DATA PRIVACY NOTICE
AFLORITHMIC LABS LIMITED (trading as AUDIOSTACK) is the data processor of your personal information and is responsible for complying with data protection laws. In this Privacy Notice, "we", "us" and "our” mean AudioStack.
This Privacy Notice applies to anyone who interacts with us about our services in respect of all personal information we process regardless of the media on which that Information is stored. We take the security of your personal information very seriously and use a combination of technical, organisational and physical security measures to protect it. Our employees receive training to help us comply with data protection law and safeguard your privacy.
If you have any questions, please contact us at firstname.lastname@example.org.
How and why we collect Personal Information
We collect personal information directly from you, including from application forms that you complete, communications between us and your use of our services and websites.
We may also obtain personal information from third parties, including the following:
Publicly available sources including the electoral register and social media;
Providers of marketing and advertising services;
Fraud detection/credit reference agencies.
Types of Personal Information collected
General information – includes your name, date of birth, country of residence/citizenship;
Contact Information – includes your address, telephone number and e-mail address;
Authentication information – includes user identification, passwords and memorable information for accessing our services;
Marketing and communication preferences and customer feedback.
Uses of Personal Information
The main purposes for which we use Personal Information are to:
Communicate with you;
Provide our services to you;
Improve our products and services and maintain information security systems;
Provide marketing information and run promotions in accordance with preferences you have expressed. (For further information see section 11);
Manage feedback and queries, and handle requests to exercise data subject rights;
Manage our business operations, including quality assurance and training, financial analysis and administrative activities in connection with our services;
Comply with applicable legal and regulatory requirements;
Lawful Bases for uses of Personal Information
We will only process personal information fairly and lawfully and for specified purposes. We must have a lawful basis to use your personal information. Our lawful basis for processing your personal information will be one or more of the following:
Performance of a contract – to provide our services in accordance with a contract with you;
Compliance with applicable legal and regulatory requirements;
To operate and improve our services and keep people informed about them;
Consent – where we have obtained appropriate consents to collect or use your personal information for a particular purpose.
Storage and retention
We only keep personal information in an identifiable form for as long as is necessary for the purposes for which it was collected, or where we have a legal obligation to do so. Once we no longer need personal information it shall be deleted or rendered permanently anonymous.
Anonymised and combined information
We may use anonymised information (with all names and other identifying information removed) or information that is combined with other people’s information or reveal it to others for research or statistical purposes. You cannot be identified from this information, and we will only share information in line with legal agreements which set out an agreed, limited purpose and prevent the information from being used for commercial gain.
Security, integrity, confidentiality
We process personal information in a manner that ensures appropriate security of the personal information, including protection against unauthorised or unlawful Processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
In connection with the purposes set out above, we will sometimes share personal information with AudioStack group companies and third parties, including:
Data analysts and providers of information services who support us with developing our services;
Service providers, including those who help operate our IT and back-office systems, and our information security controls;
Some of the organisations we share information with may be located outside of the UK. For further information, please see section 9 on International Data Transfers.
International Data Transfers
Sometimes we, or third parties acting on our behalf, may need to transfer personal information outside the UK to countries that the UK considers will provide adequate levels of Information protection for your personal information (such as countries in the European Economic Area) or to companies with whom adequate safeguards have been put in place. All such transfers will be done in accordance with the terms of an International Data Transfer Agreement (“IDTA”) in the form approved by the ICO. Transfers within the AudioStack group will also be covered by an IDTA.
For more information about Information transfers and the safeguards we have put in place, please contact us at [XX].
We will only market to you with your consent, or when we can use the ‘soft opt-in’ if you have shown an interest in our products and services. This means that you will have either explicitly agreed to receive marketing communications, or that you have engaged with us in a significant way, which allows us to send you some limited marketing messages related to services or products you are interested in.
You have the absolute right to object to direct marketing and you can opt out at any time (see section 11).
Data Protection Rights
You have legal rights under data protection laws in relation to your personal information, depending on the lawful basis for processing, these include:
Right of access: you have the right to make a request for details of your personal information and a copy of that personal information.
Right to rectification: you have the right to have inaccurate information about you corrected or removed.
Right to erasure ('right to be forgotten'): you have the right to have certain personal information about you deleted from our records.
Right to restriction of processing: you have the right to ask us to use your Personal Information for restricted purposes only.
Right to object: you have the right to object to us processing (including profiling) your personal information.
Right to Information portability: you have the right to ask us to transfer the personal information you have given us to you or to someone else in a format that can be read by computer.
Right to withdraw consent: you have the right to withdraw any permission you have given us to handle your personal information. If you withdraw your permission, this will not affect the lawfulness of how we used your personal information before you withdrew permission.
If you make a request, we will ask you to confirm your identity if we need to, and to provide information that helps us to understand your request better.
We will always explain to you how we are dealing with your request. In some circumstances (such as the right to erasure or withdrawal of consent), exercising a right might mean that we can no longer provide our services to you.
For further information about or to exercise any of your rights, please contact us at [XX]
If you have any concerns about our use of your personal information, you can make a complaint to us at [XX].
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
12. General sub processors
We work with the following sub processors at AudioStack. Following is a list of using this format:
Description of processing
12.1 General subprocessors
Amazon Web Services, Inc.
410 Terry Avenue North Seattle, WA 98109, USA
Web hosting provider, data storage and compute for audio processing services.
1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Company communication, text to speech and web usage analysis services
Slack Technologies, Inc.
4th Floor, One Park Place, Hatch Street Upper, Dublin 2, Ireland
Company communication and content moderation management
Stripe Payments Europe, Ltd
One Spencer Dock, North Wall Quay, Dublin 1
One Front Street, 28th Floor, San Francisco, CA 94111, USA
User tracking and analytics reporting services
675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA
User notification services
292 Ivy St Suite F San Francisco, CA 94102 United States
Business Intelligence Software and Internal tools
101 Spear St FL 1. San Francisco , CA, 94105-1580, USA
Customer data platform and analytics reporting services
WeWork Dublin Landings N Wall Quay, North Dock (#3-121) Dublin, D, D1, Ireland
Data processing and data storage services
12.2 External TTS and Speech Recognition subprocessors
113 Cherry St, Ste 52562, Seattle, WA 98104, USA
Text to speech provider
233 Mountainberry Rd, Brampton, Ontario, L6R 1W3, Canada
Text to speech provider
651 N Broad St, Suite 201 New Castle County Middletown, Delaware 19709 United States
Text to speech provider and Voice Cloning
3180 18th St. San Francisco, California 94110
Text to speech provider and providing large language models
Microsoft Ireland Operations Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland
Text to speech and speech to text provider
200 Shelbourne Rd, Dublin, DUBLIN4, Ireland
Text to speech provider
151 Wardour Street Soho London W1F 8WE, UK
Text to speech provider
CereProc Ltd Codebase Argyle House
3 Lady Lawson Street Edinburgh EH3 9DR, UK
Text to speech provider
576 Vanderbilt Avenue, apt. 4, 11238 NYC, USA
Text to speech provider and voice cloning provider