Privacy Policy

At Collie we believe privacy to be a fundamental right and one of the core pillars of our offering. This document aims to outline exactly how we use your information, and we promise to keep it quick and easy to read. We've even made the text larger by default.

What personal information do we collect?

We collect your name and email address in order to know who to address correspondance to, and to provide a more personalised level of service. As an account administrator (someone who purchases or signs up for Collie on behalf of their company) we also collect some of your business' publicly available information. You have to give us the company name as a minimum (so we know who individual users belong to), but optionally you can choose to give us your company's logo, address, phone number and company number for the purposes of making invoices look a bit nicer. Though not stricly related, we feel we should mention that Survey questions and answers are provided to us by you via our platform, but they are not stored alongside any personally identifiable information.

Cookies and locally stored data

Yes, we use cookies. We use Google Analytics, and they use cookies in order to track pageviews and events back to us. In the case of analytics though, every action is anonymised and we never send any user or account information to Google. All we want to know is how many people use Collie, and what the average user journey is. We don't need to know who made the journey.

Collie uses cookies to keep you logged in and authenticate you, but we don't store any personally identifiable information in these cookies. Here's an example of one of those:

NameValueExpires
tokeneyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOiJja2FqdGI3djEzNmEzMDk0MXEydHc1cWw2IiwiaWF0IjoxNTkwMjQ5MTk0fQ.zB-f4_5JMx9PWyx7ev8mrKRwX2FX2-Ee0cC3suQYw-w2021-05-23T15:53:16.069Z

We use browser LocalStorage, too. We use these to store your decisions to prompts like "Hide this in future?" for the purposes of hiding tutorials, or alerts. We figure storing them in the browser is better (anonymous) than assigning your preferences to your account on the database (recorded and identifiable). Here's an example of that:

NameValue
SHOW TUTORIALfalse
SHOW WELCOME MESSAGEfalse

Lawfulness of processing under the GDPR

We'd like to hope that you understand we don't take any more information from you than necessary. We don't ask for start-dates, birthdays or even the gender of our users as we feel the information isn't relevant to the services we want to offer you.

By signing up for an account you give us consent to process your data as without doing so, we can't provide you with any kind of service. Under the GDPR we're obliged to tell you that we process your data under contractual obligations. This just means that we have a lawful reason to process your data in order to provide you with a service (regardless of whether your account is free or paid for).

How we process your personal data

First off, we do not share your information with third parties. If we ever did in future, we'd expressly ask for your consent first and not find some dodgy loophole to do it anyway and ask for forgiveness later.

With that out of the way, we process your data by means of receiving it from you (via signups and other forms) and then we perform any data rationalisation (ie, connecting users to their company in order to know who belongs where) and storing it in a secured database.

We use the latest technologies in order to keep your data safe, and we never store passwords as plain text. We never even surface passwords in the application, ever!

How long do we keep your data for?

We will retain your information indefinitely, unless you specifically request us to delete it. Nothing nefarious, but let's say you sign up for Collie, add all your employees, send a few surveys and then decide it isn't for you. If you cancel your account we'll mark it as inactive, stop sending you emails and such, but keep your data so that if you did come back, you'd have your historical data ready and waiting for you, and you wouldn't have to re-invite all of your colleagues and re-enter all of your information. That being said, if you'd like us to permanently delete your information when you leave, we'll happily do so, no questions asked. Just let us know at any time, even after you've cancelled your account. And no, we don't charge for that.

Data Subject Rights

The GDPR gives you 8 data subject rights, which are listed below. We adhere to these guidelines, and you can contact us about any and every one if you want to.

  • Right to be informed: organisations must tell individuals what data of theirs is being collected, how it’s being used, how long it will be kept and whether it will be shared with any third parties.
  • Right of access: individuals have the right to request a copy of the information that an organisation holds on them.
  • Right of rectification: individuals have the right to correct data that is inaccurate or incomplete.
  • Right to be forgotten: in certain circumstances, individuals can ask organisations to erase any personal data that’s stored on them.
  • Right of portability: individuals can request that organisation transfer any data that it holds on them to another company.
  • Right to restrict processing: individuals can request that an organisation limits the way it uses personal data.
  • Right to object: individuals have the right to challenge certain types of processing, such as direct marketing.
  • Rights related to automated decision making including profiling: individuals can ask organisations to provide a copy of its automated processing activities if they believe the data is being processed unlawfully. You should also remind individuals that they are free to exercise their rights and explain how they can do this.

Contacting us

If you want to contact us at any point about anything to do with your account and your data, you can do so. Email us at info@getcollie.co.uk and we will get back to you.