Privacy Notice

1. Who we are

This Privacy Notice explains how M.E.T. Inspection & Consultancy Ltd trading as Sequensr collects, uses, stores, and shares personal data when you use the Sequensr website, application, and related services.

For the purposes of UK data protection law, we are the controller of personal data we collect for our own business purposes.

2. Personal data we collect

We may collect and process:

• identity data, such as your name;
• account data, such as email address, username, organisation name, and login details;
• profile data, such as job title, preferences, and account settings;
• technical data, such as IP address, browser type, device information, logs, and identifiers;
• usage data, such as pages viewed, actions taken, audit logs, and feature usage;
• communications data, such as support requests and correspondence;
• billing data, such as subscription status, payment references, and transaction metadata;
• integration data from services you connect, such as Microsoft account profile information and any data you explicitly authorise the app to access.

We do not intentionally collect more data than is needed for the purposes set out below.

3. How we collect personal data

We collect personal data:

• directly from you when you register, sign in, contact us, or use the service;
• from your organisation where an account is created for you;
• from third-party identity and payment providers, such as Microsoft and Stripe;
• automatically through cookies, logs, analytics, and security tools.

4. How we use personal data

We use personal data to:

• provide, operate, and maintain Sequensr;
• authenticate users and manage accounts;
• process subscriptions and payments;
• enable integrations and connected services;
• provide customer support;
• monitor performance, usage, and security;
• prevent fraud, abuse, and unauthorised access;
• improve features, functionality, and user experience;
• comply with legal and regulatory obligations;
• send service, security, billing, and administrative communications.

5. Lawful bases

Under UK GDPR, we rely on one or more of the following lawful bases:

• Contract — where processing is necessary to provide the service to you;
• Legitimate interests — to run, secure, improve, and support our business and platform;
• Legal obligation — where we must comply with law or regulation;
• Consent — where required, such as for certain cookies or optional marketing.

6. Microsoft sign-in and connected accounts

If you choose to sign in with Microsoft or connect Microsoft services, we process the information and permissions you authorise through Microsoft's identity platform.

This may include basic profile information and ongoing access where you consent to it. You can review and revoke granted permissions through your Microsoft account and organisational admin settings.

7. Sharing personal data

We may share personal data with:

• cloud hosting and infrastructure providers;
• identity and authentication providers;
• payment processors;
• analytics, monitoring, and support providers;
• professional advisers, auditors, insurers, and legal advisers;
• regulators, law enforcement, courts, or public authorities where required.

We do not sell your personal data.

8. International transfers

Where personal data is transferred outside the UK, we will use appropriate safeguards, such as adequacy regulations or approved transfer mechanisms, where required.

9. Security

We use reasonable technical and organisational measures to protect personal data against accidental or unlawful loss, misuse, alteration, unauthorised disclosure, or access.

No system is completely secure, and we cannot guarantee absolute security.

10. Retention

We retain personal data only for as long as reasonably necessary for:

• providing the service;
• maintaining records and audit trails;
• meeting contractual, legal, tax, and regulatory requirements;
• resolving disputes and enforcing our agreements.

We may anonymise data for analytics and service improvement.

11. Your rights

Subject to applicable law, you may have the right to:

• access your personal data;
• correct inaccurate data;
• erase data in certain circumstances;
• restrict processing;
• object to processing based on legitimate interests;
• data portability;
• withdraw consent where processing relies on consent;
• complain to the Information Commissioner's Office.

12. Cookies and analytics

We may use cookies and similar technologies for essential site operation, login management, security, analytics, and performance.

Where required, we will ask for consent before using non-essential cookies.

13. Third-party links and services

Sequensr may link to third-party websites or services. We are not responsible for their privacy practices.

14. Children

Sequensr is not intended for children, and we do not knowingly collect personal data from children.

15. Changes to this notice

We may update this Privacy Notice from time to time. The latest version will be posted on our website with the updated date.

16. Contact

For privacy queries or requests, contact:

Privacy team

M.E.T. Inspection & Consultancy Ltd

5 Clos Gwaith Brics, Tondu, Bridgend, CF32 9GA

Email: privacy@sequensr.com

Support: support@sequensr.com

If you are based in the UK, you also have the right to complain to the ICO.