Privacy Notice
How we handle personal information when you visit our website, enquire about i360 Connect or use our services.
Last updated: 6 November 2026 · i360 DigiTech Limited · Contact: hello@i360digitech.uk
1. Who we are
i360 Connect is a product of i360 DigiTech Limited (the “provider”, “we”, “us”). We act as a controller for our own website, sales, account administration and billing data. For personal information that customer organisations upload or manage within their workspaces, the customer will generally be the controller and we will generally act as processor under a separate Data Processing Agreement (DPA). Roles depend on the particular processing activity.
2. Information we collect
We may process your name, work email, organisation, job title, contact details, enquiry content, account credentials or authentication identifiers, usage and diagnostic logs, device and security information, billing/subscription records, and content you or your organisation choose to provide. Connected Microsoft 365 or Google data is accessed only to the extent permitted by the integration configuration and granted authorisations.
3. Purposes and lawful bases
We use personal data to answer enquiries and provide demonstrations (legitimate interests or steps before a contract); manage accounts, subscriptions and support (contract or legitimate interests); meet tax, accounting and legal duties (legal obligation); protect the platform, detect abuse and maintain audit records (legitimate interests); and send optional marketing where permitted by applicable law (consent or another applicable lawful basis). We will document the applicable lawful basis for each processing activity.
4. Sharing and service providers
Data may be processed by hosting, authentication, database, payment, email, analytics and support providers as necessary for delivery. Microsoft and Google integrations are governed additionally by their respective permissions and policies. We do not sell personal information. A current list of material subprocessors and their processing locations should be made available to customers before onboarding.
5. International transfers
Where personal data is transferred outside the UK or EEA, we will assess the destination and apply an appropriate transfer mechanism where required, such as UK International Data Transfer Agreements or Addenda, EU Standard Contractual Clauses and supplementary safeguards. International customer data-residency commitments must be agreed separately.
6. Retention
We retain personal data only for as long as needed for the relevant purpose, contractual requirements, security and legal obligations. Customer workspace retention, export and deletion arrangements are governed by the service agreement and DPA. A detailed retention schedule must be confirmed before live customer onboarding.
7. Your rights
Subject to applicable law, individuals may request access, correction, deletion, restriction, portability, object to certain processing, or withdraw consent where consent applies. Contact us using the address below. UK individuals may complain to the Information Commissioner’s Office (ico.org.uk); EEA individuals may contact their relevant supervisory authority.
8. Security and incidents
We use appropriate organisational and technical safeguards proportionate to risk, including access controls and security monitoring. No online service is risk-free. Where a notifiable breach occurs, we will follow applicable reporting duties and contractual notification requirements.
9. Children and sensitive data
The service is intended for organisational use and is not directed at children. Customers must not upload special-category, children’s or highly sensitive information unless the relevant service configuration, lawful basis, risk assessment and contractual safeguards expressly support that processing.
10. Changes and contact
We may update this notice as services change. Privacy enquiries and rights requests: hello@i360digitech.uk. Before onboarding, the provider must publish its verified registered office, company registration number and any required representative or DPO contact details.