Darktrace Limited — Privacy & Data Protection Policy
Darktrace Limited (Darktrace) is committed to protecting and respecting your privacy. Darktrace gather/use and keep information in line with the UK Data Protection Act 1998 (the Act) and all relevant regulations.
For the purpose of the Act, the data controller is Darktrace Limited.
Darktrace may amend this policy from time to time, should it become necessary or advisable to do so.
Information Darktrace may collect from you
Darktrace may collect and process the following data about you:
- Information that you provide by filling in forms on our Site, providing details by registration or other means (eg, giving business cards) at a marketing event, or when setting up administrator accounts in our product or services.
- Darktrace may also ask you for information when you report a problem with our site.
- If you contact us, Darktrace may keep a record of that correspondence.
- Details of your visits to our site including, but not limited to, traffic data, location data and other communication data, and the resources that you access.
Darktrace may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our business partners. This is statistical data about our users' browsing actions and patterns, and does not identify any individual.
Cookies are small text files that websites save to your computer. These pieces of information are used to improve services for you through, for example: (i) remembering settings, so you don’t have to keep re-entering them whenever you visit a new page; (ii) remembering information you’ve given (e.g. your postcode) so you don’t need to keep entering it
Session cookies allow us to track your actions during a single browser session, for example to remember the items returned from a search. They do not remain on your device beyond your session.
Persistent cookies remain on your device between sessions and allow us to authenticate you and to remember your preferences.
Session and persistent cookies can be either first or third-party cookies - a first-party cookie is set by the website being visited. A third-party cookie is issued by a different website to that being visited.
Our website uses a third-party cookie provided by Google Analytics (_GA) to gather anonymised information for the benefit of all web users. Darktrace do not use behavioural targeting cookies. All our cookies fall within the ICC classifications Strictly Necessary, Functionality and Performance and none within the classification Behavioural Targeting.
If at any time you wish to disable our cookies you may do so through the settings on your browser, but if you do so you will not be able to use certain important features of our service.
To learn more about cookies and how to manage them, visit AboutCookies.org .
If you are making a job application or inquiry, you may provide us with a copy of your CV or other relevant information. We may use this information for the purpose of considering your application or inquiry. Except when you explicitly request otherwise, we may keep this information on file for future reference.
Providing products and services
If you purchase or use our products or services, we may use your personal data for purposes which include but are not limited to:
- verifying your credentials,
- carrying out end user compliance checks for export control purposes,
- issuing virus information alerts and other alert messages,
- providing training sessions for which you have registered,
- providing maintenance and technical support,
- providing information about product upgrades, updates and renewals,
- generating logs, statistics and reports on service usage, service performance and malware infection,
- developing and enhancing products, services, and our infrastructure,
- processing orders and generating billing information.
Certain products and services may include features that collect additional personal data for other purposes, as described in the applicable customer agreement. For detailed information, please also refer to the applicable product or service description.
Where Darktrace store your personal data
As a global company, we have international sites and users all over the world. When you give us personal data, that data may be used, processed or stored anywhere in the world, including countries outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA, who work for us or for one of our suppliers. Darktrace places substantial importance on protecting the confidentiality of personal information and seeks the cooperation of all its suppliers in furthering this goal. Darktrace will only transfer personal information to a supplier where the supplier has provided assurances that they will provide at least the same level of privacy protection as is required by this Policy. Where Darktrace has knowledge that a supplier is using or sharing personal information in a way that is contrary to this policy, Darktrace will take reasonable steps to prevent or stop such processing.
We endeavour to hold all personal data securely in accordance with our internal security procedures and applicable law. Darktrace will do our best to protect your personal data, but Darktrace cannot guarantee the security of your data transmitted to our site through the internet; any such transmission is at your own risk. Once Darktrace have received your information, Darktrace will use reasonable procedures and security features to prevent unauthorised access to it.
Uses made of the information
In addition to the above, Darktrace use information held about you in the following ways:
- To provide you with information, products or services that you request from us, or which Darktrace feel may interest you, where you have consented to be contacted for such purposes.
- To carry out our obligations arising from any contracts entered into between you and us.
- To allow you to participate in interactive features of our products or service, when you choose to do so.
- To notify you about changes to our products and services.
We may also use your data, or permit selected third parties to use your data, to provide you with information about goods and services that may be of interest to you and we, or they, may contact you about these by post or telephone.
If you are an existing customer, Darktrace will only contact you by electronic means (e-mail or SMS) with information about goods and services similar to those that were the subject of a previous sale to you.
If you are a new customer, and where Darktrace permits selected third parties to use your data, Darktrace (or they) will contact you by electronic means only if you have consented to this.
If you receive an email which claims to come from us but does not use our domain, or if you are suspicious that an email may not be approved by us, then please send a copy of the email to [email protected] so we can investigate. If you do not want us to use your data in this way, or to pass your details on to third parties for marketing purposes, please tick the relevant box on the form on which Darktrace collect your data.
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that Darktrace do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
Disclosure of your information
Darktrace may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries.
Darktrace may disclose your personal information to third parties:
In the event that Darktrace sell or buy any business or assets, in which case Darktrace may disclose your personal data to the prospective seller or buyer of such business or assets.
If Darktrace Limited or substantially all of its assets are acquired by a third party, in which case personal data held by it about its subscribers will be one of the transfered assets.
You have the right to ask us not to process your personal data for marketing purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms Darktrace use to collect your data. You can also exercise the right at any time by contacting us at Legal Department, Darktrace, Platinum Building, St John’s Innovation Park, Cowley Road, Cambridge, CB4 0DS.
Access to information
The Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act. Any access request may be subject to a fee of £10 to meet our costs in providing you with details of the information Darktrace hold about you.
Changes to our Privacy & Data Protection Policy
Darktrace Limited — Anti-Slavery Policy Statement
This statement is made pursuant to s.54 of the Modern Slavery Act 2015 and sets out the steps that Darktrace Limited has taken and will continue to take to ensure that modern slavery or human trafficking is prevented.
Darktrace Limited applies a zero-tolerance approach to any form of modern slavery. We are committed to acting with transparency in all business dealings, preventing modern slavery taking place within our business or supply chains.
|2||Our Business & Risks|
Darktrace Limited is a Private Limited Company, under the laws of England and Wales. We are a global cyber security company, with offices spanning over five continents. In light of where we do business, where our suppliers are based, and the industry in which we operate, there is a very low risk that modern slavery and human trafficking would affect our business.
A number of internal policies and procedures are adopted throughout the business, showing we are committed to acting with integrity and transparency.
Our process for contracting with suppliers includes checks to remain vigilant to any risk of modern slavery and human trafficking. These may include (but are not limited to):
Our staff are advised and regularly trained to take particular care with organisations that provide services from higher risk territories. Staff are also advised to notify the Darktrace Legal and HR teams immediately if they have any concerns that modern slavery is taking place within the business or supply chain, so that appropriate action can be taken.
|6||Compliance with s.54 of the Modern Slavery Act 2015|
No reports from employees, the public, or law enforcement agencies have been identified to indicate that modern slavery practices are taking place within our business/supply chains. We are continually committed to keeping this policy current and relevant - it will be monitored and reviewed annually.
This statement was approved by a designated Director on 8th March 2018.
8 March 2018