1.About this Privacy Policy
This Privacy Policy explains how Dilato Technology Ltd, trading as Sourcio (“Sourcio”, “we”, “us” or “our”), collects, uses, stores and shares personal information when you:
- visit sourcio.app, scan.sourcio.app or another website operated by us;
- create or use a Sourcio account;
- start a trial or purchase a subscription;
- use Sourcio’s product-research, wholesale-scanning, deal-discovery, desktop or related services;
- contact our customer-support team;
- join a Sourcio community or participate in a promotion, survey or event; or
- otherwise interact with us.
These websites, applications, tools and related services are referred to collectively as the “Service”.
Dilato Technology Ltd is the controller of the personal information described in this Privacy Policy unless we specifically state otherwise.
We are registered in England and Wales under company number 10960237. Our registered office is Unit 5 The Cloisters, Church Field Road, Sudbury, Suffolk, England, CO10 2YR.
You can contact us about this Privacy Policy or your personal information at info@sourcio.app.
2.The personal information we collect
The information we collect depends on how you interact with the Service.
2.1 Information you provide to us
We may collect:
- your name, email address, telephone number and other contact information;
- your username, password and other account information;
- your business name, role, country and business contact details;
- your subscription, plan and billing information;
- records of your purchases, renewals, cancellations and refunds;
- files, product feeds, search terms, product identifiers, notes and other material you submit to the Service;
- communications you send to us, including support requests and feedback;
- your marketing and communication preferences;
- survey, competition, promotion or event responses; and
- any other information you choose to provide.
Please do not submit unnecessary personal information through product feeds, wholesale files or scanning tools.
2.2 Payment information
Payments may be processed by a third-party payment provider.
The payment provider may collect information such as your payment-card details, billing address and authentication information. We generally receive limited payment information, such as your payment method type, the last digits of your card, payment status and transaction identifiers.
Payment providers process information under their own privacy notices and security procedures.
2.3 Information collected automatically
When you visit or use the Service, we may automatically collect:
- your IP address;
- browser type and version;
- device type, operating system and device identifiers;
- approximate location derived from your IP address;
- referring pages and links;
- pages, features and functions you access;
- searches, scans, uploads and exports performed through your account;
- dates, times and duration of activity;
- application performance, diagnostic and crash information;
- security and authentication events; and
- cookie, local-storage and similar technology identifiers.
We use this information to operate, secure, troubleshoot, understand and improve the Service.
2.4 Information received from other sources
We may receive personal information from:
- payment and billing providers;
- authentication or account-login providers;
- customer-support and communication platforms;
- analytics and security providers;
- business partners or referral partners;
- people within your organisation who create or manage an account for you;
- publicly available business sources; and
- another organisation involved in a merger, acquisition or transfer of our business.
Product, marketplace, supplier and pricing information displayed through Sourcio will not necessarily be personal information. Where such information identifies or relates to an individual, we will handle it in accordance with applicable data-protection law.
3.How we use personal information
We may use personal information for the following purposes.
3.1 Providing the Service
We use personal information to:
- create and manage accounts;
- authenticate users;
- provide trials and subscriptions;
- process searches, scans, files and other requests;
- provide desktop software and account features;
- manage usage allowances and plan limits;
- process payments, renewals, cancellations and refunds;
- provide customer support; and
- send service-related communications.
Our lawful basis is normally that processing is necessary to enter into or perform a contract with you. Where the customer is an organisation, we may rely on our legitimate interests in providing and administering the Service to that organisation.
3.2 Operating, maintaining and improving Sourcio
We use personal information to:
- monitor the performance and reliability of the Service;
- diagnose and repair errors;
- understand how features are used;
- develop and test improvements;
- manage capacity and fair-use limits;
- produce aggregated statistics; and
- conduct internal research and analysis.
Our lawful basis is our legitimate interest in operating, understanding and improving Sourcio. Where required, we rely on consent for information collected through non-essential cookies or similar technologies.
Where practicable, we use aggregated or de-identified information for analytics and product development.
3.3 Security and misuse prevention
We use personal information to:
- protect accounts and login credentials;
- detect suspicious or fraudulent activity;
- prevent misuse, scraping, attacks and circumvention of usage limits;
- investigate security incidents;
- enforce our Website and Subscription Terms; and
- protect Sourcio, our customers and other people.
Our lawful basis is our legitimate interest in securing the Service and preventing fraud and misuse. In some cases, processing may also be necessary to comply with a legal obligation.
3.4 Communications and support
We use contact and account information to respond to questions, investigate problems, provide support and send important information about accounts, subscriptions, security, maintenance or changes to the Service.
Our lawful basis is performance of our contract with you or our legitimate interest in communicating with customers and users.
You cannot opt out of communications that are necessary to administer your account or provide the Service.
3.5 Marketing
We may use your contact information and information about your relationship with Sourcio to send news, product updates, offers, educational material or other marketing communications.
We will rely on consent where consent is required. In other circumstances, we may rely on our legitimate interests in promoting Sourcio to existing or prospective business customers, where permitted by law.
You can unsubscribe at any time by:
- using the unsubscribe link in a marketing email;
- changing available communication settings; or
- emailing info@sourcio.app.
If you unsubscribe, we may retain limited information in a suppression list so that we can respect your preference.
3.6 Legal and regulatory purposes
We may use personal information to:
- comply with tax, accounting and company-law requirements;
- respond to lawful requests from courts, regulators or public authorities;
- establish, exercise or defend legal claims;
- investigate or enforce contractual rights; and
- comply with other applicable legal obligations.
Our lawful basis is compliance with a legal obligation or our legitimate interest in protecting our legal rights.
3.7 Business transactions
We may use or disclose personal information in connection with a proposed or completed financing, investment, reorganisation, merger, acquisition, sale or transfer of all or part of our business or assets.
Our lawful basis is our legitimate interest in managing and developing our business. Any recipient will be required to protect the information appropriately.
4.Lawful bases
Depending on the circumstances, we process personal information on one or more of the following lawful bases:
- Contract: processing is necessary to enter into or perform a contract with you.
- Legitimate interests: processing is necessary for our legitimate business interests or those of another person, provided those interests are not overridden by your rights and interests.
- Legal obligation: processing is necessary to comply with a legal obligation.
- Consent: you have given us permission for a particular use of your information. You may withdraw consent at any time, without affecting processing carried out before withdrawal.
- Legal claims: processing is necessary to establish, exercise or defend legal claims.
Where we rely on legitimate interests, those interests may include providing and improving the Service, supporting customers, securing our systems, preventing fraud and misuse, administering our business and promoting Sourcio.
7.International transfers
Some service providers or systems used to operate Sourcio may be located outside the United Kingdom, or may allow personal information to be accessed from another country.
Where personal information is transferred outside the UK, we will use a lawful transfer mechanism where required. This may include:
- transferring information to a country covered by UK adequacy regulations;
- using the UK International Data Transfer Agreement;
- using the UK Addendum to approved standard contractual clauses; or
- relying on another permitted safeguard or legal exception.
We will also consider whether additional contractual, organisational or technical measures are appropriate.
You may contact info@sourcio.app for further information about the safeguards relevant to your personal information.
8.How long we keep personal information
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, meet legal obligations, resolve disputes and enforce agreements.
Retention periods depend on:
- the nature and sensitivity of the information;
- why it was collected;
- how long an account or customer relationship remains active;
- whether the information is needed to provide requested functionality;
- applicable tax, accounting, limitation and regulatory requirements;
- the risk of harm from unauthorised use or disclosure; and
- whether the purpose can be achieved using aggregated or de-identified information.
Account and subscription information is generally retained while the account is active and for an appropriate period afterwards.
Payment, invoice and transaction records may be retained for the period required by tax, accounting and legal requirements.
Customer-support communications may be retained while needed to resolve an issue, improve support and establish a record of our communications.
Marketing information is retained until you opt out or we determine that it is no longer accurate or necessary. We may retain a minimal suppression record after you opt out.
Customer Content may be deleted or anonymised after account closure in accordance with our operational retention and backup cycles. You should export and retain your own copies of important information before closing an account.
Backup copies may remain for a limited period after information is deleted from active systems. Access to backups is restricted and deleted information will not ordinarily be restored except for disaster recovery, security or legal purposes.
We may retain aggregated or genuinely anonymised information indefinitely because it no longer identifies an individual.
9.Security
We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
These measures may include:
- access controls and authentication;
- encryption in transit and, where appropriate, at rest;
- logging and monitoring;
- software and infrastructure maintenance;
- backup and recovery procedures;
- restrictions on staff and provider access; and
- processes for investigating security incidents.
No internet or storage system can be guaranteed to be completely secure. You are responsible for using a strong password, keeping login credentials confidential and notifying us promptly if you suspect unauthorised access.
10.Your data-protection rights
Depending on the circumstances and applicable law, you may have the right to:
- request access to your personal information;
- request correction of inaccurate or incomplete information;
- request deletion of your personal information;
- request restriction of processing;
- object to processing based on legitimate interests;
- object to direct marketing at any time;
- request transfer of information you provided to us in a structured, commonly used and machine-readable format;
- withdraw consent where processing is based on consent; and
- complain to a data-protection regulator.
These rights are not absolute. We may need to retain or continue processing information where permitted or required by law.
We may ask for information to verify your identity before responding to a request. If a request is made through an authorised representative, we may ask for evidence of that authority.
We will normally respond within one month, although the law may allow more time for complex or numerous requests. We will tell you if an extension is required.
To exercise a right, email info@sourcio.app.
11.Automated decision-making
Sourcio may use automated processes to analyse product, pricing, usage and marketplace information or to identify potential misuse of the Service.
These processes are intended to provide research outputs, operate account features and protect the Service. Sourcio does not use personal information to make solely automated decisions that produce legal or similarly significant effects on individuals unless we provide a specific notice and an appropriate legal basis.
12.Children
The Service is intended for business users aged 18 or over. We do not knowingly offer accounts to or collect personal information from children.
If you believe that a child has provided personal information to us, please contact info@sourcio.app so that we can investigate and take appropriate action.
13.Third-party websites and services
The Service may contain links to Amazon, wholesalers, payment providers, social networks and other third-party websites or services.
Those third parties are responsible for their own privacy practices. This Privacy Policy does not apply to information collected independently by a third party, and we encourage you to read its privacy notice before providing information.
14.Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes to the Service, our practices, technology or applicable law.
We will publish the updated policy and change the “Last updated” date. If a change materially affects how we use personal information, we will provide additional notice where appropriate, such as by email or through the Service.
15.Complaints
Please contact us first if you have a concern about how we handle personal information. We will try to investigate and resolve it.
You also have the right to complain to the Information Commissioner’s Office, the UK data-protection regulator.
- Regulator
- Information Commissioner’s Office
- Website
- https://ico.org.uk/
- Telephone
- 0303 123 1113
If you are located outside the UK, you may also have the right to contact the data-protection authority in your country.
16.Contact us
- Controller
- Dilato Technology Ltd, trading as Sourcio
- Company number
- 10960237
- Registered office
- Unit 5 The Cloisters, Church Field Road, Sudbury, Suffolk, England, CO10 2YR
- info@sourcio.app
- Website
- https://www.sourcio.app/