Privacy Policy
1. Introduction
At Payment Members Network Limited (referred to as "we," "us," or "our"), trading as Identity Max, protecting your privacy is our top priority. This Privacy Policy outlines how we collect, use, store, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
By using Identity Max and its services, you agree to the collection and use of your personal data as outlined in this policy.
2. Data Controller
Payment Members Network Limited, registered in England and Wales (Company Number: 15592737), with its registered office at 3 Suite 9, 3 Chapel Street, Congleton, England, CW12 4AB, is the data controller responsible for processing your personal data.
For any questions regarding this Privacy Policy or data protection matters, please contact us at [email protected], or call us at 0330 350 2732.
3. Types of Data We Collect
We only collect the minimum amount of personal data necessary to provide you with our services. The types of data we collect include:
-
Identification Information: Name, address, email address, phone numbers.
-
Payment Information: Credit or debit card details for subscription payments.
-
Monitored Data: Specific personal information that you provide for monitoring purposes, such as email addresses, phone numbers, National Insurance numbers, driving licence numbers, or credit card details.
-
Account Information: Username, password, and other profile information related to your Identity Max membership.
-
Technical Data: IP addresses, browser types, and usage data automatically collected when you use our website.
4. Purpose of Data Collection
We collect and use your personal data to:
-
Provide you with access to the Identity Max services and membership area.
-
Monitor the data you provide for potential data breaches, unauthorised use, or compromise.
-
Notify you of any alerts related to your monitored data.
-
Manage your subscription, including processing payments and providing customer support.
-
Send important communications, including changes to our services or this Privacy Policy.
-
Analyse and improve the performance of our services.
-
Comply with legal obligations, such as record-keeping and regulatory reporting.
5. Legal Basis for Processing
We process your personal data based on the following legal grounds:
-
Contractual Necessity: To fulfil our obligations under the contract when you subscribe to Identity Max.
-
Legitimate Interests: To monitor data breaches and provide notifications in a way that benefits both you and our service.
-
Legal Obligations: To comply with regulatory requirements, such as anti-fraud measures and record-keeping obligations.
-
Consent: In cases where you explicitly provide consent, such as receiving marketing communications (which you can opt out of at any time).
6. How We Protect Your Data
We implement strict security measures to protect your personal data from unauthorised access, disclosure, or loss. This includes:
-
Data Encryption: All personal data in your Membership Area is fully anonymised and encrypted, ensuring that even we cannot view your data.
-
Access Controls: We restrict access to personal data to only authorised personnel who need it to perform their duties.
-
Secure Storage: We store personal data on secure servers in compliance with industry standards.
7. Data Retention
We retain your personal data only for as long as it is necessary for the purposes outlined in this Privacy Policy or as required by law. Once your data is no longer needed, we will securely delete or anonymise it.
-
Subscription Data: Retained for the duration of your subscription and for a reasonable period thereafter to comply with our legal obligations.
-
Monitored Data: Retained only for as long as you are using the monitoring services.
8. Your Data Protection Rights
Under the GDPR, you have the following rights regarding your personal data:
-
Right to Access: You can request a copy of the personal data we hold about you.
-
Right to Rectification: You can request that we correct any inaccuracies or incomplete data.
-
Right to Erasure ("Right to be Forgotten"): You can request that we delete your personal data under certain circumstances.
-
Right to Restrict Processing: You can ask us to limit the processing of your data in specific situations.
-
Right to Data Portability: You can request that your data be transferred to another data controller.
-
Right to Object: You can object to our processing of your data where it is based on legitimate interests or direct marketing.
-
Right to Withdraw Consent: If we process your data based on your consent, you can withdraw this consent at any time.
To exercise these rights, please contact us at
[email protected]. We will respond to your request within one month, in accordance with GDPR.
9. Sharing Your Data
We do not share your personal data with third parties, except in the following circumstances:
-
Service Providers: We may share your data with third-party service providers who assist in delivering our services (e.g., payment processors, IT service providers). These third parties are bound by confidentiality obligations and may only use your data to perform specific tasks.
-
Legal Obligations: We may disclose your data if required to comply with legal obligations, such as in response to court orders or regulatory requirements.
-
Business Transfers: In the event of a merger, acquisition, or sale of our assets, your data may be transferred to the new owners, subject to the same level of data protection as outlined in this policy.
10. International Data Transfers
We store and process your data within the United Kingdom (UK) and European Economic Area (EEA). If we transfer your data outside the UK or EEA, we ensure that appropriate safeguards, such as Standard Contractual Clauses (SCCs), are in place to protect your personal data.
11. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance user experience and analyse website traffic. Cookies may store technical data, such as browser types and usage patterns. You can control or disable cookies through your browser settings.
For more detailed information, please refer to our Cookie Policy.
12. Data Breaches
In the event of a data breach, we will notify you and the relevant data protection authority (the UK Information Commissioner’s Office (ICO)) if the breach poses a risk to your rights and freedoms, in accordance with GDPR requirements.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements or how we handle personal data. Any updates will be communicated to you, and we encourage you to review this policy periodically.
14. Complaints
If you are not satisfied with how we handle your personal data, you have the right to file a complaint with the ICO, the UK's supervisory authority for data protection, via their website at www.ico.org.uk.
15. Contact Us
For any questions, concerns, or to exercise your data protection rights, please contact us:
Email: [email protected]
Phone number: 0330 350 2732.
Address: Payment Members Network Limited, 3 Chapel Street, Congleton, England, CW12 4AB