain from using such sharing tools.
Cookies
Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work, improve efficiency, and provide information to the website owner.
We use Google Analytics to understand how visitors interact with our website. These cookies collect information such as: pages visited; time spent on the site; how users arrived at the site. This information is aggregated and anonymised and is used solely to improve the performance and usability of our website. We do not use this information to identify individual users.
Under UK data protection law, we rely on your consent to place analytics cookies on your device. Analytics cookies are only set after you have provided consent via our cookie banner. Until you choose, no analytics cookie is set. Your choice is remembered in your browser so that we do not ask again.
Managing your cookie preferences
You can accept or reject analytics cookies via our cookie banner and/or your browser settings, and change or withdraw your consent at any time by clearing this site’s data in your browser, after which the banner will ask again.
Most browsers allow you to block or delete cookies. Please note that blocking cookies may affect how our website functions. You can also opt out of Google Analytics tracking across all websites by installing the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
Third-party cookies
Google Analytics cookies are set by Google LLC. Further information about how Google processes data can be found in Google’s Privacy Policy: https://policies.google.com/privacy
Updates to cookie policy
We may update this Cookie Policy from time to time to reflect changes in law or how we use cookies. Any updates will be posted on this page.
Security of Data Transfers
Please note that data that is transported over an open network, such as the Internet or e-mail, may be accessible to anybody. Thesiad cannot guarantee the confidentiality of any communication or material transmitted via such open networks. When disclosing any personal information via an open network, you should remain mindful of the fact that it is potentially accessible to others, and consequently, can be collected and used by others without your consent. Your data may be lost during transmission or may be accessed by unauthorised parties. Thesiad does not accept any liability for direct or indirect losses as regards the security of your data during its transfer via the Internet. Please use other means of communication if you think this is necessary or prudent for security reasons.
Transferring data outside of the EEA
Your personal information may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”) and may also be processed by staff operating outside the EEA who work for us, or for one of our service providers.
When we, or our permitted third parties, transfer your information outside the European Economic Area, we or they will impose contractual obligations on the recipients of that data to protect your information to the standard required in the European Economic Area. We or they may also require the recipient to subscribe to international frameworks intended to enable secure data sharing. In the case of transfers by us, we may also transfer your information where: (i) the transfer is to a country deemed by the European Commission to provide adequate protection of your information; or (ii) where you have consented to the transfer.
Protection, Processing and Use of Personal Data
We maintain physical, electronic and procedural safeguards, including (where appropriate and applicable) firewalls, individual passwords and encryption and authentication technology for any personal information that we might collect through the Site. We may share your personal information with our sub-contractors or any member of our group, which means, from time to time, our subsidiaries, any ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006. This may result in your personal data being transferred to a group office in the USA. If we do this we will use specific standard contractual terms approved for use in the UK which give the transferred personal data the same protection as it has in the UK, namely the International Data Transfer Agreement. To obtain a copy of these contractual safeguards, please contact us at info@thesiad.ai.
We do not use your personal information collected through the Site for purposes other than as set out above, or disclose to any third party any such personal information, except with prior consent or as otherwise permitted or required by law.
We have in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
You have the legal right to access personal information held about you and how we process it. You have the right to request corrections of that data, erasure of that data in certain circumstances or you may (among other rights) be able to object to the processing of your personal data where we are relying on a legitimate interest as the legal basis for doing so. Your legal rights of access can be exercised in accordance with the UK GDPR and DPA 2018. A first access request will be free; further requests may be subject to a fee to meet our costs in providing you with details of the information we hold about you. That fee will depend on the nature, scope and frequency of access requests made by a person. If you have concerns about how we process your personal data, you have the right to make a complaint to the Information Commissioner at https://ico.org.uk/make-a-complaint.
Contacting Us
Please do not hesitate to contact us regarding any matter relating to this Privacy Policy at info@thesiad.ai.