Privacy Policy

CloudLoq is committed to protecting the personal data of our customers and their employees and contractors. The purpose of this policy is to inform you of the personal data that we might collect and use during our relationship with you and the use we may make of this data.

Scope of this policy

This policy (together with our end-user licence agreement (the “EULA”) and any additional terms of use incorporated by reference into the EULA, applies to your use of CloudLoq. This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

Information security practices

CloudLoq uses state of the art security features and methods including:

  • Secure hosted platform employing security controls exceeding industry standards with continuous 24×7 management and monitoring of all events
  • Continuous vulnerability management and testing of code and infrastructure and regular penetration testing
  • Privacy by Design principles have been implemented from the outset
  • All server-based personal data is AES 256-bit encrypted and encryption keys are stored in protected key vaults
  • Security practices aligned to ISO 27001 and other leading certification standards
  • Static code analyses are performed using leading practice OWASP and commercial industry standard tools
  • Rigorous and orchestrated incident management procedures based on best practices
  • All personal data held within the EEA

Information security practices

CloudLoq uses state of the art security features and methods including:

  • Secure hosted platform employing security controls exceeding industry standards with continuous 24×7 management and monitoring of all events
  • Continuous vulnerability management and testing of code and infrastructure and regular penetration testing
  • Privacy by Design principles have been implemented from the outset
  • All server-based personal data is AES 256-bit encrypted and encryption keys are stored in protected key vaults
  • Security practices aligned to ISO 27001 and other leading certification standards
  • Static code analyses are performed using leading practice OWASP and commercial industry standard tools
  • Rigorous and orchestrated incident management procedures based on best practices
  • All personal data held within the EEA

Information we may collect from you

  • Information submitted to the platform on enrollment of a new user or by integration with another system (“Submitted information”);
  • Information relating to entry and exit times from sites and locations that are connected to the system.
  • User roles and permissions for accessing the system

Uses made of the information

We use information held about you in the following ways:
  • Submitted personal identification information: We will use the Submitted Information in the manner set out in the EULA and this Data Protection Policy including but not limited to:
    • Providing the Services by transmitting data to the client.
    • Facilitating site access control
    • Responding to your requests for assistance.
  • Log information: For the assistance of reporting and troubleshooting purposes.
  • Location information: We may use this information for reporting purposes.
We may associate any category of information with any other category of information and if such data then constitutes personal data, we will treat it as such.

Disclosure of your information

We may disclose some or all of the data we collect from you when you enroll on the system to the following third parties:
Category of data Recipient
Personal Identification details The Client (i.e. the third party with whom you agree to share your personal data with in order to access their site).
Location and site access details The Client (i.e. the third party with whom you agree to share your personal data with in order to access their site).
We may disclose your personal information to third parties:
  • In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
  • If CloudLoq or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
  • If we are under a duty to disclose or share your personal data in order to comply with any legal or regulatory obligation or request.
  • In order to:
    • Enforce or apply the EULA, and other agreements or to investigate potential breaches; or
    • Protect the rights, property or safety of CloudLoq, our customers, or others.

Where we store your personal data

To the extent that we do store data which we collect from you, the data that we collect from you will be stored within the European Economic Area (“EEA”). We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this data protection policy. 

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to us; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Accessing our public website

We collect and analyse certain statistical information about the use of our website. When you visit the website, the following information may be retained about that visit:

  • The Internet Protocol (IP) address from which you access the website in a format that does not enable us to identify who you are;
  • The previous webpage from which you accessed the website
  • The identity of any search engine used to access the website and any search terms used;
  • The type of browser, device and operating system used to access the website
  • The date and time of your access to the website
  • A list of all the pages visited while in the website
  • The page you exit the website

Such information is collected on an aggregate basis. None of this information is associated with you as an individual and we do not track individual email addresses, usage of web pages or any other information personally identifying you. Most information is collected via cookies or other general analysis technologies. 

Your personal data may be transferred to and/or accessed from a country outside the European Economic Area (“EEA”). We will always take steps to ensure that any transfer of information outside the EEA is carefully managed to protect your privacy rights. We will also obtain contractual commitments and assurances from our third party providers to protect your personal information. We will only transfer your personal information to countries which are recognised as providing an adequate level of legal protection or where we can be satisfied that alternative arrangements are in place to protect your privacy rights. 

We are committed to taking all reasonable and appropriate steps to protect the personal information we hold from misuse, loss or unauthorised access. We do this by having a range of measures in place. These measures include the ability to deal with suspected data breaches. 

If you contact us directly, we may retain the contact information for a period of time, however we will never share any confidential or personal details with third parties. 

If you suspect any misuse, loss or unauthorised access to your personal data please contact us. 

Cookies 

We use cookies to distinguish you from other users of the website. This helps us to provide you with a good experience when you use the website and also allows us to improve the site. 

Certain information about you, (including personal information), may be collected through the use of cookies when you use the website. Some of these cookies are essential for the website to operate. By using the website you agree to the use of certain non-essential cookies unless you set your browser to reject them. 

A cookie is a small text file that is stored on your Device’s hard drive or browser. We use cookies and the information contained therein for a number of purposes including but not limited to: 

  • Tracking the duration of visits and content accessed; and 
  • Storing frequently used user information to personalise your online experience and ease the log-in process. 

The cookies collect information in an anonymous form, including the number of visitors to our website, where visitors have come to the website from and the pages they visited. You may block cookies by activating the setting on your browser which allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies as soon you visit our website. Further information on cookies and how websites use them can be obtained at www.cookiecentral.com

GDPR – Your rights

In addition to the right to know the information on this data protection statement, subjects also have the right to:

  • Information on whether we have Personal Data relating to a subject, the categories of data and the purpose of processing. 
  • Access your personal data. Where the format is not reasonably understood, this shall be delivered in an intelligible format. 
  • Have inaccurate, incomplete, or out-of-date personal data that we hold about you corrected or deleted. 
  • Withdraw consent for your personal data to be processed – where it was obtained from you on the basis of consent. 
  • Be informed if a failure to provide the personal data will have any direct and material personal consequences. 
  • Make a submission on any automated decisions making processes or profiling of you. 
  • Transfer your data to another controller. 
  • Have your personal data excluded from certain categories of processing. 
  • Lodge a complaint with the Data Protection Commissioner. Contact details for the DPC can be found at www.dataprotection.ie.

 

Please note:

  • There are some limitations to these rights.
  • You can contact us to exercise these rights by email at info@cloudloq.com.
  • CloudLoq will require proof of your identity prior to discussing or providing access to your personal data

Changes due to data protection policy

Any changes we may make to our data protection policy in the future will be posted on this page and, where appropriate, notified to you. This policy was last revised in May 2024