Privacy Policy

Effective Date: 1st January 2025
Company Name: XMP SaaS Limited
Registered Office: 13 Ryecroft Way, Martley, WR6 6BF
Data Protection Registration Number: CSN5110384

1. Introduction

This Privacy Policy explains how XMP SaaS Limited("we", "us", or "our") collects, uses, and protects your personal data when you use our Platform, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. XMP Saas Limited as Data Controller

XMP SaaS Limited as Data Controller

For the purposes of the UK Data Protection Act 2018, the UK General Data Protection Regulation (UK GDPR), and the EU General Data Protection Regulation (EU GDPR), XMP SaaS Limited is the Data Controller of your personal data.

This means that we determine the purposes and means of processing your personal data.

In certain limited circumstances, where we process personal data strictly on behalf of our customers and according to their instructions, we act as a Data Processor. In such cases, we comply with the applicable obligations of a Data Processor under data protection laws.

If you have any questions about this role or your data rights, you can contact us using the details provided in the "Contact Us" section of this Privacy Policy.

Contact for Data Protection: Robin Conway

3. Information We Collect

We may collect and process the following types of data:

• Personal      Information: Name, email, address, phone number
• Account      Data: Login credentials, profile info
• Device      Data: IP address, browser type, operating system
• Usage      Data: Interactions with our software, error logs
• Payment      Data: If applicable, securely handled by third-party payment      processors

We may generate and use aggregated, anonymised information derived from your use of the Platform ('Aggregated Data') for internal business purposes, including to improve, develop, and market our services. Aggregated Data does not directly or indirectly reveal your identity and is not considered personal data under applicable data protection laws.

4. How We Use Your Information

We process your data for the following purposes:

• To      provide, maintain, and improve our services
• To      manage your account and provide customer support
• To      send service updates and marketing (with consent)
• To      comply with legal obligations
• To      detect and prevent fraud and misuse

5. Legal Basis for Processing

Under the UK GDPR, we rely on the following lawful bases:

• Contractual      necessity (e.g., to provide the service)
• Legitimate      interests (e.g., security, service improvement)
• Consent     (e.g., marketing communications)
• Legal      obligation (e.g., tax or regulatory compliance)

6. Data Storage & International Transfers

Your data may be stored on secure servers located in the United Kingdom or the European Union, depending on the location of our data hosting providers.

If data is transferred outside the UK or EU, we will ensure adequate safeguards are in place, such as Standard Contractual Clausesapproved by the UK Information Commissioner’s Office or the European Commission.

7. Data Sharing

We may share your data with:

• Trusted      third-party service providers (e.g., hosting, analytics)
• Payment      processors (e.g., Stripe, Apple, Google)
• Legal      or regulatory authorities if required

We will never sell your data.

8. Data Retention

We retain your data only as long as necessary to fulfil the purposes outlined in this policy or as required by law.

9. Your Rights

Under the UK GDPR, you have the right to:

• Access      your data
• Rectify      inaccurate data
• Erase      your data (“right to be forgotten”)
• Restrict      or object to processing
• Data      portability
• Withdraw      consent at any time

To exercise your rights, contact: robin@xmp.world

10. Children’s Data

Our Platform is not intended for children under 13. We do not knowingly collect data from minors.

11. Security

We implement appropriate technical and organisational measures to secure your personal data, including encryption, access controls, and secure hosting environments.

12. App Store Compliance

Our privacy practices comply with the requirements of both the Apple App Store and Google Play Developer Programme, including transparent disclosures and appropriate user consent mechanisms.

13. Changes to this Policy

We may update this Privacy Policy periodically. You will be notified of material changes, and continued use of the Platform indicates acceptance.

Contact Us for Privacy Queries:
XMP SaaS Limited
Email: robin@xmp.world
Address: 13 Ryecroft Way, Martley, WR6 6BF