Announcing Cradle-7.7 - start your free trial here

Privacy

 

Last Updated: July 2024.

Please read this privacy notice (“Privacy Notice”) carefully as it describes our collection, use, disclosure, retention and protection of your personal information. This Privacy Notice applies to any website, products or service which references this Privacy Notice. Where you provide us with or we collect your personal information in any of the ways described in section 3 below, you agree that we may collect, store and use it: (a) in order to perform our contractual obligation to you; (b) based on our legitimate interests for processing; or (c) based on your consent, which you may withdraw at any time, as described in the Privacy Notice.

References in this Privacy Notice to GDPR will include any UK GDPR created by the UK Data Protection Act 2018 on the UK’s exit from the European Union.

1 About 3SL

Our contact details are:

Name: Structured Software Systems Ltd (3SL)
Address: College House, Howard Street, Barrow-in-Furness, Cumbria, LA14 1NB
Phone Number: 01229-838867
Email: privacy@threesl.com
Website: www.threesl.com
Registration: Registered in England and Wales, registered number 2153654

3SL may contact you by any of the following (but not limited to) post, messaging, telephone, email or social media with details of our products, services and promotions. All of our newsletter and marketing correspondence includes an unsubscribe option.

3SL is committed to protecting your data privacy and security. We collect personal information in order to provide our industry-leading products, services and support that you request (“Services”). The following privacy statement explains the collection, dissemination and use of your personal data. It is our policy to never share personally identifiable information to unrelated third parties.

We strongly believe in both minimising the data we collect and limiting its use and purpose to only that for which we have been given permission, as necessary to deliver the Services that you purchase, or as we might be required or permitted for legal compliance or other lawful purposes.

2 Scope of this Privacy Policy

This privacy policy applies to all personal data processed by 3SL. If you have consented to our use of information about you for a specific purpose, you have the right to change your mind at any time, but this will not affect any processing that has already taken place.

3 How we Collect Information

To the extent permissible under applicable law, we collect information about you and any other party whose details you provide to us when you:

  • Register to use our website, products or services (including evaluations); this may include your name (including company name), address, email address and telephone number. We may also ask you to provide additional information about your business and your preferences
  • Place an order (including via our website); this may include your name (including company name), address, contact (including telephone number and email address) and payment details (we do not keep credit card information)
  • Use our products, which may include the collection of metadata
  • Complete online forms (including webinar requests), take part in surveys, post any blogs, enter any competitions or prize draws, download information such as collateral or other publications or participate in any other interactive areas that appear on our website
  • Interact with us on social media
  • Respond/comment on a blog post
  • Provide your contact details to us when registering to use or accessing our website, product or services we make available or when you update those details
  • Provide your contact details to us when you attend one of our training courses or an event we hold
  • Contact us offline, for example by telephone, email or post

We will also collect your information where you only partially complete and/or abandon any information inputted into our website and/or other online forms and may use this information to contact you to remind you to complete any outstanding information and/or for marketing purposes.

3.1 Providing us with Information about Others

If you provide us with personal information about someone else, you are responsible for ensuring that you comply with any obligation and consent obligations under applicable data protection laws in relation to such disclosure. In so far as required by applicable data protection laws, you must ensure that you have provided the required notices and have obtained the individual’s explicit consent or otherwise have a legal basis to provide us with the information and that you explain to them how we collect, use, disclose and retain their personal information or direct them to read or Privacy Notice.

4 Types of Data we Collect

When you use our website you may submit information to us through our online forms. We may also collect information about you from electronic communications, letters you send to us or by phone calls (phone calls are not recorded). You may choose to give us personal information directly in a variety of situations. For example, you may want to give us your name and contact information to communicate with you, to process an order or to do business with us if you are a supplier.

4.1 Website Cookies

4.1.1 What are Cookies?

Cookies are small text files placed on your computer or device to monitor how you use a website or an app.

Different types of cookies are used to do different things. These include letting you navigate between different pages on a website efficiently, remembering preferences you have given and helping us identify ways to improve your overall site experience. Others are used to provide you with advertising which is more tailored to your interests, or to measure the number of site visits and the most popular pages users visit.

This policy sets out the types of cookies we use when you use our website.

4.1.2 Our use of Cookies

Our website may place and access certain first party cookies on your computer or device. First party cookies are those placed directly by us and are used only by us. We use cookies to facilitate and improve your experience of our site and to provide and improve our products and services. We have carefully chosen these cookies and have taken steps to ensure that your privacy and personal data is protected and respected at all times.

Our site uses analytical services provided by Google and Matomo (locally hosted by 3SL) and by Capterra.com to trace conversion rates through our site for the purpose of Capterra’s pay-per-click marketing programme. Website analytics refer to a set of tools used to collect and analyse anonymous information, enabling us to better understand how our website is used. This, in turn, enables us to improve our website and the products and services offered through it. You do not have to allow us to use these cookies, however whilst our use of them does not pose any risk to your privacy or your safe use of our website, it does enable us to continually improve our website, making it a better and more useful experience for you.

In addition to the controls that we provide, you can choose to enable or disable cookies in your internet browser. Most internet browsers also enable you to choose whether you wish to disable all cookies or only third party cookies. By default, most internet browsers accept cookies but this can be changed. If you disable cookies you may find this affects your ability to use certain parts of our website. For further details, please consult the help menu in your internet browser or the documentation that came with your device.

You can choose to delete cookies on your computer or device at any time, however you may lose any information that enables you to access our website more quickly and efficiently including, but not limited to, login and personalisation settings.

It is recommended that you keep your internet browser and operating system up-to-date and that you consult the help and guidance provided by the developer of your internet browser and manufacturer of your computer or device if you are unsure about adjusting your privacy settings.

4.2 Mailing Lists

As part of the registration process for our monthly newsletters, we collect personal information. We use that information for a number of reasons: to provide information you have requested; to contact you if we need to obtain or provide additional information; to check our records are correct and to occasionally check business feedback/performance. We do not rent or trade email lists with other organisations and businesses.

4.3 Third Parties

We collect information from our authorised distributors/business partners. Please see our Contacts page.

We also gather information from interactions with our social media suppliers.

4.4 Internet Interfaces

We maintain a small number of publically accessible IP addresses in the range 88.98.37.241 to 88.98.37.245. Our website is hosted on 88.98.37.241.

All servers behind these IP addresses are protected against intrusion attacks by a variety of methods including IP protocol restrictions, port restrictions, source IP address restrictions and others. All servers are maintained with all applicable security updates.

Some of our services are accessed over HTTPS. Our certificate is issued by Trustico for *.threesl and *.cradle.threesl. We may also log your IP address for internal analytical purposes and for abuse protection.

4.5 IP Address and Traffic Data

We keep a record of traffic data which is logged automatically by our servers, such as your Internet Protocol (IP) address, device information, the website that you visited before ours and the website you visit after leaving our site. We also collect some site, application and service statistics such as access rates, page hits and page views. We are not able to identify any individual from traffic data or site statistics.

4.6 Email

We operate a range of e-mail protection mechanisms including:

  • We reject e-mails from malicious sources using external blocklists.
  • We scan all e-mails using a variety of malware detection and other filters before they reach our network and reject or tag e-mails appropriately.
  • We maintain a whitelist of domains that we trust. This list automatically includes all customer domains.
  • For e-mails that could be allowed to reach their recipient, we divert all e-mails containing attachments that are potentially dangerous or could indicate spam. Therefore, if you send an e-mail to 3SL with attachments of any of the following types, it may not be received by your intended recipient (including but not limited to): COM BAT SCR PIF LNK VBS JS CMD ZIP EXE JPG

5 How we use your information

We will hold your information securely and use it only in compliance with the current UK data protection laws. We will use your information to provide you with product updates and any other information that you have requested. We may also use and analyse the information we collect so that we can administer, support, improve and develop our business. Further, where you have consented, we might also use your information to let you know about other services that we offer. If you change your mind about being contacted in the future, please let us know by contacting privacy@threesl.com and your details will be removed from our records.

We endeavour:

  • To keep your data safe and private
  • Not to sell your data or pass on to third parties
  • To give you ways to manage and review your marketing choices at any time

3SL uses (and, where specified, shares) your personal information for the following purposes:

  • To follow up on evaluation requests. When requesting product information or an evaluation of our software, you may be asked to provide your email address, telephone number, location, company name and whether you would like to request a webinar/demonstration. 3SL uses this personal information to send you information on how to download an evaluation of our product and to engage with you regarding product information, pricing information, order details, as well as to send you information regarding marketing related activities. By providing this information, you are agreeing that 3SL can contact you, send you important information about our products, including new product updates and releases. You may opt out of our email communication at any time by using the Unsubscribe link found at the bottom of an email or by contacting 3SL.
  • To process transactions. 3SL uses personal information such as financial, credit card and payment information to process your order and may need to share some of this information with delivery services, credit card processing companies, and other third parties to complete the transaction. Your credit card information is only used for completing the purchase transaction. Your card details are not stored or processed by 3SL. They are processed by our card processor (SagePay).
  • To provide assistance through any of our support channels. You may choose to submit information regarding an issue you are experiencing with our Services. Whether you designate yourself as a technical contact, open a support call, speak to a member of our Support team, you will be asked to provide any of the following: contact information, a summary of the problem you are experiencing, project data, device information, documentation of the issue you are having, screenshots or information that would be helpful in resolving the issue. This information is never disclosed to any third party, except for our authorised distributors, and may be used to assist in resolving an issue you may experience with our products.
  • To market, promote and drive engagement with our Services. We use your contact information and information about your needs and how you use our products to send you communications that may be of specific interest to you. These communications are aimed at driving engagement and maximising what you get out of our Services, including information about new features, newsletters, and events we think may be of interest to you. You may opt out of our email communication at any time using the Unsubscribe link on the bottom of the email. See the Marketing section below.
  • To provide social networks. 3SL does not control the content that users post to social networks. You should carefully consider whether you wish to submit personal information to these forums or social networks and tailor any content you submit appropriately and in accordance with the relevant terms of use. You should also review any additional terms and conditions that may govern your use of these services, including terms related to sharing your personal information and receiving communications.
  • To provide products and services. 3SL may contact you if you purchase products to confirm certain information about your order (for example, that you did not experience problems in the download process). We may also use this information to confirm compliance with licensing and other terms of use and may share it with your company or institution.
  • To engage with third parties. If we need to engage third parties we may share your personal data in connection with services or training that these individuals or entities perform for or with 3SL. These third parties are restricted from using this data in any way other than to provide services for 3SL or for the collaboration in which they and 3SL are contractually. These third parties are carefully selected by 3SL and obligated to keep your data secure. For example, a cloud provider for a SaaS deployment of Cradle or a venue that is provided for a training course and we are booking accommodation etc., for delegates.
  • To get feedback or input from you. In order to deliver products and services of most interest to our customers, from time to time, we may ask members, customers, volunteers, and website visitors to provide input and feedback (for example, through surveys).

5.1 Marketing

We may use your personal information to tell you about relevant products and offers. This is what we mean when we talk about “marketing”.

The personal information we have for you is made up of what you tell us and the data we collect when you use our services.

We send out general Cradle product marketing and engineering news. We may also choose to offer specific information if you have supplied us with details that indicate your interest in a particular area.

We will only use your personal information to send you marketing messages if we have either your consent or a legitimate interest or for performance of a contract. That is when we have a business or commercial reason to use your information.

You have the right at any time to stop us from contacting you for marketing purposes. If you wish to exercise these rights you can do so by sending an email to privacy@threesl.com. You can also unsubscribe from any email marketing using the links provided in the emails we send to you.

We may ask you to confirm or update your choices. We will ask you to do this if there are changes in the law, regulation, or the structure of the business.

6 How we Share your information

Our policy is not to disclose personally identifiable information to unrelated third parties, unless required to do so by law or legal process. We will share data with our authorised distributors to enable contractual/legitimate business processing.

We may share non-personally identifiable information about the user of our website, products or services publicly or with third parties but this will not include information that can be used to identify you.

6.1 Sharing with Third Parties

We may share information with:

  • Service providers. We work with third party service providers to provide hosting, payment processing, analysis and other services for us which may require them to access or use information about you. If a service provider needs to access information about you to perform services on our behalf, they do so under close instruction from us, including policies and procedures designed to protect your information.
  • Affiliated companies and partners. 3SL may share your personal data with third parties in connection with services or training that these individuals or entities perform for or with 3SL. These third parties are restricted from using this data in any way other than to provide services for 3SL or for the collaboration in which they and 3SL are contractually engaged (for example, training or consultancy). These third parties are carefully selected by 3SL and obligated to keep your data secure.
  • With your consent. We share information about you with third parties when you give us consent to do so. For example, we often display personal testimonials of satisfied customers on our website. With your consent, we may post your name alongside the testimonial.

Personal information may be used to setup communications with third party vendors, such as, but not limited to arranging a webinar through GoTo Meeting, Skype or Teams.

7 Your Information and Your Rights

If you are based within the EEA or within another jurisdiction having similar data protection laws, in certain circumstances you have the following rights:

  • Your right of access - you have the right to ask us for copies of your personal information
  • Your right to rectification – you have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete
  • Your right to erasure - you have the right to ask us to erase your personal information in certain circumstances
  • Your right to restriction of processing - you have the right to ask us to restrict the processing of your personal information in certain circumstances
  • Your right to object to processing - you have the right to object to the processing of your personal information in certain circumstances
  • Your right to data portability - you have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

There may be legal or other official reasons why we need to keep or use your data. But please tell us if you think that we should not be using it.

We may sometimes be able to restrict the use of your data. This means that it can only be used for certain things, such as legal claims or to exercise legal rights. In this situation, we would not use or share your information in other ways while it is restricted.

You can ask us to restrict the use of your personal information if:

  • It is not accurate
  • It has been used unlawfully but you don’t want us to delete it
  • It is not relevant anymore, but you want us to keep it for use in legal claims
  • You have already asked us to stop using your data whilst waiting for us to confirm the reason of our continued use

If we hold any information about you which is incorrect or if there are any changes to your details, please let us know so that we can keep our records accurate and up to date.

You can withdraw your consent at any time. If you withdraw your consent to the use of your personal information for purposes set out in our Privacy Notice, we may not be able to provide you with access to all or parts of our website, products and services.

We will retain your personal information for the duration of our business relationship and afterwards for as long as is necessary and relevant for our legitimate business purposes, in accordance with our Data Retention Policy or as otherwise permitted by applicable laws and regulations. Where we no longer need your personal information, we will dispose of it in a secure manner (without further notice to you).

Please email your request to privacy@threesl.com or send your request in writing to 3SL at the address shown at the top of this privacy notice, for the attention of the Privacy Officer.

8 How the Law Protects You

As well as our privacy promise, your privacy is protected by law. This section explains how that works.

Data Protection law says that we are allowed to use personal information only if we have a proper reason to do so. This includes sharing it outside 3SL. Under the GDPR, the lawful bases we rely on for processing this information on are:

  • To fulfil a contract we have with you, or
  • When it is our legal duty, or
  • When it is in our legitimate interest, or
  • For vital interests, or
  • For public task, or
  • When you consent to it

A legitimate interest is when we have a business or commercial reason to use your information. But even then, it must not unfairly go against what is right and best for you. If we rely on our legitimate interest, we will tell you what that is.

Here is a list of all the ways that we may use your personal information, and which of the reasons we rely on to do so. This is also where we tell you what our legitimate interests are:

  • To manage our relationship with you or your business
  • To develop new ways to meet our customers’ needs and to grow our business
  • To develop and carry out marketing activities
  • To study how our customers use products and services from us and other organisations
  • To provide advice or guidance about our products and services
  • Fulfilling contracts
  • Our legitimate interests
  • Our legal duty
  • Your consent
  • Keeping our records up to date, working out which of our products and services may interest you and telling you about them
  • Developing products and services, and what we charge for them
  • Defining types of customers for new products or services
  • Seeking your consent when we need it to contact you
  • Being efficient about how we fulfil our legal duties

  • To develop and manage our brands, products and services
  • To test new products
  • To manage how we work with other companies that provide services to use and our customers
  • Fulfilling contracts
  • Our legitimate interests
  • Our legal duty
  • Developing products and services, and what we charge for them
  • Defining types of customers for new products or services
  • Being efficient about how we fulfil our legal and contractual duties

  • To deliver our products and services
  • To make and manage customer payments
  • To collect and recover money that is owed to us
  • Fulfilling contracts
  • Our legitimate interests
  • Our legal duty
  • Being efficient about how we fulfil our legal and contractual duties
  • Complying with regulations that apply to us

  • To detect, investigate, report and seek to prevent financial crime
  • To manage risk for us and our customers
  • To obey laws and regulations that apply to us
  • To respond to complaints and seek to resolve them
  • Fulfilling contracts
  • Our legitimate interests
  • Our legal duty
  • Vital interests
  • Being efficient about how we fulfil our legal and contractual duties
  • Complying with regulations that apply to us

  • To run our business in an efficient and proper way. This includes managing our financial position, business capability, planning, communications, corporate governance, and audit
  • Our legitimate interests
  • Our legal duty
  • Vital interests
  • Complying with regulations that apply to us
  • Being efficient about how we fulfill our legal and contractual duties

  • To exercise our rights set out in agreements or contracts
  • Fulfilling contracts
  • Business

9 Disclosure of your Information

Unless required to do so by law, we will not otherwise share, sell or distribute any of the information you provide to us without your consent.

10 Security and Data Storage/Retention

We employ security measures to protect your information from access by unauthorised persons and against unlawful processing, accidental loss, destruction and damage. We will retain your information for a reasonable period or for as long as the law requires.

All data and records are stored securely to avoid misuse or loss. All data records are stored in the most convenient and appropriate location having regard to the period of retention required and the frequency with which access will be made to the record. The degree of security required for file storage reflects the sensitivity and confidential nature of the material recorded. Any data file or record which contains personal data of any form is considered confidential in nature. Examples of appropriate storage include password protecting electronic documents and locking paper documents in a secure cupboard or drawer.

All information of a confidential or sensitive nature is securely destroyed when no longer required. The procedure for the destruction of confidential or sensitive records is as follows:

  • Electronic files are deleted in such a way that they cannot be retrieved by simply undoing the last action or restoring the item from the Recycle Bin. Destruction of backup copies is also dealt with.
  • Media and equipment is physically destroyed prior to disposal or wiped to an appropriate commercial standard.
  • Paper is destroyed if the content is sensitive. This is done by an external confidential waste company who provide a certificate confirming the paper has been destroyed.

We will do our best to protect your personal information but we cannot guarantee the security of your information which is transmitted to our website via an internet or similar connection. If we have given you (or you have chosen) a password to access certain areas of our website, please keep this password safe – we will not share this password with anyone. If you believe your account has been compromised, please contact us at privacy@threesl.com.

Please refer to our separate Data Retention Policy for further information. Please contact privacy@threesl.com to request a copy.

11 Transfers of Data

Personal information in the European Union and the UK is protected by data protection laws but other countries do not necessarily protect your personal information in the same way.

Our website and some of our products or services or parts of them may also be hosted in the United States or otherwise outside of the UK or the EEA (which means all the EU countries plus Norway, Iceland and Liechtenstein) (“EEA”) and this means that we may transfer any information which is submitted by you through the website or the products or service outside the EEA to the United States or to other territories outside of the EEA. When you send an email to us, this will also be stored on our email servers which are hosted in the United Kingdom.

We may use service providers based outside of the EEA to help us provide our website, products and services to you and this means that we may transfer your information to service providers outside the EEA for the purpose of providing our products and services to you.

We take steps to ensure that where your information is transferred outside of the EEA by our service providers and hosting providers, appropriate measures and controls are in place to protect that information in accordance with applicable data protection laws and regulations. For example, we may share information with our distributor companies outside the EEA for the purposes envisaged by this Privacy Notice. All 3SL distributor companies are subject to 3SL data protection policies designed to protect data in accordance with EU data protection laws. In each case, such transfers are made in accordance with the requirements of Regulations (EU) 2016/679 (the General Data Protection Regulations or “GDPR”) and may be based on the use of the European Commission’s Standard Model Clauses for transfers of personal data outside the EEA.

By using our website, products or services or by interacting with us in the ways described in this Privacy Notice, you consent to the transfer of your information outside the EEA in the circumstances set out in this Privacy Notice. If you do not want your information to be transferred outside the EEA you should not use our website, applications or services.

12 Other Sites and Social Media

If you follow a link from our website, products or service to another site or service, this Privacy Notice will no longer apply. We are not responsible for the information handling practices of third party sites or services and we encourage you to read the privacy notices appearing on those sites or services.

Our website, products or services may enable you to share information with social media sites, or use social media sites to create your account or to connect your social media account. Those social media sites may automatically provide us with access to certain personal information retained by them about you (for example any content you may have viewed). You should be able to manage your privacy settings from within your own third party social media account(s) to manage what personal information you enable us to access from that account.

13 Complaints or Queries

3SL tries to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.

This privacy notice was drafted with brevity and clarity in mind. It does not provide exhaustive detail of all aspects of 3SL’s collection and use of personal information. However, we are happy to provide any additional information or explanation needed. Any requests for this should be sent to privacy@threesl.com.

If you have any concerns about our use of your personal information, you can make a complaint to us at:

Structured Software Systems Ltd
College House, Howard Street
Barrow-in-Furness
Cumbria, LA14 1HH
Email: privacy@threesl.com


You can also complain to the ICO if you are unhappy with how we have used your data. The ICO’s address is:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://ico.org.uk


14 Changes to this Privacy Notice

We may change this Privacy Notice from time to time (for example, if the law changes). Any changes will be immediately posted on our website and you will be deemed to have accepted the terms of the Privacy Policy on your first use of our website following the alterations. We recommend that you check this page regularly to keep up-to-date. The last updated reference tells you when we last updated this Privacy Notice.

This policy will be reviewed each year. The last date of review is 09.07.24.