1        Introduction

1.1        Welcome to Klaxon.io application. Your privacy is important to us. This privacy notice explains how we collect, use, and share your personal data when you use our Klaxon application interacting with our services. It also outlines your rights under the General Data Protection Regulation (GDPR) and how you can exercise them.  
IMPORTANT: This document is only applicable to Klaxon application and services provided as part of data processing for licenced subscriptions.  For generic external Klaxon Website privacy notice, please visit our
Website Privacy Policy.

2        Who We Are

       Klaxon.io ("we," "our," or "us") provides a mass notification services to organisation where emergency notification can be sent to you by your organisation administrator. We are committed to protecting your privacy in accordance with applicable data protection laws, including the GDPR.

3        What Data We Collect

When you use Klaxon.io application, we may collect the following categories of personal data:

Identity Data: email address [m], password [o]
Contact Data: email address [m], mobile number [o]
Financial Data: none
Transaction Data: details of notifications received [m], and responses sent [m]
Technical Data: login data[m], browser type [m], mobile id [o]
Account Data: office location [m] and account password [o]
Marketing and Communications Data: none
* Keys: [m] Mandatory, [o] Optional
      Please note that we do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

4       How We Use Your Data
We process your personal data for the following purposes:  
To Provide Services: We use your information to send you notification(s) from your administrator.       

To Ensure Security: We process your data to maintain the security and integrity of our platform.        

For Legal Compliance: We process your data to comply with legal obligations as part of data protection laws.  
Please note that we do not use or share your personal data provided by your organisation for any marketing purposes.

5        Legal Basis for Processing
Under the GDPR, we rely on the following legal grounds to process your personal data:  

Contractual Necessity: We process your data to provide the services you or your organisation have requested (e.g., creating and managing your account, send notification and receive responses).

Legitimate Interests: We may process your data for legitimate business reasons, such as improving our platform or ensuring security, provided these interests do not override your privacy rights.

Consent: We do not actively seek your explicit consent to process certain personal data (e.g., for marketing purposes).

6        How We Share Your Data
We may share your personal data with:  

Service Providers: Third-party providers that help us run Klaxon.io (e.g., hosting services, mobile operators). We ensure that they only have minimal information needed to process your data under strict confidentiality agreements and data protection terms.

Legal Authorities: When required by law or necessary to protect our legal rights, we may disclose your information to public authorities.

Business Transfers: In the event of a merger, acquisition, or asset sale, your personal data may be transferred to a third party as part of the transaction.

7        International Data Transfers

We do not transfer your personal data outside the UK.  If we do, under the Permitted Country i.e. European Economic Area (EEA), we will ensure that it is adequately protected through appropriate safeguards, such as standard contractual clauses or other lawful mechanisms.

8        Data Retention

We retain your personal data only as long as necessary for the purposes described in this Privacy Notice or as required by law. Once your data is no longer needed, we securely delete or anonymize upon request by your organisation Klaxon Administrator.

9        Your Rights
Under the GDPR, you have the following rights regarding your personal data:  

Access: You can request a copy of the personal data we hold about you.

Rectification: You have the right to correct inaccurate or incomplete data.

Erasure ("Right to be Forgotten"): You can request the deletion of your personal data under certain conditions.

Restriction of Processing: You can ask to limit the processing of your data in specific circumstances only via Klaxon administrator of your organisation.

Data Portability: You have the right to receive your personal data in a structured, commonly used format.

Object to Processing: You may object to the processing of your data for specific purposes, such as receiving notification.  
To exercise your rights, please contact your Klaxon Administrator of your organisation.  We will require a written request from your administrator to process your request as part of our contractual obligation.   10       Security of Your Data

We implement industry-standard security measures to protect your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

11       Changes to This Privacy Notice

We may update this Privacy Notice from time to time. Any changes will be posted on this page, and significant updates may be communicated directly to you.

12      Contact Us

If you have any questions or concerns about this Privacy Notice or how we handle your data, please contact us at:  
Email:
support@klaxon.io
Address: 15 Queen Square, Leeds, LS 2 8AJ
Data Protection Officer (if applicable): Daniel Simms