Privacy Policy
Last updated: January 2023
Who we are
Address: 2 Dispensary Lane, Rathfarnham, Dublin, D14 N6Y5, Ireland.
Phone: + 353 87 249 3051
Email: hello@taoclimate.com
Tao Climate Limited is registered in Ireland, number 730527, and governed by trading and environmental regulations of the Republic of Ireland and the European Union. We pay taxes in Ireland.
Our website address is: https://www.taoclimate.com
Data Protection Policy for Tao Climate Limited
Introduction:
At Tao Climate Limited, we are committed to protecting the privacy and security of our customers and their data. This Data Protection Policy outlines the steps we take to ensure the safe and secure handling of personal data stored in our Hubspot CRM.
Data Collection and Use:
- We collect and use personal data only for legitimate business purposes, such as to provide customer support, communicate with customers, and improve our products and services.
- Personal data is defined as any information that can be used to identify an individual, including but not limited to name, email address, phone number, and postal address.
- We do not collect any sensitive personal data, such as racial or ethnic origin, political opinions, religious beliefs, or health information, unless required by law.
Data Storage and Security:
- Personal data is stored in our Hubspot CRM, which is a secure and reliable cloud-based platform.
- Hubspot implements a range of security measures, including encryption, secure socket layer (SSL) certificates, and regular backups, to protect personal data from unauthorised access, theft, or loss.
- We also implement additional security measures, such as access controls and password policies, to further enhance the security of our Hubspot CRM.
Data Access and Retention:
- Access to personal data is restricted to authorised personnel who need it to perform their job functions.
- We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, after which it is deleted or anonymized.
Data Subject Rights:
- Customers have the right to request access to their personal data stored in our Hubspot CRM, and to request its correction or deletion.
- Customers may also request that we restrict the processing of their personal data, or object to its processing altogether.
- To exercise these rights, customers may contact us via email at hello@taoclimate.com.
Data Breaches:
- In the event of a data breach, we will take prompt action to contain the breach, minimise its impact, and notify affected individuals and relevant authorities as required by law.
- We also maintain a data breach response plan, which outlines the steps we will take in the event of a breach, to ensure a prompt and effective response.
Conclusion:
By using our products and services, customers agree to the terms of this Data Protection Policy. If you have any questions or concerns about how we handle personal data, please do not hesitate to contact us at hello@taoclimate.com.
Data Breach Response Plan for Tao Climate Limited
Introduction:
A data breach can have serious consequences for both customers and the reputation of Tao Climate Limited. This Data Breach Response Plan outlines the steps we will take in the event of a breach of personal data stored in our Hubspot CRM.
Step 1: Detection and Containment
- In the event of a data breach, our first priority is to detect and contain the breach as quickly as possible.
- To do this, we will monitor our systems and networks for any unusual activity, and investigate any reports of a breach.
- Once the breach has been contained, we will assess the extent of the breach and determine the types of data that have been impacted.
Step 2: Notification and Communication
- If the breach involves personal data, we will promptly notify affected individuals and relevant authorities as required by law.
- We will also provide regular updates to affected individuals and relevant authorities on the status of the breach and any actions we are taking to mitigate its impact.
Step 3: Root Cause Analysis
- Once the breach has been contained, we will conduct a root cause analysis to determine the cause of the breach and identify any weaknesses in our security measures.
- This analysis will inform any changes we make to our security measures to prevent similar breaches in the future.
Step 4: Data Recovery
- If the breach has resulted in the loss or theft of personal data, we will take steps to recover the data, if possible.
- If recovery is not possible, we will work with affected individuals and relevant authorities to determine the best course of action.
Step 5: Review and Improvement
- After the breach has been fully resolved, we will conduct a thorough review of our Data Breach Response Plan and make any necessary improvements.
- This will help to ensure that we are better prepared for future breaches and that we can respond more effectively.
Conclusion:
A data breach is a serious matter, and we are committed to responding quickly and effectively in the event of a breach of personal data stored in our Hubspot CRM. By implementing this Data Breach Response Plan, we aim to minimise the impact of a breach and protect the privacy and security of our customers and their data.
General Data Protection Regulation (GDPR) Policy for Tao Climate Limited
Tao Climate Limited is committed to protecting the privacy and security of personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This policy outlines our approach to collecting, processing, and storing personal data in our Hubspot Customer Relationship Management (CRM) system.
Definitions:
- “Personal data” refers to any information relating to an identified or identifiable natural person.
- “Processing” refers to any operation or set of operations performed on personal data.
Data Collection and Processing:
- Tao Climate Limited collects personal data only for specific, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
- The personal data collected and processed by Tao Climate Limited includes but is not limited to:
- Names
- Contact information (email, phone number)
- Company information
Consent:
- Tao Climate Limited obtains valid and informed consent from data subjects before collecting, processing, and storing their personal data in our Hubspot CRM.
- Data subjects have the right to withdraw their consent at any time.
Data Security:
- Tao Climate Limited implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing personal data.
- Access to personal data in our Hubspot CRM is restricted to authorised personnel who have a legitimate need to process this data.
- Tao Climate Limited regularly backs up data stored in our Hubspot CRM to protect against accidental or unauthorised destruction or loss.
Data Retention:
- Tao Climate Limited retains personal data only for as long as necessary to fulfil the specific purposes for which it was collected.
- When the retention period has expired, Tao Climate Limited securely deletes or anonymizes the personal data.
Data Subject Rights:
- Data subjects have the following rights with respect to their personal data processed by Tao Climate Limited:
- Right of access
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object
- Right not to be subject to automated decision-making
Contact Information:
- If you have any questions or concerns regarding Tao Climate Limited’s approach to GDPR and data protection, please contact us at hello@taoclimate.com.
Tao Climate Limited reviews this policy regularly to ensure its compliance with GDPR and other applicable data protection laws.
Cookies
What cookies are:
Cookies are little text files which are stored on the browser or hard drive of your computer or mobile device when you visit a webpage or application. Cookies work to make your experience browsing our site as smooth as possible.
There are different types of cookies – some cookies come directly from our website and others come from third parties which place cookies on our site.
Cookies can be stored for varying lengths of time on your browser or device. Session cookies are deleted from your computer or device when you close your browser. Persistent cookies will remain stored on your computer or device until deleted or until they reach their expiry date.
We have 3 varieties of cookies which operate on our website:
1. Strictly Necessary cookies:
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request of services, such as filling in forms. You can set your browser to block or alert you about these cookies, but this might influence the site’s functionality. These cookies do not store any personally identifiable information.
2. Performance cookies:
These cookies allow us to count visits and traffic sources, so we can measure and improve the performance of our site. They help us know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies, we will not know when you have visited our site.
3. Targeting cookies:
These cookies may be set through our site by our advertising partners who may use them to build a profile of your interests and show you relevant adverts on this site or other sites. They do not store personal information directly but are based on uniquely identifying your browser and internet device.
How we use cookies:
We use cookies to enhance your browsing experience by:
- Recognising where and when you visit the site
- Giving you a browsing experience that is unique to you and to serve you content which we believe improves your experience on our site
- Analysing how you use our site which helps us to troubleshoot any problems and to monitor our own performance
Strictly necessary cookies:
The strictly necessary cookies allow you to navigate our site, display the correct page for the device you are using, verify your details when you fill out a form.
Performance cookies:
These cookies are used to track visits to our site and help us measure traffic sources to improve performance. They are also used to optimise the website based on how many visitors navigate through the site. All information collected is anonymised.
Google Analytics:
These are performance cookies used to track visits to our website and movement around the site. The data which is collected is anonymous and is used for benchmarking purposes to monitor the performance of our site and to measure user engagement. We share the anonymised Google Analytics data with selected third parties to assist us in understanding the effectiveness of our website and our marketing efforts.
Targeting cookies:
These cookies are set through our advertising partners and are used to help present you with relevant advertising. No personal information is collected they instead rely on the cookies to identify your internet device and browser details.
How to change cookie preferences or block cookies:
If you wish to disable the cookies, then within your browser you can choose whether you want to accept cookies or not. Different browsers make different controls available to you. Generally, your browser will offer you the choice to accept, refuse or delete all cookies, third-party cookies or specific website cookies. Each browser’s website should contain instructions on how you can do this. For further information please refer to: https://www.aboutcookies.org/how-to-delete-cookies If you block these cookies on our website, you may be unable to access certain areas of our website and certain functions and pages will not work in the usual way.
Changes to the Cookie policy:
We may update this notice from time to time. If we make significant changes, we will update this notice. Check this notice regularly to ensure you are aware of the most updated version.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who we share your data with
We use HubSpot as our CRM (Customer Relationship Management) software, so data you supply to us on forms is stored securely by them.
We use Shopify as our secure retail and account management software, so data you supply when making a purchase is stored securely by them.
We use Google form, email and analytics software. Data supplied by you on Google forms and in email is stored securely by Google. Cookies enabled by Google Analytics are used to supply us with data on website usage.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.