AdviceMagic Privacy Policy

Last Updated: 1st March 2023

Introduction

Welcome to AdviceMagic, a Software as a Service (SaaS) platform operated by Grizzly Ventures Limited ("AdviceMagic," "we," "us," or "our"). 

We are committed to protecting the privacy and security of our users' personal data. 

This privacy policy ("Policy") explains how we collect, use, and disclose personal data when you use our Software as a Service (SaaS) platform. This Policy applies to all users of our platform.

‍

Who we are and how to contact us

AdviceMagic is a trading name of Grizzly Ventures Ltd. A limited liability company registered in England. 

Our registered office is: The Guild, 5 Abbey Street, Carlisle CA3 8TX

If you have any questions please contact us by email at support@advicemagic.com 

‍

Our status 

1. Your data

We are a data controller with respect to your data as a firm. This includes information such as your name, email address, firm name and payment details. 

This does not include data about your clients or prospects which you provide to us to enable you to use AdviceMagic to contact your clients or prospects. 

2. Your client and prospect data

We are a data processor with respect to your client data. 

This refers to data about your clients and prospects you upload to AdviceMagic for the purpose of using AdviceMagic to contact them. This is typically limited to   your clients’ or prospects’ names and email addresses. 

You remain the data controller for your client data. You allow us to process your client data for the specific purpose of facilitating marketing and communications with clients. 

We will never use your end client data for marketing or sales purposes. Your end client data remains your data and you may revoke our permission to process it at any time. However, doing so means that you will no longer be able to use AdviceMagic. 

‍We will process your client data in accordance with this agreement. 

‍

The type of data we collect

When you create an account with AdviceMagic we collect the following personal information: 

• Your name
• Email address
• Firm name
• Payment information (this is only ever handled by our payment processor - Stripe) 
• Analytical data (such as the pages you view on our platform)

We may use cookies to facilitate the use of our platform. 

‍

Purpose of processing and legal basis for processing

We collect this data from you to enable us to provide AdviceMagic to you and allow you to use the software. 

We also collect this information to help us to improve our software and market our product. 

Our reason? for processing, this information is to fulfil our contract with you to deliver our software platform. We may also process this information for our legitimate interests in marketing and improving our platform.

‍

Sharing of data with third pirates

We will never make your information available to third parties without your permission. 

We may share your information with third parties in the following circumstances

• Service providers working on our behalf to deliver our platform. 

Eg: hosting providers, database providers, and other cloud-based services.

• Contractors engaged in specific projects with our company. This is done on a need-to-know basis, with strict controls in place. 

• If we are required to do so under a legal obligation or court order. 

‍

Data retention

We retain your data for as long as is necessary in order to deliver the AdviceMagic platform to you. 

‍

International Transfers

Our platform is hosted on a dedicated resource in the UK with Google Cloud Platform. 

However, in some circumstances, we may transfer data outside of the UK. We only do so in order to provide functionality in our platform and via specific vendors. We have agreements in place with these specific vendors to ensure these transfers are carried out lawfully.  

We have followed all the requirements contained in the Information Commissioner Office’s transfer risk assessment tool and all transfers are done in accordance with UK GDPR regulations. 

You may contact us at: support@advicemagic.com for further detailed information on our transfer risk assessment process and our policies regarding restricted transfers.  A list of  Advice Magic’s sub-processors is available to our users. If we add new sub-processors we will notify our users via email. 

‍

Data security practices

We are committed to ensuring that all data on the AdviceMagic platform is secure and we have taken all reasonable steps to ensure the security of data on our platform. 

Our platform runs on Google Cloud Platform on a dedicated resource in the UK. Our database vendor has SOC2, ISO27001, ISO9001 and HIPPA compliance certificates.
All data is encrypted at rest, passwords are salted and encrypted with sha256. 

We take a range of measures to ensure security across our platform. We have conducted a penetration test by a licensed security operative with experience at high levels inside US military cyber operations. 

We also consulted multiple times with an experienced CTO and software development consultant throughout our development process to ensure AdviceMagic was designed in a secure manner.  

‍

Your rights 

You have the following rights with respect to your personal data:

• Right to access: You have the right to request access to your personal data.
• Right to rectification: You have the right to request that we correct inaccurate or incomplete personal data.
• Right to erasure: You have the right to request that we erase your personal data in certain circumstances.
• Right to restrict processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to data portability: You have the right to receive your personal data in a structured, machine-readable format and to transmit it to another controller.
• Right to object: You have the right to object to the processing of your personal data in certain circumstances.

To exercise these rights, please contact us at support@advicemagic.com

‍

Changes to this policy 

We reserve the right to make changes to this policy. 

‍

Registration with the Information Commissioner's Office

‍We are registered as a data controller with the ICO with registration number: C1310273

‍