This website and the Septima platform are operated by Kycel Inc. (“Septima”, “we”, “us”, “our”), a Delaware corporation with its registered office at 8 The Green, Suite R, Dover, DE 19901, United States.
For personal data that we collect and process for our own purposes, such as information relating to website visitors, business contacts, account administration and billing, Kycel Inc. acts as the data controller.
Where we process personal data contained in Customer Data on behalf of a customer using the Septima platform, the customer generally acts as the data controller and Septima acts as a data processor, subject to the applicable agreement and data processing terms.
Questions relating to privacy or data protection can be sent to legal@septima.ai.
This Privacy Policy explains how we collect and use personal data through:
Personal data contained in Customer Data is primarily governed by the applicable customer agreement and DPA.
Depending on how you interact with us, we may collect:
This may include your:
We may collect business contact information from publicly available professional sources, company websites, professional networking services, referrals and business directories.
When you use our website or systems, we and our service providers may collect limited technical information, including:
We do not intentionally collect special-category personal data through our public website or ordinary business communications.
Our website and services are not directed at children under 18.
We use your personal data to respond to enquiries, arrange meetings or demonstrations, provide information about Septima, send relevant business communications, operate and secure our website, improve our services, and comply with legal obligations. We rely on our legitimate interests in running and protecting our business, responding to professional enquiries, and marketing our services to relevant firms, as well as steps taken at your request before entering into a contract, legal obligations, or your consent where required. You may withdraw your consent or object to processing based on legitimate interests at any time. We do not use automated decision-making that has legal or similarly significant effects.
We use cookies and similar technologies that are necessary to operate and secure our website.
We do not currently use advertising cookies or third-party technologies designed to track individuals across unrelated websites.
If we introduce non-essential analytics, advertising or tracking technologies, we will update this Privacy Policy and obtain consent where required by applicable law.
We do not sell personal data.
We may share personal data with:
Service providers that process personal data on our behalf are required to do so under appropriate contractual and security obligations.
Where we process Customer Data as a processor or subprocessor, our use of service providers and subprocessors is governed by the applicable customer agreement and DPA.
Septima is a US-based service. Unless otherwise expressly agreed in writing, the Septima platform, Customer Data and the associated storage and computing resources used to provide the service are hosted and processed in the United States.
Our approved service providers may also process personal data in the countries in which they operate, subject to our agreements with them.
Some customers may have specific legal, regulatory, contractual or internal requirements concerning:
Where Kycel and a customer expressly agree to such requirements in a DPA, Order Form or other written agreement, we will process the Customer Data covered by that agreement in accordance with the agreed requirements.
Any customer-specific data-residency or compute-hosting commitment applies only to the data, services and locations expressly identified in the applicable written agreement.
No specific regional hosting or data-residency commitment applies unless it has been agreed in writing.
Where UK or EU data protection law applies and personal data is transferred outside the United Kingdom or European Economic Area, we use a transfer mechanism permitted by applicable law.
Depending on the circumstances, this may include:
The EU SCCs are an official mechanism for certain EEA transfers, while UK transfers generally require a UK-recognised mechanism such as the UK Addendum or IDTA.
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to:
When personal data is no longer required, we delete or anonymise it in accordance with our retention procedures.
Customer Data is retained and deleted in accordance with the applicable customer agreement and DPA.
Depending on your location and applicable law, you may have the right to:
Requests may be sent to legal@septima.ai.
We may ask for information needed to verify your identity before completing a request. We will respond within the period required by applicable law.
Where a request relates to Customer Data that we process on behalf of a customer, the request should normally be directed to that customer. We will assist the customer in responding as required by the applicable DPA and law.
We maintain technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, misuse or disclosure.
Depending on the nature of the processing, these measures may include:
Additional security requirements applicable to Customer Data may be set out in the relevant customer agreement, DPA or security schedule.
We may update this Privacy Policy when our services, processing activities or legal obligations change.
The latest revision date appears at the top of the policy. Where required by applicable law or contract, we will notify affected individuals or customers of material changes.
Questions, requests or complaints concerning this Privacy Policy may be sent to:
Email: legal@septima.ai
Post:
Kycel Inc.
8 The Green, Suite R
Dover, Delaware 19901
United States