Soli is committed to protecting the privacy of all visitors to our Website (www.soli.uk). The following privacy policy explains how we use and protect your information, as the data controller for the purposes of the GDPR (General Data Protection Regulations EU 2016/679) and related UK legislation. We reserve the right to amend this policy.

Information that we collect

We currently collect and process the following information:

• When you book, you will be asked to provide information about yourself including your name, address, and contact details.
• Suppliers are asked to provide information on their DBS check, and may be asked to provide banking details.
• Suppliers may be asked to provide personal information of individuals who can provide a reference.
• When acting as a referee, you may be asked to provide information about yourself including your name, address, and contact details, and details of the suitability of the Supplier who has provided your details.
• When you book, we collect your payment information, via a third party, our payment partners Stripe. We do not handle any payment card information ourselves, and are not PCI compliant.
• We may collect information about your usage of the Website and information about you from your communications with us.
• We collect technical data about your use of the Website, including the device and browser that you are using, your IP address, your time on the Website and the pages that you have visited.

The following information is automatically collected:

• Usage Information. We collect information about your interactions with Soli such as the pages or content you view, bookings you have made, and other actions on Soli.
• Log Data and Device Information. We automatically collect log data and device information when you access and use Soli. That information includes, among other things: details about how you’ve used Soli (including if you clicked on links to third party applications), IP address, access dates and times, hardware and software information, device information, device event information, unique identifiers, crash data, cookie data, and the pages you’ve viewed or engaged with before or after using Soli.
• Cookies and Similar Technologies. We use cookies and other similar technologies when you use our platform, or engage with our online ads or email communications. We may collect certain information by automated means using technologies such as cookies, web beacons, pixels, browser analysis tools, server logs, and mobile identifiers. In many cases the information we collect using cookies and other tools is only used in a non-identifiable way without reference to personal information. For example, we may use the information we collect to better understand website traffic patterns and to optimize our website experience. In some cases we associate the information we collect using cookies and other technology with your personal information.
• Geo-location Information. When you use certain features of Soli, we may collect information about your precise or approximate location as determined through data such as your IP address or mobile device’s GPS to offer you an improved user experience. Most mobile devices allow you to control or disable the use of location services for applications in the device’s settings menu.
• Pixels and SDKs. Third parties, including Facebook, may use cookies, web beacons, and other storage technologies to collect or receive information from our websites and elsewhere on the internet and use that information to provide measurement services and target ads. For apps, that third parties, including Facebook, may collect or receive information from your app and other apps and use that information to provide measurement services and targeted ads. Users can opt-out of the collection and use of information for ad targeting by updating their Facebook account ad settings.

How we use your data

• Your information will enable us to provide you with access to the relevant parts of the Website and to supply the services you have requested.
• If you are a Supplier, we will screen your application to ensure that your qualifications and experience make you suitable to work with us, and to ensure that you have the right to work in the UK.
• If you are a Supplier and have provided details of individuals you wish to provide a reference, we will contact those individuals and request feedback on your suitability to work with us.
• If you are a Supplier who has registered details of any criminal convictions (including a DBS certificate or update service details) we will check these details against the Disclosure and Barring Service database.
• Where you have indicated accordingly, you agree that we may use your information to let you know about our other products and services that may be of interest to you including services that may be the subject of direct marketing and we may contact you to do so by telephone, SMS, e-mail, social media or direct mail.
• We may contact you for internal market research purposes, to find out how we can improve our services to better meet the needs of our users.
• If you do not want us to use your data in this way or change your mind about being contacted in the future, please let us know by contacting us on [email protected].
• We may retain personal data from closed accounts in order to comply with legal obligations, enforce our terms and conditions, prevent fraud, collect any fees owed, resolve disputes, and assist with any investigations and take other actions as permitted by law.

Disclosure of your information

For the purposes for which we will use your personal data as described in the previous section, the information you provide to use may be transferred to and stored on our servers, or servers of third party providers. The third party providers have policies to ensure they comply with their obligations and responsibilities in processing your personal data.

• Sometimes it may be necessary to transfer data that we collect from you to locations outside of the European Union for processing and storing. In such cases the data transferred is limited to that which is necessary for the processing purpose.
• Third party data processors that may transfer your personal data outside of the EEA are Google and Stripe.
• If you are using the Website, we may disclose your personal information to a Supplier you have booked with, which may include your first name, contact details, and address, in order for them to provide services to you.
• If you are using the Website as a Supplier and provide details of referees, we will contact those individuals, inform them of your desire to work with us and seek feedback on your suitability to do so.
• We use third parties to process information such as credit card information and bank account information. By giving us your personal data, you agree to this transfer, storing or processing by these third parties. We never give your details to third parties to use your data to enable them to provide you with information regarding unrelated goods or services.
• We may use the information that you provide to us if we are under a duty to disclose or share your information in order to comply with (and/or where we believe we are under a duty to comply with) any legal obligation; or in order to enforce our Website Terms and any other agreement, or to prevent fraud.
• In the event that we sell any or all of our business to a buyer, or enter into a joint venture with another business entity, your information may be disclosed or transferred to the target company, our new business partners or owners or their advisors.

Data retention

We will keep your information for 6 years from the last date on which you have been active on our Website. We may retain records where necessary to fulfil our regulatory or statutory duties.

Legal rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the below.

• Request access to your personal data.
• Object to processing of your personal data.
• Request correction of your personal data.
• Request erasure of your personal data.
• Request restriction of processing your personal data.
• Request transfer of your personal data.
• Right to withdraw consent.

If you wish to exercise any of the rights set out above, please contact us – [email protected].

To ensure that we can deal with your request as promptly as possible, please ensure you make your request as clearly as possible.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

You have the right to request that we send to you or to another organisation, an electronic copy of the personal data we hold about you in a structured, commonly used and machine-readable format, for example when you are dealing with a different service provider.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests.