Privacy Policy
for Expedite FSM
Introduction
We are Expedite FSM, a UK-based provider of field service management software. While our headquarters are in the United Kingdom, we currently operate and sell our services exclusively within the UK market. For data protection purposes, we are the data controller of your personal data.
Who are 'we'?
We are Expedite FSM, a UK-based provider of field service management software. While our headquarters are in the United Kingdom, we currently operate and sell our services exclusively within the UK market. For data protection purposes, we are the data controller of your personal data.
How we collect your data
– Directly from you (e.g., when you sign up, request support, or participate in training).
– Automatically (e.g., through cookies, IP addresses, and device information when you use our services).
– From third parties (e.g., marketing partners, publicly available sources).
We process your data only when:
– It’s necessary to perform our contract with you.
– We have a legitimate interest that isn’t overridden by your rights.
– We have a legal obligation.
– You have given consent.
How we use your data
– Provide and manage the services you request.
– Communicate with you (updates, support, and marketing aligned with your preferences).
– Improve and develop our services.
– Ensure platform security and fairness.
– Provide tailored marketing and advertising.
– Generate anonymized reports and insights.
You can opt out of marketing communications anytime by emailing info@expeditefsm.com.
Payments, contracts, and account suspension
– All subscriptions are billed monthly via bank transfer on the first of each month.
– We do not require long-term contracts; you may cancel anytime with one month’s notice.
– If payment is not received by the first of the month, we reserve the right to suspend access to your account and services until payment is received.
– We do not store any payment details, as all payments are handled directly via bank transfer.
Sharing and international transfers
We only share data with:
– Trusted third-party providers who help deliver our services or support our business operations.
– Regulators, law enforcement bodies, or government agencies if required by law.
– Potential buyers (and their advisers) in the event of a sale, merger, or acquisition.
– Others when you give explicit consent.
Although we operate in the UK, your data is stored and processed on servers located in Germany through our hosting partner Hetzner Online GmbH. We ensure appropriate safeguards are in place to meet GDPR requirements.
GDPR Compliance
Expedite FSM and our suppliers comply with the General Data Protection Regulation (GDPR), specifically Articles 28–33.
Key points:
– Data Protection Officer: Our hosting supplier, Hetzner Online GmbH, has appointed Mrs. Alena Scholz, Data Protection Manager (+49 (0)9831 505-216, data-protection@hetzner.com).
– Confidentiality: Only employees trained and bound by confidentiality handle personal data.
– Technical and Organizational Measures (TOMs): Hetzner uses robust TOMs, which can be reviewed at https://www.hetzner.com/AV/TOM_en.pdf.
– Cooperation with authorities: We cooperate fully with supervisory authorities.
– Incident notification: We will inform clients immediately of any regulatory inspections or investigations.
– Client support: If you face regulatory claims or inspections related to our services, we will assist you to the best of our ability.
– Ongoing monitoring: We regularly monitor and audit our data protection measures.
– Verification: You may request documentation on our technical measures using the Hetzner form linked above.
Security and retention
We prioritize the security of your data, with strong technical and organizational safeguards.
We retain data:
– As long as we have a business relationship with you.
– For up to 90 days after a subscription lapses, after which we will permanently delete or anonymize it, unless you request an earlier deletion (a fee may apply).
– We can provide a data export (for a fee) within 90 days after your subscription ends.
OAuth and API Integrations
When using Expedite FSM with third-party platforms such as Google and Microsoft, you may connect via OAuth 2.0 to authorize access to email and file services.
We request the following scopes:
**Google:**
– profile, email, openid
– https://mail.google.com
– https://www.googleapis.com/auth/drive
– https://www.googleapis.com/auth/tasks
**Microsoft:**
– Files.ReadWrite, Files.ReadWrite.All
– Group.Read.All
– IMAP.AccessAsUser.All
– Mail.ReadWrite, Mail.ReadWrite.Shared
– Mail.Send, SMTP.Send
– User.Read, User.Read.All
– openid, profile, email, offline_access
All data access is authorized explicitly by the user, limited to required scopes, encrypted in transit and at rest, and revocable at any time via your Google or Microsoft account settings.
Your rights
You have the right to:
– Access, correct, or delete your personal data.
– Restrict or object to processing.
– Request a copy or transfer of your data.
– Withdraw consent at any time (where processing is based on consent).
– File a complaint with your local data protection authority.
You can exercise these rights by emailing info@expeditefsm.com.
Contact us
For questions, concerns, or complaints, contact our Privacy Officer at:
Email: info@expeditefsm.com
We aim to respond within 10 business days and resolve issues within 30 business days.