Privacy Policy

Version 1.2 – Last updated 21 April 2021

General

Good Business Pays (“Good Business Pays”, “we” and “us”, and “our”) is committed to protecting your personal data and respecting your privacy. This privacy policy (“Privacy Policy“) explains the type of personal information that we collect via our website goodbusinesspays.com (the “Website”), how we will use it in accordance with the GDPR and any other data protection legislation that applies to us in the UK, such as the Data Protection Act 2018 (“Data Protection Legislation”).  

Please be sure to carefully read this Privacy Policy in its entirety before using or submitting information to the Website. This Website is not intended for children and we do not knowingly collect personal information relating to children. You, which in the case of an individual user that is employed by or otherwise works on behalf of one or more organisation(s), includes those organisation(s) (together “you” and “your”) agree to be bound by this Privacy Policy on the date that the user first uses the Website (that date being the “Effective Date”). Whenever you submit personal information via the Website or otherwise provide us with or make personal information available to us in the circumstances described in this Privacy Policy, you acknowledge that it will be collected, used and disclosed in accordance with this Privacy Policy.  If you object to the terms of the Privacy Policy, you cannot use the Website and you must cease using it immediately. 

You warrant and undertake that: (i) you have full capacity and authority to agree to be bound by the Privacy Policy (including, in the case of an individual user, on behalf of the organisation(s) that the user works for); (ii) you have and will maintain all necessary licences, consents and permissions necessary for the performance of your obligations under this Privacy Policy; and (iii) you will comply with applicable laws and regulations with respect to your activities under this Privacy Policy.

We also recommend that you read this Privacy Policy whenever you visit the Website as we may, without prior notice to you, update or amend this Privacy Policy from time to time to reflect any changes in how we collect, use or share your personal information. If Good Business Pays makes any material changes to the way Good Business Pays collects, uses or shares personal information, we will communicate those changes to you. Your continued use of the Website following the effective date of a change to this Privacy Policy signifies your acceptance to the terms of the revised Privacy Policy. This Privacy Policy has been revised at the “Last Updated” date displayed at the top of this Privacy Policy. All changes will be effective when posted at goodbusinesspays.com/privacy-policy and are binding on you from that date. The current version of the Privacy Policy will be displayed on this page.

Information about us and our role

The controller responsible for the processing of personal information described in this Privacy Policy under applicable Data Protection Legislation is Good Business Pays CIC, a company registered in England and Wales with its registered address 45 Lemon Street, Truro, Cornwall TR1 2NS. 

If you wish to contact us about this Privacy Policy or you have any queries about how we use personal information we collect via the Website, please contact us at info@goodbusinesspays.com

Information we collect about you

This section explains how we collect personal information about you, the types of personal information we may collect, how we may use it, the legal basis upon which we process it. We will use and process personal information lawfully, fairly and in a transparent manner.  We will collect and use personal information solely for the specified and legitimate purposes stated in this Privacy Policy.

Where we have stated that it is necessary for our legitimate interests to process your personal information, we have made sure to check that such legitimate interests are not overridden by your interests or fundamental rights and freedoms. You can obtain further information about how we assess these legitimate interests against any potential impact on your interests or fundamental rights and freedoms by contacting us at gbp.privacy@previ.se.

Personal information you submit to us when you sign-up / become a registered user of the Website

Types of personal information collected: We will collect your first and last name, your email address, and the name of the organisation you work for.

Our purposes for the collection:

Once you sign-up to the Website, we will process your personal information to:

provide updates on the progress of the Good Business Pays portal campaign and to provide you with the opportunity to submit your views and opinions on how the campaign can be improved: and

provide you with opportunities to share experiences of invoice payment practices with certain organisations, such as invitations to complete surveys or to participate in case studies based on particular negative of positive experiences; and

provide you with insights on payment practices of organisations that are required to file reports on their payment practices to the Department for Business, Energy and Industrial Strategy; 

Where you are a corporate user: We will process your personal information in these ways for our legitimate interests and/or the legitimate interests of third parties, including other users of the Website.  You are entitled to object to us contacting you for each of these purposes or to amend communication preferences by contacting us at info@goodbusinesspays.com

Where you are an individual subscriber: We will process your personal information in this way where you have consented to receive each of these marketing communications from us. You are entitled at any time to withdraw your consent to receiving these marketing communications from us at any time by clicking the “unsubscribe” link provided in our marketing messages. Objecting to receiving marketing communications will not affect our use of the personal information prior to you objecting but it will mean that we will not be able to contact you about news and thought leadership.

We will also process this personal information for our legitimate interests and/or the legitimate interests of third parties, including other users of the Website to:

monitor and compile statistical and other information related to the performance, operation and use of the Website; 

corroborate, match with or enrich personal information held by us for the purposes of identifying, establishing and managing business relationships;

conduct security and operations management activities; and

address other business needs such as website administration maintenance and support, fraud prevention, acceptable use monitoring, legal compliance and business continuity.

Personal information you submit to us when you complete a survey on the Website 

Types of personal information collected: We will collect your first and last name, your email address, your telephone number, your rating indication and any personal information contained in the further feedback section of the survey.

Our purposes for the collection: We will process your personal information for our legitimate interests or the legitimate interests of third parties, including other users of the Website, to:

enable you to access various features of the Website and to configure and improve the quality, content and overall user experience of the Website;

developing Website insights on payment practices of organisations; 

monitor and compile statistical and other information related to the performance, operation and use of the Website;

corroborate, match with or enrich personal information held by us for the purposes of identifying, establishing and managing business relationships;  

conduct security and operations management activities; and

address other business needs such as website administration, maintenance and support, fraud prevention, acceptable use monitoring, legal compliance and business continuity.

Personal information we collect from your browser and your device when you visit the Website 

Types of personal information collected: As you navigate through the Website, we will automatically collect information about your interaction with the Website such as your IP address, traffic data, clickstream information, time stamp, location data, web logs, other communication data and the resources that you access when you visit the Website and your browser or other applications on your device interact with it. We automatically collect this data using various technologies such as cookies, web logs and beacons as described below in Clause 3.5 and we will record such information on our server logs from your browser. This information allows us to better tailor our content to users’ needs and is only gathered while you are on the Website and can constitute personal information under Data Protection Legislation. We automatically receive and record such information on our server logs from your browser.  As discussed below, we use this information to diagnose problems with our server, report aggregate information for statistical analysis, determine the fastest route for your computer to connect to the Website and administer and improve the Website.

Our purposes for the collection: To the extent we collect personal information by conducting the activities described above, we will process it to:

operate our Website and to protect the security of our Website.We will use your personal information in this way because it is in our legitimate interests to operate this Website and keep it secure;

enable the Website to recognise you when you return to our Website, to remember your preferences, and to show you content based on your preferences. We will use your personal information in this way if you have consented to our use of functionality cookies, as further explained below in Clause 3.5; 

enable the Website to recognise and count the number of visitors and to see how users interact with the Website.We will use your personal information in this way if you have consented to our use of analytics cookies, as further explained below in Clause 3.5.

Personal information which collect from you where you contact us directly

Types of personal information collected: We may collect your first and last name, your email address, and the name of the organisation you work for where you contact us directly with respect to a certain query relating to the Website.

Our purposes for the collection: We will process your personal information for our legitimate interests or the legitimate interests of third parties, including other users of the Website, to:

contact you, if we receive a request to contact you or to send you any requested information; and

manage our relationship with you.

Cookies and other tracking technologies

About cookies

The Website uses “cookies” to enhance your use of the Website and to monitor your activity during your visit(s) to the Website. Cookies are small text files that are stored on your browser and the hard drive of your computer, mobile or other device. The cookies store information about your visit to the Website and distinguish you from other users. Our use of cookies allows us to provide you with a better experience when you browse the Website. The use of cookies also helps us to display content on the Website and also allows us to obtain and analyse statistics about the use of the Website so that we can improve it.

The use of cookies allows us to personalise the Website’s content for you and remember your preferences. It also allows you to participate in interactive features on the Website, when you choose to do so.

We use a third-party consent management tool (Quantcast Choice) that allows you to control which partners and associated cookies are permitted whilst using our site. 

By clicking “Agree” or choosing “More options” and then “Agree to selected” on the Quantcast Choice consent management tool, you consent to our use of cookies as explained within that tool and in this Privacy Policy. 

You can withdraw your consent to our use of cookies at any time by clicking the “Privacy” settings button in the bottom right of your screen and changing your settings.  For the avoidance of doubt, withdrawing your consent will not affect our use of your personal information processed using those cookies prior to you withdrawing that consent.

The cookies set from our Website

The following table sets out the types of cookies used on the Website and provides detail about what they are used for. When you use the Website for the first time, cookies which are essential to making the Website operate (see those identified as “strictly necessary cookies” below) will have been set but other cookies will not have been set unless you agreed to those cookies being set at that time. If you have agreed to accept cookies, then the Website will remember this and continue to set cookies each time you visit.

Some cookies are deleted when you close your browser. These are known as session cookies. Others remain on your device until they expire or you delete them. These are known as persistent cookies and enable us to remember things about you as a returning visitor, particularly if you wish to be remembered so you do not have to click on a link on every time you visit the Website. If you do not want cookies to be stored, then you may turn off certain cookies listed below individually, or you can select the appropriate options on your web browser to delete some or all cookies. Please note, however, that if you block some or all cookies (including strictly necessary cookies) you may not be able to use or access all or parts of the Website, such as being able to access specific areas.

Strictly necessary

Strictly necessary cookies are required to operate our website or payment services and to protect the security of our services. They enable you to log into secure areas of our website or help us prevent and detect fraudulent transactions and other violations of our terms.

WordPress 
wordpress_logged_in_#   wordpress_sec_# wordpress_test_cookie wp-settings wp-settings-timeWe use WordPress to manage content on our website. These cookies are used to manage your account and logged in status if you have registered as a user.   For more information refer to WordPress cookie policy
Mailchimp
_abckUsed to detect and defend against replay-cookie-attacks – The cookie is necessary for the security and integrity of the website. 
bm_szUsed in context with the website’s BotManager. The BotManager detects, categorizes and compiles Reports on potential bots trying to access the website. 
Functionality

Functionality cookies are used to recognise you when you return to our services, to remember your preferences, and to show you content based on your preferences.

SurveyMonkey

Name
Description
ep201
Set by load balancer. User tracking for abuse and troubleshooting problems.



RP_XXXXXXXX
Enforces the one response per computer setting.
sso_user
Determines if certain Enterprise respondents are authenticated if an account holder requires respondents to authenticate.
CX_XXXXXXXX and P_XXXXXXXX
Used for pop-up surveys to track whether the survey was already taken to avoid re-showing the pop-up.
sm_ir
 
MailChimp
MCPopupClosed
Cookie set by MailChimp newsletter service to enable subscription pop-up window function. Expiration time is 1 year.
MCPopupSubscribed _mcidCookie set by MailChimp newsletter service to enable subscription pop-up window function. Expiration time is 3 months. This cookie registers data on the visitor. The information is used to optimize advertisement relevance. 


Vimeo 
vuidWe use Vimeo to help display videos on our site. Vimeo places cookies to track statistics about how these videos are used.   You can opt out of Vimeo’s cookies or learn more on the Vimeo Cookie Policy.
Analytics

Analytics cookies allow us to recognise and count the number of visitors and to see how visitors move around our website and interact with our payment interfaces. Some of the tools we use provide us only with information about trends and aggregate user behaviour.

Google Analytics 
_dc_gtm_UA-#   _ga _gat _gid collectWe use Google Analytics to understand the behaviour of visitors who interact with our site and content. Google provides us with a dedicated service (that is, they do not use this information for their own purposes) and it is used on an aggregated basis (that is, no individuals can be identified from the data).   You can learn more about opting out of Google’s cookies and how Google uses cookies.




Lucky Orange 
__lotl   _lo_uid _lo_v _lo_session_inWe use Lucky Orange to analyse behaviour on the website using either aggregate data to build (for example) heatmaps of where users typically click, or recordings to show how an anonymous user interacted with the site or a form. All data and information is scrambled and anonymised before leaving your computer.   This site uses the Lucky Orange analytics system to help improve usability and the customer experience. Lucky Orange may record mouse clicks, mouse movements and scrolling activity. Lucky Orange may record keystroke information that you voluntarily enter on this website. All this information is anonymised, all screen text is scrambled and no identifying information is collected or sent from your computer (not even your IP address). Lucky Orange does not track this activity on any site that does not use the Lucky Orange system. You can opt out of Lucky Orange cookies or learn more on the Lucky Orange Cookie Policy.
Scorecard Research 
UID   UIDR _gaScorecard research cookies relate to ComScore web metrics and performance monitoring. This information is aggregated and made available as benchmarks for digital marketers.   You can find out more about Scorecard research’s privacy policy and use of your date


Twitter
 
_ga   _twitter_sess eu_cn guest_id personalisation_id tfw_expCookies placed by Twitter are used to track and analyse the content we display on our website that comes from their platform. Twitter also uses cookies to personalise your experience and remember preferences (such as your language).   For more information refer to Twitter’s cookie policy
YouTube 
GPS   PREF VISITOR_INFO1_LIVE YSC yt.innertube::nextId yt.innertube::requests yt-remote-cast-installed yt-remote-connected-devices yt-remote-device-id yt-remote-fast-check-period yt-remote-session-app yt-remote-session-nameWe use YouTube to display videos on our site. YouTube places this cookie to remember your history and preferences and optimise how they deliver content. This includes using cookies to estimate the users’ bandwidth on pages with integrated YouTube videos and creating a unique ID to keep statistics of what videos from YouTube the user has seen.   You can learn more about opting out of Google’s cookies and how Google uses cookies.
Advertising

We use online advertising to keep you aware of what we’re up to and to raise awareness and engagement of the Good Business Pays online portal. Advertising cookies and/or pixel tracking are used on our website to tailor marketing to you and your interests and provide you with a more personalized service in the future. 

These cookies and/or pixels are used to remember that you visited our website, and we share this information with third parties, such as advertisers. Although these cookies and/or pixels can track your device’s visits to our website and other sites, they typically cannot personally identify you.

You may see Good Business Pays banners and ads when you are on other websites and apps, such as Facebook, Instagram, LinkedIn and Twitter. We manage this through a variety of digital marketing networks and ad exchanges. We also use a range of advertising technologies. The banners and ads you see are based on information we hold about you, or your previous use of the Good Business Pays portal or ads you have previously clicked on.  

Facebook Custom AudiencesWe use Facebook Custom Audiences to deliver targeted advertisements to individuals who visit our websites.

How to disable cookies and block other tracking technologies

We have adopted the Quantcast consent management tool in order that you can pre-emptively block tracking technologies such as pixels/cookies within our sites. 

To do this, please visit the partner section of the Quantcast consent management tool to review and disable 3rd party tracking. If you have already consented, you can use the privacy button on the bottom right of your screen to revisit and review your settings.

Please note withdrawing your consent to our use of cookies will not affect our use of your personal information processed using those cookies/pixels prior to you withdrawing that consent. Additionally, if you would like to disable cookies, you can set your web browser to reject cookies. However, if you disable the cookie function, you may not be able to access or receive all the information contained on the Website.  

Third party cookies

Please note that Google and other third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies as a result of you visiting other websites, over which we have no control.

Sharing of personal information with third parties

We may share your personal information with the following third parties:

Our Affiliates;

Our or any of our Affiliates’ accountants, insurers, auditors, partners and managers;

Our or any of our Affiliates’ legal advisers and representatives for the purposes of establishing, exercising, and defending our legal rights and obligations and otherwise taking legal advice;

Our or any of our Affiliates’ service providers and sub-contractors, including: 

Amazon Web Services;

Zoho Corporation Pvt. Ltd (“Zoho”); and

SurveyMonkey;

Mailchimp

To those third parties where we are required to do so by law or court order or in response to reasonable enquiries from or as a result of cooperating with any governmental, banking, taxation, supervisory authority, industry association or other similar body or by the rules of any stock exchange;

To law enforcement and fraud prevention agencies;

Professional service providers, such as marketing agencies, advertising partners and website hosts, who help us run, market and promote our business.

Records of personal information

We will keep a record of personal information for the purposes described in this Privacy Policy. We will keep a copy of personal information held for the specific purpose for which it was provided, until this has come to an end and we no longer need to comply with a legal obligation that requires us to retain personal information. We will delete our copy of personal information 24 months after the termination of our relationship with you or after a longer period as required to comply with a legal obligation, although we still may retain a record of the existence of the relationship, to the extent that and for so long as we are required to do so by law.  For example, if you have contacted us to ask for your personal information to be erased, we will retain a record of your request in order to ensure that we comply with your wishes.  

In particular, personal information which we collect though surveys, including any subsequent analysis data, will be retained by us for 24 months from the date on which the survey was undertaken, after which time any personal information shall be deleted. With respect to personal information which you provide to us as part of sign-up to the Website or when subscribing to receive any updates on our Good Business Pays initiative, we shall retain this personal information until you decide to delete your account or unsubscribe from receiving updates/communications from us.  

Should we receive personal information about an individual who is not a registered user of the Website, this personal information will be deleted or anonymised after a period of 6 months from the date it was first received.

International transfers of personal information

We only store and process your personal information in the UK, except as outlined below. 

We may transfer your personal information to:

the EEAfor the provision of data hosting services by Amazon Web Services;and 

services providers such as Zoho, SurveyMonkey and Mailchimp in the United States.

Whenever we transfer your personal information outside of the UK, we ensure a similar degree of data protection is afforded to that provided in the UK by ensuring at least one of the following safeguards is implemented:

We will only transfer your personal information to jurisdictions which the UK Government has determined offers an adequate level of data protection (an “Adequate Country“); or

Where we transfer personal information internationally other than to an Adequate Country, we shall ensure that appropriate safeguards are in place to make sure the personal information is afforded a similar level of data protection as afforded in the UK, which may include the implementation of standard contractual clauses with the data importer. 

If you would like to receive more information about the safeguards applied to international transfers of personal information, please contact us at gbp.privacy@previ.se

Security

We have implemented appropriate technical and organisational measures on our servers, which are designed to protect personal information from accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal information transmitted, stored or otherwise processed.

You should keep in mind that internet transmissions (including emails) are never completely secure or error-free. As such, you should take steps to protect yourself, especially online and take special care in deciding what information you send to us via e-mail or other transmissions. Where you use weblinks, usernames or ID numbers, passwords or other credentials to access features or areas on the Website, it is your responsibility to safeguard them. You should choose a strong password for your device, do not use the same password that you use elsewhere and do not share your password with anyone else.  Also, if you are a registered user of the Website, make remember to sign out and close your browser window when you have finished using the Website to ensure that others who may have access to your computer cannot access any personal information.

Whilst we may take any information provided by you into account, only we will determine the content of any related statements and any required notices to the affected data subjects and/or the relevant supervisory authorities in connection with a personal data breach in relation to the personal information.

Links to other websites

This Website may contain links or references to other websites. Please be aware that we do not control other websites and, except as otherwise noted in the applicable website, this Privacy Policy does not apply to those websites. We encourage you to read the privacy and cookie policy of every website you visit. We are not responsible for the security or privacy of any information collected by these third parties.

We may offer certain “share”, “social media” or “email a friend” functionality on this Website. If you choose to use these functions, we may and/or the third-party social media networks may collect certain information about you depending on the function or feature you use. With respect to the social media features (such as allowing you to post information about your activities or share your information with others on a social media site), the collection and use of information by and your interactions with the third-party social media network will be governed by the privacy policy of the company providing those social media features. We are not responsible for the security or privacy of any information collected by these third parties.

Your obligations

You warrant, represent and undertake to us:

that you have, in all respects, complied with your obligations under applicable data protection laws (including the Data Protection Legislation) with respect to any personal information you upload to the Website to permit our processing of it;

that any personal information that you provide or otherwise make available to us is true, complete and up-to-date;

that you are entitled to transfer any personal information to us so that we may lawfully use, process and transfer the personal information in order to provide the Website and carry out our other rights and obligations under this Privacy Policy;

there is and will continue to be no prohibition or restriction in relation to our use of the personal information that would prevent or restrict the processing of personal information which you provide to us or the purposes described in this Privacy Policy.

If any of the personal information that you have provided to or made available to us changes (for example if you change your contact details) then you will promptly notify us by sending an email to gbp.privacy@previ.se 

You indemnify and will keep us (the “Indemnified Party”) indemnified against all Liabilities sustained or incurred by the Indemnified Parties as a result of the occurrence of any of the following:

your failure to comply with any of your obligations under this Privacy Policy and our enforcement, exercise or protection of our rights under this Privacy Policy;and/or

any undertaking, representation or warranty made by you under this Privacy Policy that is or proves to have been incorrect or misleading.

Your rights

With respect to the personal information that Good Business Pays collects about you from the Website, under Data Protection Legislation you have the right, under certain circumstances, to:

request access to that personal information;

receive a copy of that personal information in a structured commonly used format so that you can share it with others;

where that personal information is inaccurate or incomplete, ask for it to be corrected or completed;

request the transfer of that personal information to another party;

ask for that personal information to be erased;

object to our processing of that personal information by asking for the processing of that personal information to be restricted or stopped. For example, if Good Business Pays uses personal information for marketing purposes; and

withdraw your consent to processing of your personal information (where you have given consent);

ask us to restrict the processing of your personal information. This enables you to ask us to suspend the processing of your personal information, for example, if you want us to establish its accuracy or the reason for processing it; and

if your request or concern is not satisfactorily resolved by us, you are entitled to make a complaint to the UK Information Commissioner’s Office (“ICO”). The ICO can be reached here

Please contact gbp.privacy@previ.se to exercise these rights or for additional information. When you contact us to exercise the above rights, we may ask for further information from you, to confirm your identity, as we take the protection of personal information seriously. 

Contact information

If you have any questions, comments or concerns about this Privacy Policy, or if you wish to exercise your rights as described in 10 above, you may contact us at gbp.privacy@previ.se

Severability

If any provision of the Privacy Policy is deemed unlawful, void or for any other reason unenforceable then that provision will be deemed severed from the Privacy Policy and will not affect the validity and enforceability of any remaining provisions of the Privacy Policy.

No waivers

Our failure or delay to exercise or enforce any rights or any provision of the Privacy Policy will not constitute a waiver of such right or provision unless acknowledged and agreed to by us in writing.

Third party rights

Except as otherwise explicitly permitted by this Privacy Policy, a person who is not a party to this Privacy Policy has no right under the Contracts (Rights of Third Parties) Act 1999 to enforce or enjoy the benefit of any of this Privacy Policy.

No partnership

Nothing in this Privacy Policy is intended to or will operate to create a partnership between you and us or authorise either you or us to act as agent for the other.  Neither party will have the authority to act in the name of, on behalf of or otherwise to bind the other in any way (including, but not limited to, the making of any representation or warranty, the assumption of any obligation or liability and the exercise of any right or power).

Entire agreement

The Privacy Policy represents the entire understanding between you and us in relation to its subject matter.

Amendment

As outlined in Clause 1(d), we may, from time to time, change this Privacy Policy. When this happens, the new updated Privacy Policy will be displayed to you after you log in and you will be asked to accept or reject them.  If you accept such Privacy Policy you will be granted access to the Website.  If you reject such Privacy Policy you will no longer have access to the Website.

Term and termination

The Privacy Policy will commence on the Effective Date and will continue to apply to you until terminated by us in accordance with the provisions of this Privacy Policy (the “Term”). 

We may terminate the Privacy Policy in whole or in part and/or suspend your access to the Website with immediate effect, by giving written notice to you, if (i) you do not comply with the Privacy Policy, including, without limitation, in the event of your actual or suspected unauthorised use of the Website, (ii) you breach the terms of the Terms of Use or any other agreement you have with us or (iii) an Insolvency Event occurs in relation to you.

We may terminate the Privacy Policy in whole or in part and/or suspend your access to the Website following the expiry of any agreement you have with us.

We may terminate this Privacy Policy in whole or in part with immediate effect by giving written notice if an Insolvency Event occurs in relation to you.

In the event that the Privacy Policy is terminated, or if we suspend your access to the Website, you agree that we will have no liability or responsibility to you and we will not refund any amounts that you have already paid, or any outstanding charges due but not yet paid under any agreement we have with you, to the fullest extent permitted under applicable law.

Upon expiry of the Term or termination of this Privacy Policy in accordance with its terms:

the rights granted to you under this Privacy Policy will terminate and you will cease all use of the Website immediately;

nothing will affect any accrued rights or liabilities of either party at the date of the termination; 

nothing will affect the continuance in force of any provision of this Privacy Policy to the extent it is expressed or by implication intended to continue in force after termination. The following provisions will in any event survive expiry or termination: Clauses 1(c), 3.1 to 3.5, 4, 5, 9, 10 this Clause 18(f), Clauses 19 and 20; and

for the avoidance of doubt, nothing will affect your obligation to pay any charges due to be paid and any outstanding charges due but not yet paid under any agreement you have with us will become immediately due and payable on expiry of the Privacy Policy or on the effective date of termination of the Privacy Policy, whichever occurs earlier.

Governing law and jurisdiction

The terms of this Privacy Policy and any non-contractual obligations arising out of or in connection with it are governed by English law. The courts of England have exclusive jurisdiction to settle any dispute arising out of or in connection with your use of the Website (including a dispute relating to the existence, validity or termination of the Privacy Policy or any non-contractual obligation arising out of or in connection with it) and you agree that the courts of England are the most appropriate and convenient courts to settle disputes.

Definitions and interpretation

In this Privacy Policy the below terms have the following meanings:

“Adequate Country” has the definition described in Clause 6 above; 

“Affiliates” means, in relation to a person, a Subsidiary of that person or a Holding Company of that person or any other Subsidiary of that Holding Company; 

“Data Protection Legislation” has the meaning described in Clause 1(a) above;

“Effective Date” has the meaning described in Clause 1(b) above;

“GDPR” means the EU General Data Protection Regulation 2016/679 as it forms part of English law;

“Holding Company” means, in relation to a person, any other person in respect of which it is a Subsidiary;

“ICO” has the meaning described in Clause 10(i) above;

“Indemnified Parties” has the meaning described in Clause 9(c) above;

“Insolvency Event” means in relation to a party:

the issue of a petition for its winding up;

the convening of a meeting for the purpose of considering the passing of a winding-up resolution for its winding up (except for the purpose of a solvent amalgamation or reconstruction where the resulting entity is to assume all of its obligations under this Privacy Policy);

the making of an application to the court for an administration order or the filing at court of a notice of intention to appoint an administrator;

a provisional liquidator, liquidator, administrative receiver, administrator, trustee or other similar officer taking possession of or being appointed over or an encumbrancer taking possession of the whole or substantially the whole of its property;

a receiver being appointed over any part of its property; 

its making proposals for or entering into a company voluntary arrangement (within the meaning of Part I, Insolvency Act 1986) or otherwise making proposals for or entering into a compromise with the majority by value of its unsecured creditors;

the filing of documents specified in Schedule A1, Insolvency Act 1986 with the court with a view to obtaining a moratorium pending its making proposals for a company voluntary arrangement;

its being unable to pay its debts within the meaning of s123(1) Insolvency Act 1986 or being unable to pay its debts as they fall due; or

any similar event occurs in any relevant jurisdiction;

“Liabilities” means any sum (present, contingent or future) payable by you to us including, without limitation, any damages, claims, losses, costs and expenses (including legal expenses on a full indemnity basis);

“Privacy Policy” has the meaning described in Clause 1(a) above; 

“Subsidiary” means a subsidiary undertaking within the meaning of section 1162 of the Companies Act 2006;

“Term” has the meaning described in Clause 18(a) above;

“Terms of Use” means the terms of use contained at goodbusinesspays.com/terms-of-use

“Website” has the meaning described in Clause 1(a) above;

“Zoho” has the meaning described in Clause 4(d)(ii) above; and

The terms, “controller”, “data subject”, “personal data”, “personal data breach”, “processing” and “supervisory authority” will have the same meaning as in the GDPR, and their cognate terms will be construed accordingly.

Unless a contrary indication appears, any reference to:

the “Privacy Policy” or other agreement is a reference to the Privacy Policy or that agreement as amended, novated, restated, supplemented, extended or replaced;

the singular will include the plural and vice versa;

a “Clause” is a reference to a Clause to these terms and conditions;

the word “including” (and its derivations) must be construed as being for illustration or emphasis only and not as limiting the generality of any preceding words;

the word “other” must not be construed as being limited by the context in which it appears or the words that precede it where a wider construction is possible;

any “person” includes any assignee, transferee, successor-in-title, delegate or appointee of that person (but, in the case of you or us, only permitted assignees or transferees).  It also includes any individual, company or other body corporate, any state or state agency or any unincorporated body, association, trust, joint venture, consortium or partnership (whether or not having separate legal personality);

a “regulation” includes any regulation, rule, official directive, request or guideline (whether or not having the force of law) of any governmental, intergovernmental or supranational body, agency, department or of any regulatory, self-regulatory or other authority or organisation;

a provision of law is a reference to that provision as amended or re-enacted; 

a time of day is a reference to local time in London, United Kingdom; and

Clause headings are for ease of reference only.