Privacy Notice

1. Who we are

Show Cloud Connect is an invitation-only B2B trade community for the Toys & Games, Gift, Licensing, Pets, Nursery and Sports industries. It is run by Show Cloud Limited (“Show Cloud”, “we”, “us”), which decides how and why your personal data is used. We are the controller of that data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

• CompanyShow Cloud Limited, registered in England and Wales, company number 10465890
• Registered office1 Beauchamp Court, Barnet, Herts EN5 5TZ
• ICO registrationZB450241
• Privacy contactprivacy@showcloud.co.uk

2. The data we collect

You give us

• Your details: first and last name, work email address, country, job title and job function.
• Your mobile number, if you choose to give it. We use it only to send security codes.
• Your company’s details, if you register a company: company name, headquarters country, primary business function and industries.
• Your password. We store it only in a scrambled (hashed) form that cannot be read back, even by us.
• Messages you send us, for example support requests or complaints.

Created when you use the service

• Sign-in and security data: one-time verification codes, password reset requests, the date and time of sign-ins, IP address, browser and device type.
• Account status: whether your email or mobile is verified and whether your membership is approved.
• How you use the platform, such as pages visited and features used.

From others

• Microsoft, if you choose “Sign in with Microsoft”: your name, work email address and the identifiers Microsoft uses for your account and organisation. Microsoft does not share your Microsoft password with us.
• Your company’s administrator or our team, when approving or managing your membership.

We do not ask for, and you should not give us, any special category data (such as health information).

3. How we use it and why

UK data protection law requires a lawful basis for each use of personal data. Ours are:

Where we rely on legitimate interests, we have balanced our interests against yours. You can ask us for details and you can object (see section 11).

Automated decisions. When you enter your email, our system checks its domain automatically to decide which sign-up screen to show you, and it does not accept personal email addresses. This only decides the next step. It does not decide whether you are accepted; membership approvals are made by a person.

4. What other members can see

Show Cloud Connect is a community, so once your membership is approved other approved members can see your name, job title, job function, company and country. They cannot see your email address, mobile number or password through the platform.

Please only share information you are happy for other members to see. Members who contact each other through the platform are responsible for how they then use each other’s details.

5. News and event emails

We may email you news about Show Cloud Connect, trade events and features relevant to your industries. We send these to business contacts on the basis of our legitimate interests. If you are a sole trader or in a partnership, we send them only where you have not opted out when signing up, or where you have agreed.

You can stop these emails at any time, free of charge, by using the unsubscribe link in any of them or by emailing us. We will keep a note of your email address so we do not contact you again. Account, security and service messages are not marketing, and you will still receive them while your account is open.

6. Who we share it with

We do not sell your personal data. We share it only with:

• Service providers who work for us under contracts that require them to protect your data and use it only on our instructions:
  • website and database hosting: Heart Internet (UK)
  • email delivery (verification codes and service emails): Twilio SendGrid
  • text messages (verification codes): Twilio Verify
  • video hosting: Vimeo (the background video on our sign-in page) and YouTube
  • meeting scheduling: Calendly, if you book a meeting through it
• Microsoft, only if you choose to sign in with Microsoft. Microsoft handles that sign-in under its own privacy statement.
• Other approved members, as described in section 4.
• Professional advisers, such as lawyers, accountants and insurers, where needed.
• Police, regulators, courts or other authorities, where the law requires it or to protect the rights and safety of our members or others.
• A buyer or successor, if all or part of our business is sold or reorganised, under the same protections as in this notice.

7. Transfers outside the UK

Some of our service providers (Twilio SendGrid, Twilio Verify, Vimeo, YouTube (Google), Calendly and Microsoft) may process data outside the UK, including in the United States. When this happens we make sure your data stays protected, either because the UK has recognised the destination as providing adequate protection (including the UK–US data bridge for certified organisations), or by using UK-approved contract terms such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for more details.

8. How long we keep it

We keep personal data only as long as we need it for the purposes above:

We may keep data longer if the law requires it or if it is needed for a legal claim.

9. Keeping it secure

We use appropriate technical and organisational measures to protect your data. These include encrypted connections (HTTPS), hashed passwords, one-time verification codes for sign-in and new accounts, limits on repeated attempts, and access to personal data only for staff and providers who need it. No system is completely secure, so please keep your password private and tell us straight away if you think your account has been misused.

10. Cookies

Cookies are small files stored by your browser. We use:

You can block or delete cookies in your browser settings, but the sign-in will not work without the strictly necessary cookies.

11. Your rights

You have the right to:

• access the personal data we hold about you and get a copy;
• have inaccurate data corrected or incomplete data completed;
• have your data deleted in certain circumstances;
• restrict how we use your data in certain circumstances;
• object to uses based on legitimate interests, and to direct marketing at any time;
• data portability: receive data you gave us in a common electronic format, or have it sent to another organisation;
• ask for a person to review any decision made solely by automated means that significantly affects you;
• withdraw consent at any time where we rely on it. This does not affect anything we did before you withdrew.

To use any of these rights, email privacy@showcloud.co.uk. There is normally no charge. We may need to confirm your identity, and we will reply within one month. For complex requests we can extend this by up to two further months, and we will tell you if we do.

12. Complaints

If you are unhappy with how we have handled your personal data, please tell us first so we can put it right:

• email privacy@showcloud.co.uk with “Data protection complaint” in the subject line, or
• use our online complaint form

We will acknowledge your complaint within 30 days, look into it without undue delay, keep you updated and tell you the outcome.

Make a data protection complaint

You also have the right to complain to the UK data protection regulator, the Information Commission (ICO), at ico.org.uk/make-a-complaint or on 0303 123 1113.

13. Other information

Age. Show Cloud Connect is for business professionals and is not intended for anyone under 18.

Links to other sites. This notice does not cover other websites or services we link to, including Microsoft, Vimeo, YouTube and Calendly. Please read their own privacy notices.

Changes to this notice. We may update this notice from time to time. The date at the top shows when it last changed, and we will tell members about significant changes by email or on the platform.

Our terms. Your use of Show Cloud Connect is also governed by our Terms and Conditions.