DIGITAL PRIVACY CENTRE

Data Privacy Policy

We comply with EU GDPR and follow industry-leading standards, including ISO 27001, to ensure your data is protected at every stage.

What data we collect?

We may collect and process personal data when you use our services or interact with our websites. This includes:

  • Contact information: Name, title, email address, company/organization, and work phone number.
  • Website and system usage data: IP address, browser type, actions taken on our websites, and cookies (with consent).
  • Billing information: Company name and billing address when purchasing services.
  • Mobile device data (if relevant): Only with your explicit consent, e.g., camera, location, or contacts used specifically for service features.

We collect only the information necessary to provide our services and comply with legal obligations.

How We Use Your Data?

Thesis SM uses personal data for specific purposes, including:

  • Service delivery: To provide, manage, and improve our software and services, including invoicing, customer support, training, and professional services.
  • Third-party engagement: Sharing data with service providers only when required to perform services on our behalf, under strict contractual obligations.
  • Legal and compliance: To meet statutory, regulatory, and contractual obligations.
  • Marketing and communications: To send you relevant information about our products, services, and events, if you have consented.

We always ensure that any data use is compatible with the purpose for which it was collected.

Security Measures

We take all reasonable steps to protect data from unauthorised access, alteration, disclosure, or destruction. Our security measures include:

  • Controlled access for employees involved in service delivery.
  • Protection of data stored electronically or manually.
  • Procedures to respond promptly in case of a data breach.

Your Rights

Under applicable law, you have rights regarding your personal data:

  • Access and obtain a copy of your personal data.
  • Request correction or deletion of inaccurate data.
  • Object to certain processing or withdraw consent.
  • Request data portability in a structured, machine-readable format.
  • Request restriction of processing in some circumstances.

You can exercise these rights by contacting our privacy team at: privacy@thesiscloud.com

Data Retention 

We retain personal data only as long as necessary for service delivery, legal compliance, and contractual obligations. Where laws require specific retention periods, we follow those requirements.

RAISE A CONCERN

Contact and Complaints 

For any questions, concerns, or complaints regarding data processing:

You also have the right to lodge a complaint with the relevant supervisory authority if your data protection rights are not met.

More details about our Data Privacy Approach are available in our Data Privacy Notice and Privacy Policy.