Privacy Policy

Who we are

This is the privacy statement of Direct Software Limited (“us”, “we”,“our” and “DSL”) and applies to your use of the DSL’s automated email authority, monitoring and improvement platform, which can be referred to as ‘Allegrow' during set up and found at the URL: https://app.neverspam.io/

This statement explains:

  • What types of personal information we collect [Reference 1.]
  • How we use your personal information [Reference 2.]
  • How you can with draw your consent, where we process on the basis of consent [Reference3.]
  • Where we collect your personal information from [Reference 4.]
  • Who we share your personal information with [Reference 5.]
  • How we use your information to make automated decisions [Reference 6.]
  • What happens if you do not provide your personal information [Reference 7.]
  • How long we retain your personal information [Reference 8.]
  • Where we hold your personal information internationally [Reference 9.]
  • Measures we take to protect your personal information [Reference 9.]
  • Your rights[Reference 10.]
  • Changes to this statement [Reference 11.]
  • Who to contact for further information [Reference 12.]
  • How to make a complaint [Reference 13.]

For residents of California, we have additional considerations and rights under the California Consumer Privacy Act (CCPA). Please review our CCPA Privacy Addendum for detailed information on how we comply with the CCPA and how you can exercise your rights under this legislation. You can find our CCPA policy here: https://www.allegrow.co/ccpa-privacy-statement
‍

1. Types of personal information we collect

We may collect, use and store different types of personal information about you, which we have grouped together as follows:

  • Identity information - including your first and last name. 
  • Contact information - including billing address, email address, and telephone number. 
  • Financial information - payment or credit/debit card details you provide us to pay for services. 
  • Transaction information - meaning details about payments to and from you for our services. 
  • Content information - including the content of emails in your mailbox connected to Allegrow. 
  • Profile data - including information on your language preferences and age range. 
  • Usage data - includes information from details of your use on our apps or any of our sites. 
  • Marketing and communications - information in relation to marketing you receive from us, including publicly available information. 
  • Location information - means the region you carry out business from.

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offenses.

Usage Data 

Usage data is collected automatically when you use our service or sites. 

Usage Data may include information such as your device's internet protocol address, browser type, the pages of our Service that users visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

We may collect certain information automatically to improve the features you receive, including, but not limited to, integrations you opt-in to using inside the app, the number of emails you or your connected users have sent.

2. How we use your personal information?

The list below explains how we use your personal information and the reasons that we rely on in doing so. Where these reasons include legitimate interests, we explain what these legitimate interests are.

  • To register you as a new app user - based on your consent for us to register you and the information provided on identity, contact and financial information. 
  • To facilitate purchases and deliver services - based on your consent and performance of a contract with you, we use information including but not limited to identity, contact, location and financial information. 
  • To manage our relationship with you, including notifying you of changes and updates to the app - based on Your consent, Performance of a contract with you, the fact that this is Necessary for our legitimate interest (to keep records up to date and analyze how customers use our app), additionally that this is Necessary to comply with legal obligations (to inform you of any changes to our app or your service).
  • To administer and protect our business and this app including troubleshooting, data analytics, and our system testing - is Necessary for our legitimate interest (for running and growing our business, provision of administration, IT services, and network security)
  • To deliver targeted advertising to You - We may use your contact information to develop and display content and advertising (and work with third-party vendors who do so) tailored to Your interests and/or location and to measure its effectiveness.
  • To make recommendations to you about goods or services which may interest you - Based on your consent and this being Necessary for our legitimate interest (to develop products/services and grow our business). 
  • To enforce our rights and exercise our obligations in relation to your use of the app and our services - based on the Performance of a contract with you and this being Necessary for our legitimate interest (defending and exercising our legal rights and obligations)
  • To carry out automated email sending on your behalf, including scheduling writing and scheduling emails on your behalf - based on the Performance of a contract with you and this being Necessary for our legitimate interest (to produce the monitoring and features users desire). 
  • For other purposes: We may use Your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and improving our Service, products, services, marketing and your experience.

3. Consent

Consent can be withdrawn at any time by emailing info@allegrow.co stating you would like to withdraw your consent. Please specify which activity you would like to withdraw consent for.

4. Where we collect your personal information from

We may collect personal information about you (or your business) from the following sources:

  • Information you give us: This is information (including Identity, Contact, Financial, and Marketing and Communications Data) you consent to giving us about you by filling in forms, or by corresponding with us (for example, by email or chat). It includes information you provide when you register or create an account, download or register an app, subscribe to any of our services, search for an app or service, and when you report a problem with an app, our services, or any of our sites. If you contact us, we will keep a record of that correspondence.
  • Information we collect about you and your device: Each time you visit one of our sites or use one of our apps we will automatically collect personal data including Content and Usage Data. We collect this data using analytics code in our software.
  • Information we receive from other sources including third parties and publicly available sources. We will receive personal data about you from various third parties and public sources as set out below:
  • Contact, Financial and Transaction Data from providers of technical, payment and delivery services such as Stripe based outside the EU.
  • Identity and Contact Data from data brokers or aggregators and researchers.
  • Identity and Contact Data from publicly available sources such as Companies House based inside the EU and your company website or social media.

5. Who we share your information with

We may share your personal information with the following third parties:

  • Amazon Web Services (AWS) via (Ireland / eu-west-1 region). This is where your data and information is hosted therefore it is shared to this provider.
  • Stripe (for payment processing). This processing takes place outside the EU only in data centres which have a certified EU-US privacy shield.
  • Nylas via Europe (Ireland) region. This is the API used therefore your data is processes and shared with this provider.

6. How we use your information to make automated decisions

We do take any decisions about you based solely on automated processing (i.e. without human involvement), which have a legal or similarly significant effect on you.

7. If you choose not to give your personal information

If you choose not to give your personal information this may delay or prevent us from meeting our obligations to you as a user. This may also mean the software cannot function as intended and therefore lead to us cancelling the service you have with us.

8. How long we keep your personal information

We will keep your personal information for the period of your licence or agreement with us. At the end of this period, you can ask us to delete any personal information we hold about you. You can do this by emailing us at info@directsoftwareltd.com. If you do not contact us regarding deleting your personal information and data we will delete this independently within 6 months of your licence ending.

9. Where we hold your personal information

Your personal information is hosted and stored in the cloud via Amazon Web Services (AWS) via (Ireland / eu-west-1 region). Some of your personal information will also be stored locally at DSL’s place of work; access to all information is controlled by physical barrier to entry and password protection. 

Our data is encrypted both in transit and at rest. In transit, we ensure all data is encrypted and transmitted using secure channels only (TLS). At rest, we utilize Advanced Encryption Standard (AES-256) to encrypt all database instances, backups, and snapshots.

10. Your rights

Access to your information – You have the right to request a copy of the personal information about you that we hold.  

Correcting your information – We want to make sure that your personal information is accurate, complete and up to date and you may ask us to correct any personal information about you that you believe does not meet these standards.

Deletion of your information – You have the right to ask us to delete personal information about you where:

  • You consider that we no longer require the information for the purposes for which it was obtained
  • We are using that information with your consent and you have withdrawn your consent – see Withdrawing consent to using your information below
  • You have validly objected to our use of your personal information – see Objecting to how we may use your information below
  • Our use of your personal information is contrary to law or our other legal obligations.

Objecting to how we may use your information – You have the right at any time to require us to stop using your personal information for direct marketing purposes. In addition, where we use your personal information to perform tasks carried out in the public interest or pursuant to the legitimate interests of us or a third party then, if you ask us to, we will stop using that personal information unless there are overriding legitimate grounds to continue.

Restricting how we may use your information – in some cases, you may ask us to restrict how we use your personal information. This right might apply, for example, where we are checking the accuracy of personal information about you that we hold or assessing the validity of any objection you have made to our use of your information.  The right might also apply where this is no longer a basis for using your personal information but you don't want us to delete the data. Where this right to validly exercised, we may only use the relevant personal information with your consent, for legal claims or where there are other public interest grounds to do so.

Portability – if we process personal information that you provide to us on the basis of consent or because it is necessary for the performance of a contract to which you are party, and in either case that processing is carried out by automated means, then you have the right to have that personal information transmitted to you in a machine readable format. Where technically feasible, you also have the right to have that personal information transmitted directly to another controller.

Automated processing – if we use your personal information on an automated basis to make decisions which significantly affect you, you have the right to ask that the decision be reviewed by an individual to whom you may make representations and contest the decision. This right only applies where we use your information with your consent or as part of a contractual relationship with you

Withdrawing consent using your information – Where we use your personal information with your consent you may withdraw that consent at any time and we will stop using your personal information for the purpose(s) for which consent was given.

Please contact us in any of the ways set out in the Contact information and further advice section if you wish to exercise any of these rights.

11. Changes to our privacy statement

We keep this privacy statement under regular review and will place any updates on this website. Paper copies of the privacy statement may also be obtained on request to 53 Bothwell Street, Glasgow, Scotland, G2 6TS.

This privacy statement was last updated on 12/04/2024. (The 12th of April 2024).

12. Contact information and further advice

If you have any questions about this privacy statement, or how we process your personal information, please contact DSL’s data protection officer (DPO), Ruari Baker, who can be contacted by email at info@directsoftwareltd.com. Please put the word “Compliance” in your email subject line so the request is dealt with correctly.

13. Complaints

We seek to resolve directly all complaints about how we handle personal information but you also have the right to lodge a complaint with the Information Commissioner’s Office:

Online: https://ico.org.uk/global/contact-us/email/

By phone: 0303 123 1113

By post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF

14. Legacy Users

If you are a user of DSL data or marketing automation products used at a domain or subdomain of: directsoftwareltd.com, then the privacy policy which relates to your usage of this solutions is available at: https://www.allegrow.co/pp

Please note if you are a user of the DSL platform for automated email authority monitoring and improvement which is available at https://app.neverspam.io, clause 14 of this agreement will not be relevant to you as you are not a Legacy user.

‍