What we do with personal data.

Fixi Group Limited, company number 16725973, registered office 66 Paul Street, London, England, EC2A 4NA, is the controller for the personal data described here. Write to privacy@hellofixi.com and you will have a reply within 2 working days.

For its own business records, correspondence and suppliers, Fixi is the controller. For data a customer puts into odel-labs, Fixi is the processor and the customer is the controller. The data processing agreement will set out that relationship, in the same document for every customer, and clause 7 records where that document stands.

Which role applies decides who you ask. A subject request about data inside odel-labs goes to the customer who holds the account, because Fixi cannot lawfully answer it on their behalf.

This site sets no cookies, runs no analytics, loads nothing from a third party and submits nothing anywhere. Visiting it stores nothing on your device beyond what your browser caches. Setting the colour scheme stores one value, named fx-theme, in your browser's local storage, and local storage is never attached to a request, so it reaches no server and no processor. Each row below is enforced by a check that fails the build, so it is a property of the site rather than an intention.

The message and the address it came from are kept so that there is a record of what was agreed, then deleted. The lawful basis is legitimate interests for correspondence, and contract where an agreement follows.

You can ask for a copy of your data, ask for it to be corrected or deleted, object to processing, or ask for it to be sent elsewhere. Write to privacy@hellofixi.com and you will have a response within 2 working days and the substance within 1 month.

If the answer is unsatisfactory you can complain to the Information Commissioner's Office, and doing so does not affect any other right.

Complain to the ICO

Personal data held by Fixi as a controller is held in the United Kingdom. Where a sub-processor sits outside the United Kingdom, the transfer is covered by the IDTA or by the UK Addendum to the EU SCCs. The sub-processor list names each one and says where it sits.

Sub-processors

Where Fixi processes a customer's data, the document that will bind it is the data processing agreement rather than this notice. That document does not exist yet. Fixi will not enter a client agreement, the data processing agreement included, until it has instructed a solicitor, and no solicitor is instructed. The same position is published on the governance page.

When it is drawn up it will state what is processed and for how long, the sub-processor list and the notice given before an addition, where the data is held, and what happens to the data when the agreement ends. It will be issued with each client agreement rather than published as a template here, because a template on a website is not the agreement anybody signs. Until then, questions about it go to privacy@hellofixi.com and are answered within 2 working days.