Privacy Policy

1. Who we are

Incling Limited (company number 08539529), 4th Floor, 86-90 Paul Street, London EC2A 4NE ("incling", "we", "us") is the controller of personal data collected through https://incling.com (the "Website"). We are registered with the UK Information Commission under number ZA023066.

This policy covers visitors to the Website and people who contact us or request a demo. If you take part in research on our platform, the participant privacy notice shown when you join applies instead. If you are a client, our client agreement also applies.

Contact for privacy questions: datasecurity@incling.com, or post to "Data Protection, Incling Limited" at the address above.

2. What we collect

We do not knowingly collect personal data from children. The Website is intended for business users.

Our web servers also keep standard logs (IP address, date and time, and pages requested) for security and troubleshooting.

You do not have to give us any information. If you don't, we may not be able to reply to your enquiry or arrange a demo.

Please do not send us sensitive information, such as details of health, ethnic origin, religion or political views, through the Website. We do not ask for it.

3. How we use it and our legal basis

We do not use your personal data for automated decision-making that has legal or similarly significant effects on you.

4. Who we share it with

We do not sell your personal data. We share it only with:

• Service providers who process it on our behalf under contract: Pipedrive (CRM), Google Workspace (email), Amazon Web Services (sending contact form emails), Google reCAPTCHA (protecting the contact form from spam), Google Analytics and Google Tag Manager (analytics), and our website hosting provider Digital Ocean.
• Advertising partners Google (Google Ads) and Meta, only if you accept marketing cookies. They use the data under their own privacy policies.
• YouTube, which plays the videos embedded on our webinar pages.
• Professional advisers such as lawyers and accountants.
• Regulators, courts and law enforcement where the law requires it.
• A buyer or successor if we sell, merge or restructure all or part of our business, who must protect your data in line with this policy.

5. International transfers

Our Website is hosted in the UK. Some service providers, such as Pipedrive, Google, Amazon Web Services and Meta, may process data outside the UK and EEA, including in the United States. When we transfer data, we use a lawful transfer mechanism: a country covered by UK or EU adequacy regulations (including the UK-US data bridge and the EU-US Data Privacy Framework for certified US companies), or the UK International Data Transfer Agreement or Addendum and the EU Standard Contractual Clauses. Contact us for details.

6. How long we keep it

7. Security

We use appropriate technical and organisational measures to protect personal data, including TLS encryption in transit, access controls and staff confidentiality obligations. No internet transmission is fully secure, but we work to keep your data safe and will notify you and the regulator of a breach where the law requires.

8. Your rights (UK and EU)

You have the right to:

• access a copy of your personal data;
• correct inaccurate data;
• erase your data;
• restrict our use of it;
• receive it in a portable format;
• object to processing based on legitimate interests, and to object at any time to direct marketing;
• withdraw consent at any time, where we rely on consent.

To exercise any right, email datasecurity@incling.com. We will respond within one month. We may ask you to confirm your identity.

Please tell us if your details change so our records stay accurate.

Some rights have limits, for example where meeting a request would reveal someone else's personal data, or where the law requires us to keep the data. If we cannot meet a request, we will explain why. Requests are free, but we may charge a reasonable fee or refuse a request that is manifestly unfounded or excessive.

9. Complaints

If you are unhappy with how we handle your personal data, please tell us first so we can put it right. You can complain by emailing datasecurity@incling.com. We will acknowledge your complaint within 30 days and tell you the outcome without undue delay.

You can also complain to the UK Information Commission (ico.org.uk) or, in the EU, to the data protection authority where you live or work.

10. US residents

If a US state privacy law applies to us, residents of that state (including California) may have the right to: know what personal information we collect, use and disclose; access, correct and delete it; and opt out of the "sale" or "sharing" of personal information for cross-context behavioural advertising, or of targeted advertising and profiling.

In the past 12 months we have collected the categories described in section 2 (identifiers, professional information, internet activity and approximate location) for the purposes in section 3, and disclosed them to the service providers in section 4. We do not sell personal information. If you accept marketing cookies, Google and Meta receive information about your activity on the Website, which some US state laws treat as "sharing" for cross-context behavioural advertising. Marketing cookies are off until you accept them, and you can withdraw your consent at any time through "Cookie settings" in the footer. We do not collect sensitive personal information to infer characteristics.

To make a request, email datasecurity@incling.com. You may use an authorised agent. We will verify your request and will not discriminate against you for using your rights. If we refuse your request you may appeal by replying to our decision.

California residents may also ask whether we shared personal information with third parties for their own direct marketing in the previous calendar year. We do not share it for that purpose.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If changes are significant, we will highlight them on the Website or tell you directly where appropriate.