Last Updated - 31 Oct 2025

Privacy policy

Introduction

This Privacy Statement applies when you visit the website of NumoData (hereinafter
referred to as “NumoData”, “we”, or “us”). When you visit our website, for example
because you are interested in becoming our customer, we may need to process your
personal data. We believe it is important that you understand how we handle your data and what your rights are, so that you can trust that your personal data is safe with us. This statement explains how we process your personal data.

Who is responsible for the processing of your personal data?

NumoData Inc. is responsible for the proper processing of your personal data and therefore acts as the data controller within the meaning of the GDPR.

What personal data do we collect?

When you visit our website, we collect the following information:

Technical and functional information, such as your IP address, browser type and version, operating system, device type, screen resolution, language settings, date and time of your visit, location information (country), and the pages you viewed;
Cookie information, such as session identifiers, preferences and analytics data (please refer to our Cookie Statement for more information);
Marketing campaign URL parameters.

If you visit our website and contact us through our contact form (for example as an existing or prospective business customer), we may also process certain personal data of your organization’s contact persons. This includes:

Identification details, such as name, job title, and department;
Contact details, such as business email address, business phone number, and
mobile number (if provided);
Organization details, such as company name, business address, company
registered number, VAT number (if provided); and
Any other information you choose to provide yourself.

Use of your personal data

Purpose	Description	Data	Legal basis
To ensure the proper and secure functioning of our website	Certain personal data are automatically processed when you visit our website to ensure its proper functioning, security, and accessibility, and to detect or prevent technical issues or misuse.	Technical and functional information, including: IP address; Browser type and version; Operating system; Device type; Screen resolution; Language settings; Date and time of your visit; Log files and error reports.	Legitimate interests
To measure and analyse how our website is used	We use analytical cookies to collect information about how our website is used and about the quality and effectiveness of the website. This information helps us understand what works well and where we can improve the user experience.	User ID; Pages visited and time of visit; Whether you are a new or repeated visitor; From which website you came; Browser type and version; Location information (country); Operating system; Device type.	Legitimate interests
To respond to and follow up on your enquiry submitted through our contact form	We use the information you enter in the contact form to respond to your request.	Identification details; Contact details; Organization details; Any other information you choose to provide yourself.	Performance of a contract (for prospective / existing clients) Consent

Who we share your personal data with

We do not share your personal data with any other organization for their own purposes, unless we are legally required to do so. We may share your information with affiliates in the NumoData group.

We engage processors who may process personal data solely on our instructions and under our supervision. We also actively monitor our processors’ compliance with applicable security requirements. A list of the processors we use can be found below:

Process - Netsuite
Purpose - CRM Provider
Location - EU

Retention periods

NumoData retains personal data only for as long as necessary to fulfil the purposes for which it was collected. In determining the appropriate retention period, we take into account the type of personal data, whether you are or may become a customer of NumoData, and what you as a data subject can reasonably expect as a retention period.

Once the data is no longer required for these purposes, it will be securely deleted or
anonymised.

Please find specific retention periods below:

Technical and functional information: We keep this information for 3 years after they have been recorded.
Cookie information: For the specific retention periods of cookies, please refer to our Cookie Statement.
Contact form information: We store customer contact details for the duration of the customer relationship. After the relationship ends, we will delete the data if retention is no longer necessary. Extended retention periods may apply where required by law, for instance for tax or accounting purpose.

If you are not a customer, we will delete your data within 6 months following the last
contact.

Data transfers

If we need to transfer your personal data to recipients outside the European Economic Area (EEA), we do so carefully and in accordance with applicable European data protection laws. Where required, we use appropriate safeguards.

We transfer your data to the recipients in the following countries:

Recipient - NumoData UK
Role - Controller
Country - UK
Transfer mechanism - Adequacy decision

Data security

Our websites, apps, and IT systems are well secured. We continuously implement technical and organizational measures to prevent misuse of your personal data. In addition, our employees are clearly instructed on how to handle personal data with care and in accordance with our internal policies.

Data subject rights

Below we explain the rights you have with respect to the personal data we process about you, and how you can exercise these rights:

Right to information: you have the right to clear and transparent information about how your personal data are processed (Articles 13 and 14 GDPR);
Right of access: you have the right to access your personal data and certain
information about the processing activities, and to receive a copy of the personal data undergoing processing (Article 15 GDPR);
Right to rectification: you have the right to have inaccurate or incomplete personal data corrected (Article 16 GDPR);
Right to erasure (“right to be forgotten”): you have the right to request the deletion of your personal data in certain circumstances (Article 17 GDPR);
Right to restriction of processing: you have the right to request that the processing of your personal data be restricted (Article 18 GDPR);
Right to data portability: you have the right to receive your personal data in a
structured, commonly used and machine-readable format, and to transfer those data to another controller (Article 20 GDPR);
Right to object: in specific situations, you have the right to object to the processing of your personal data (Article 21 GDPR);
Right to withdraw consent: where processing is based on your consent, you have the right to withdraw that consent at any time (Article 7(3) GDPR).

To exercise any of these rights, please contact us at legal@numodata.com.
You also have the right to lodge a complaint with the competent supervisory authority, for example the competent authority of the country in which you visit our website.

Contact details

If you have any questions, suggestions or if you want to exercise your data subject rights, please contact us via:

NumoData Inc.
legal@numodata.com

Changes to this Privacy Statement

NumoData may update this Privacy Statement from time to time. Any changes will be pub-lished on our website. We encourage you to review this statement regularly to stay informed about our latest policies.

Last update: 31 October 2025
Version: 1.0