Privacy Policy
Last Updated May 2026
1. Introduction
This Privacy Policy explains how SoftIron Ltd and its affiliated companies (“SoftIron”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects personal data relating to visitors to our website at www.softiron.com (the “Website”).
This Privacy Policy is intended to comply with:
- the UK General Data Protection Regulation (“UK GDPR”);
- the Data Protection Act 2018;
- applicable US federal laws regarding privacy;
- applicable California privacy laws, including the CCPA; and
- where applicable, the EU General Data Protection Regulation (“EU GDPR”).
This Website is informational in nature and allows users to contact us through web forms, email, telephone, or other communications channels.
2. Who We Are
For the purposes of UK GDPR and EU GDPR, the data controller for personal data collected through this Website is:
SoftIron Ltd
United Kingdom
Email: compliance@softiron.com
Where you engage separately with a SoftIron affiliate, distributor, reseller, or service offering, a different entity may act as controller for that specific relationship. Any such arrangement will be communicated separately where required.
3. Personal Data We Collect
We may collect and process the following categories of personal data:
Information you provide directly
Including:
- name;
- company name;
- job title;
- email addresses;
- telephone numbers;
- postal addresses;
- enquiry details;
- correspondence you send to us;
- commercial information you provide to us;
- recruitment or employment application information.
Information collected automatically
Including:
- IP address;
- browser type and version;
- device type;
- operating system;
- referring URLs;
- pages visited;
- date/time of access;
- website interaction and usage data.
Some of this information may constitute personal data and/or personally identifiable information (“PII”) under applicable law.
4. How We Collect Personal Data
We collect personal data:
- when you submit a contact form;
- When you submit information related to a possible business transaction or proposal;
- when you communicate with us by email, telephone, or post;
- when you subscribe to communications;
- when you apply for employment opportunities;
- through cookies and similar technologies;
- from service providers supporting our Website and communications systems;
- from publicly available professional or business sources where relevant to legitimate business activities.
5. How We Use Personal Data
We use personal data for the following purposes:
| Purpose | Lawful Basis |
|---|---|
| Responding to enquiries and requests | Legitimate interests |
| Providing requested information or services | Legitimate interests and/or performance of a contract |
| Website administration, maintenance, and security | Legitimate interests |
| Monitoring website performance and analytics | Consent (where required) and legitimate interests |
| Recruitment and hiring activities | Legitimate interests and pre-contractual steps |
| Compliance with legal and regulatory obligations | Legal obligation |
| Establishing, exercising, or defending legal claims | Legitimate interests |
| Sending marketing communications | Consent where required by law; otherwise legitimate interests |
Where we rely on legitimate interests, we consider and balance any potential impact on your rights before processing your personal data.
6. Marketing Communications
Where permitted by applicable law, we may send you information about our products, services, events, and business activities.
You may opt out of marketing communications at any time by:
- using the unsubscribe link included in communications; or
- contacting us at compliance@softiron.com.
We will not send electronic marketing communications where, as a pre-condition, consent is legally required unless such consent has been obtained.
7. Cookies and Similar Technologies
What Are Cookies?
Cookies are small text files stored on your device when you visit a website.
We use cookies and similar technologies to:
- ensure Website functionality;
- analyse Website usage;
- improve Website performance and user experience;
- remember user preferences.
Categories of Cookies We Use
Strictly Necessary Cookies
These cookies are required for the Website to function properly and do not require consent.
Analytics Cookies
These cookies help us understand how visitors use the Website so that we can improve performance and usability.
Functional Cookies
These cookies remember choices and preferences you make when using the Website.
Advertising or Targeting Cookies
Where used, these cookies help deliver more relevant content or measure advertising effectiveness.
Cookie Consent
Non-essential cookies (including analytics, functional, and advertising cookies where applicable) are only placed on your device after you provide consent through our cookie banner or preference management tools.
You may withdraw or modify your consent at any time through the Website’s cookie settings.
You may also control cookies through your browser settings, although disabling certain cookies may affect Website functionality.
8. Sharing Personal Data
We may share personal data with:
- IT and hosting providers;
- website analytics providers;
- communications and email service providers;
- recruitment service providers;
- professional advisers, resellers, commercial partners, auditors, insurers, and legal counsel;
- regulatory authorities, courts, law enforcement, or government bodies where required by law.
We require service providers processing personal data on our behalf to implement appropriate technical and organisational security measures and to process personal data only in accordance with our instructions.
We do not sell personal data.
9. International Transfers
We and some of our service providers may process personal data outside the United Kingdom or European Economic Area (“EEA”).
Where personal data is transferred internationally, we implement appropriate safeguards as required by applicable law, including:
- adequacy regulations or adequacy decisions;
- the UK International Data Transfer Agreement (“IDTA”);
- the UK Addendum to the EU Standard Contractual Clauses;
- the CCPA (discussed below);
- the EU Standard Contractual Clauses.
You may contact us for further information regarding the safeguards we use.
10. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:
- responding to enquiries;
- maintaining business and legal records;
- complying with legal, tax, accounting, and regulatory obligations;
- resolving disputes and enforcing agreements.
Retention periods may vary depending on the nature of the information and applicable legal requirements.
11. Security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
12. Your Rights
Subject to applicable law, you may have the right to:
- request access to your personal data;
- request correction of inaccurate personal data;
- request erasure of personal data;
- request restriction of processing;
- object to processing;
- request transfer of your personal data to another organisation;
- withdraw consent where processing is based on consent;
- lodge a complaint with a supervisory authority.
In the United Kingdom, the relevant supervisory authority is:
Information Commissioner’s Office
You can contact the ICO through:
ICO website
To exercise your rights, contact:
compliance@softiron.com
We may request proof of identity before responding to requests.
13. Third-Party Websites
This Website may contain links to third-party websites or services.
We are not responsible for the privacy practices, content, or security of third-party websites, and this Privacy Policy does not apply to them.
14. Children
This Website is not intended for children, and we do not knowingly collect personal data from children.
15. Additional Information for California Residents
This section applies solely to residents of the State of California to the extent the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (“CCPA”), applies to SoftIron’s processing activities.
Categories of Personal Information We Collect
During the preceding 12 months, we may have collected the following categories of personal information:
- identifiers, such as name, email address, telephone number, IP address, and online identifiers;
- professional or employment-related information;
- internet or electronic network activity information, such as browsing activity and interactions with the Website;
- geolocation information derived from IP address or device information;
- commercial information relating to enquiries or business interactions;
- recruitment and employment application information.
We collect this information from:
- information submitted directly by users;
- automated technologies such as cookies and analytics tools;
- service providers;
- publicly available business or professional sources.
Purposes for Collection and Use
We may collect, use, disclose, or process personal information for the business and commercial purposes described in this Privacy Policy, including:
- operating and maintaining the Website;
- responding to enquiries and requests;
- communicating with users;
- analytics and Website improvement;
- recruitment and hiring;
- legal compliance;
- security and fraud prevention;
- marketing and business development activities.
Disclosure of Personal Information
We may disclose personal information to:
- hosting and IT providers;
- analytics providers;
- communications and email service providers;
- recruitment service providers;
- professional advisers;
- regulators, law enforcement, or governmental authorities where legally required.
We do not sell personal information for monetary consideration.
We do not knowingly sell or share the personal information of individuals under 16 years of age.
Sensitive Personal Information
We do not use or disclose sensitive personal information for purposes other than:
- providing requested services;
- security and integrity purposes;
- legal compliance;
- other purposes permitted under applicable California law.
California Privacy Rights
Subject to applicable law and verification of identity, California residents may have the right to:
- know the categories and specific pieces of personal information collected about them;
- request deletion of personal information;
- request correction of inaccurate personal information;
- know whether personal information is disclosed or shared with third parties;
- opt out of the sale or sharing of personal information;
- limit the use and disclosure of sensitive personal information, where applicable;
- not be discriminated against for exercising privacy rights.
Because we do not sell personal information or share personal information for cross-context behavioural advertising as defined under California law, we do not currently provide a “Do Not Sell or Share My Personal Information” link.
Exercising California Privacy Rights
California residents may exercise applicable privacy rights by contacting us at:
We may require verification of identity before responding to requests.
Authorized agents may submit requests on behalf of California residents where permitted by law.
In California, the relevant agency is:
The California Privacy Protection Agency
You can contact the CPPA through:
California Privacy Protection Agency (CPPA)
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- legal or regulatory developments;
- operational changes;
- changes to our Website or services.
Updated versions will be published on this page together with the revised “Last Updated” date.
17. Contact Us
If you have questions about this Privacy Policy or our processing of personal data, please contact:
SoftIron Ltd
Email: compliance@softiron.com
If applicable, you may also contact your local data protection supervisory authority.