Business Privacy Notice

When you contact MyEscapePlan about a business product we may collect your name, work email address, organisation, role, enquiry details, correspondence, meeting notes and information needed to evaluate or manage a commercial relationship.

The website may also process normal technical information such as IP address, browser/device information, page usage and security logs, plus statistical analytics data. Campaign and conversion attribution is processed only when marketing attribution is enabled.

We use business-contact data to respond to enquiries, evaluate requested pilots, manage prospective and existing customer relationships, protect the service, improve the website and communicate relevant product information.

Depending on the activity, our lawful basis may be steps taken at your request before entering a contract, performance of a contract, our legitimate interests in operating and developing our business, or consent where consent is legally required.

We may follow up with relevant business contacts about a request, pilot or MyEscapePlan business product where permitted by applicable data-protection and electronic-marketing rules.

You can object to direct marketing or ask us not to contact you for marketing at any time. We will maintain the minimum suppression information needed to respect that request.

The public business website does not itself create a general right for MyEscapePlan to use a customer's end-user data.

If a commercial engagement involves personal data supplied by a customer, the applicable agreement and, where required, data-processing agreement will define permitted processing, security, retention and the parties' data-protection roles.

We keep business-contact and enquiry information only for as long as needed for the relationship, legitimate business records, legal obligations and appropriate suppression of marketing preferences.

Depending on applicable law, you may have rights to access, correct, erase or restrict personal data, object to processing, and withdraw consent where processing is based on consent.