Tophhie Cloud Trust Center / Policies
Legal & Compliance Active Last updated 5 August 2024

Privacy Policy

This policy explains what personal information Tophhie Cloud collects, why we collect it, and your rights under the UK General Data Protection Regulation (UK GDPR).

Contact details

Data controller

Chris Greenacre — privacy@tophhie.cloud
Address disclosed upon request to the above email address.

Personal information we collect

What we collect depends on the type of account you hold with us.

Internal users

  • → Personal identifiers & characteristics (name, contact details, profile photo, address)
  • → IP address information
  • → Device information (if enrolled in Intune)
  • → Audit information (mailbox activity, storage actions, sign-in attempts, communications)

Guest users

  • → Personal identifiers when provided voluntarily to improve collaboration
  • → IP address information
  • → Audit information (storage actions, account modifications, sign-in attempts)

How we get this information

Most personal information is provided directly by you, or automatically generated by Microsoft. We collect it for the following reasons:

  • → To ensure and improve accuracy and discoverability within cloud services
  • → To reduce false positive alerts relating to your account security
  • → To access secured services that require further information
  • → To audit events and actions carried out within services by your account

We do not receive any personal information indirectly.

How we use your information

  • → Provide you with access to our cloud services
  • → Ensure security of your account and data
  • → Improve collaboration between you and other individuals within the service
  • → Ensure accountability with regard to access to data and services
  • → Provide a personalised support experience
  • → Provide access to services that require heightened security measures

Sharing with third parties

We will only share your information with law enforcement agencies when required under local jurisdiction.

Lawful basis under UK GDPR

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases for processing your information:

a — Your consent.
You can remove your consent at any time by contacting privacy@tophhie.cloud.
b — Necessary to perform a task.
We need it to carry out a specific function on your behalf.
c — Necessary to provide services.
We need it to provide you with the services you have requested.
d — Legitimate interest.
We have a legitimate interest in processing this information.

How we store your information

Your information is securely stored for the duration in which you continue to use our services.

Retention & deletion

Upon receiving a deletion request, we will dispose of your personal information within 30 days.

To request deletion

Contact us at privacy@tophhie.cloud. We have one month to respond to any data subject request.

Your data protection rights

Under UK data protection law, you have the following rights. You are not required to pay any charge for exercising them, and we have one month to respond.

Right of access
Ask us for copies of your personal information.
Right to rectification
Ask us to correct inaccurate or incomplete information.
Right to erasure
Ask us to erase your personal information in certain circumstances.
Right to restriction
Ask us to restrict processing of your personal information.
Right to object
Object to the processing of your personal information.
Right to portability
Ask us to transfer your data to another organisation or to you.

To exercise any of these rights, contact us at privacy@tophhie.cloud.

How to complain

If you have concerns about our use of your personal information, you can contact us directly at privacy@tophhie.cloud.

You can also complain to the ICO if you are unhappy with how we have handled your data:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire
SK9 5AF
0303 123 1113
ico.org.uk

Have a question about this policy?

Reach out to Tophhie Cloud if you have any questions, concerns, or requests relating to this policy. We'll get back to you as soon as we can.

Contact us about this policy