Pibbix Voicemail Privacy Policy

Updated 01 Oct 2022

Protecting your data, privacy and personal information is very important to Impossible Research Limited (“our”, “us” or “we”). This policy sets out the basis on which any personal information about you will be processed and applies to (i) activities on or through our public Website www.pibbix.com (the “Website”) (ii) our direct marketing activities and (iii) your use of Pibbix Voicemail or other services.

Please read this privacy policy carefully to understand the types of personal information we collect, how we use that information, the circumstances under which we will share it with third parties, and your rights in relation to the personal information we process.

  1. Identity and contact information of the Data Controller
    1. For the purposes of data protection legislation in the European Union, the data controller (i.e. the person that determines the purposes and manner in which your personal information is processed) is Impossible Research Limited. Impossible Research Limited is a company incorporated and registered in England and Wales (company number 13393530) with its registered office at Suite 2a1, Northside House, Mount Pleasant, Barnet, England, EN4 9EB, United Kingdom.
    2. Questions, comments and requests regarding this privacy policy are welcome and should be addressed to [email protected]
  2. Personal information we may process about you
    1. A breakdown of the personal information we may process is set out in a table at the end of this policy, together with the other information we are required to provide.
      2. Pibbix Voicemail

      We process personal information in order to provide you with the Pibbix Voicemail service.

      Please note that payment details (such as credit card information) are not processed by us and are instead handled by the Apple App Store and Google Play Store
      Website Our Website operates primarily to market Pibbix Voicemail services. To the extent we collect personal information via our Website, our main purpose is to better serve our customers and to improve the function of the Website.
      Direct Marketing

      Where we send electronic marketing communications, we will provide an option to unsubscribe or opt-out of further communication or you may opt out by contacting us at [email protected].

      We will not sell your personal information (or any other data you provide us with) to third-parties for marketing purposes.
  3. How personal information is collected
    1. We may obtain personal information about you in three main ways:
      1. You provide us with your personal information (such as when you register to use our Pibbix Voicemail service).
      2. Personal information is collected automatically (such as the automatic recognition of your IP address or placement of cookies on your device).
      3. Personal information is collected, and provided to us, by a third party, such as:
        1. information provided by communications providers when you make and receive voice calls or SMS
        2. when you use the Pibbix Voicemail service, we may collect and process data that is contained in SMS / instant messages, voicemails and other electronic communications.
  4. Where we store your personal information
    1. The personal information that we collect from you may be transferred to and stored at a destination outside of the European Economic Area (“EEA”). This data may also be processed by staff operating outside of the EEA who work for us or for one of our business partners or service providers. Further information is provided in the table at end of this policy. Please contact us at [email protected] if you would like further details on the specific safeguards applied to the export of your personal information outside the EEA.
  5. International transfer of personal information
    1. Your personal information may be collected, transferred to and stored by us in the UK or the EEA and by affiliates and third-parties that are based in other countries.
    2. Therefore, your personal information may be processed outside your jurisdiction, and in countries that are not subject to an adequacy decision by the European Commission or your local legislator or regulator, and that may not provide for the same level of data protection as your jurisdiction. We ensure that the recipient of your personal information offers an adequate level of protection and security, for instance by entering into appropriate data processing agreements and, if required, standard contractual clauses or an alternative mechanism for the transfer of data as approved by the European Commission (Art 46 GDPR) or other applicable regulator.
  6. How long we store your personal information
    1. Details of how long we store your personal information are set out at the end of this policy. Please note that some personal information may need to be retained for longer than this to ensure we can comply with applicable laws and internal compliance procedures, including retaining your email address for marketing communication suppression if you have opted not to receive any further marketing.
  7. Disclosure of your personal information
    1. Details of who we disclosure your personal information to are set out at the end of this policy. We may also disclose your personal information to third parties in the following circumstances:
      2. Purpose of disclosure and third party(s) to which disclosure might be made Use Justification
      If you request we do so. You have provided your consent.
      To a member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006 Legitimate interests (i.e. for business administration).
      If we sell any business or assets, we may disclose your personal information to the prospective seller or buyer of such business or assets. Legitimate interests (i.e. to buy or sell business assets).
      If Impossible Research Limited or substantially all of its assets are acquired by a third party, personal information about our customers will be one of the transferred assets. Legitimate interests (i.e. to dispose of our business).
      If we are under a duty to disclose or share your personal information in order to comply with any legal obligation or to protect the rights, property, or safety of Impossible Research Limited, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection. Processing is necessary for compliance with a legal obligation, or processing is necessary in order to protect the vital interests of a natural person
      We may disclose your personal information with our contracted service providers who provide services such as IT and system information and hosting, research and analytics and marketing. Legitimate interests (i.e. to perform our contract with you and improve our services)
      We may disclose your personal information to third parties, the court service and/or regulators or law enforcement agencies in connection with proceedings or investigations anywhere in the world where compelled to do so. Where permitted, we will direct any such request to you or notify you before responding unless to do so would prejudice the prevention or detection of a crime. Legitimate interests (i.e. to cooperate with law enforcement and regulatory authorities)
    2. We may also share anonymous or de-identified data with our contracted service providers for the purpose of helping us in such analysis or improvements to our services.
  8. Your rights
    1. Under the General Data Protection Regulation (EU) 2017/676, you have the following rights (subject to certain limitations):
      2. Rights Details
      Right of access You have the right to obtain from us confirmation as to whether your personal data is being processed, and, where that is the case, access to such personal data.
      Right to Rectification We will use reasonable endeavors to ensure that your personal data is accurate. In order to assist us with this, you should notify us of any changes to the personal data that you have provided to us by sending us a request to rectify your personal data where you believe the personal data we have is inaccurate or incomplete.
      Right to erasure / ‘Right to be forgotten’ Asking us to delete all of your personal data will result in us deleting your personal data without undue delay (unless there is a legitimate and legal reason why we are unable to delete certain of your personal data, in which case we will inform you of this in writing).
      Right to restriction of processing You have the right to ask us to stop processing your personal data at any time.
      Right to data portability You have the right to request that Impossible Research Limited provides you with a copy of all of your personal data and to transmit your personal data to another data controller in a structured, commonly used and machine-readable format, where it is technically feasible for us to do so.
      Right to complain You have the right to lodge a complaint to a supervisory authority such as the Information Commissioner’s Office in the UK (see www.ico.org.uk). Although we encourage our customers to engage with us in the event they have any concerns or complaints. You can do so by writing to us at [email protected].
    2. All of these rights can be exercised by contacting us at [email protected].
    3. Impossible Research Limited will not ordinarily charge you in respect of any requests we receive to exercise any of your rights detailed above. However, if you make excessive, repetitive or manifestly unfounded requests, we may charge you an administration fee in order to process such requests or refuse to act on such requests. Where we are required to provide a copy of the personal data this will usually be free of charge. However, any further copies requested may be subject to reasonable fees based on administrative costs.
    4. Where you request us to rectify or erase your personal data or restrict any processing of such personal data, we may notify third parties to whom such personal data has been disclosed of such request. However, such third party may have the right to retain and continue to process such personal data in its own right.
  9. Cookies
    1. We may use cookies and web beacons to distinguish you from other users. This helps us provide you with a good experience when you use our Website or Services. Please note that it is possible to disable cookies being stored on your computer by changing your browser settings. However, our Website may not perform properly or some features may not be available to you if you disable cookies.
    2. For detailed information on the cookies we use and the purposes for which we use them see our Cookie Policy.
  10. Children under the age of 13
    1. Neither the Website nor our Pibbix Voicemail service is aimed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are under 13, please do not use our services or provide any information to us through the Website. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at [email protected].
  11. Changes to this policy
    1. Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, we will notify you, by email, or by means of a notice on our home page. Your continued use of the Website and/or the Pibbix Voicemail service, including use after the posting of any changes to these terms, will be deemed acceptance by you of the privacy policy. The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you and for periodically visiting this privacy policy to check for any changes.
      2.   Personal data collected Why personal data are collected Legal basis for processing Period for which your data will be stored Will your personal data will be shared with third parties? Transfers outside the European Economic Area
      1. The unique device identifier of your mobile device. To provide you with the Pibbix Voicemail service and for account administration purposes. Processing is necessary for the performance of our contract with you. For as long as you use the Pibbix Voicemail service, plus 90 days. We may share this data with Google (crashlytics) to help us diagnose issues and improve the service. Google may store this data in the USA.  We rely on the fact that Google is certified as complying with Privacy Shield.
      2. Your full name, email address, and mobile phone number. To provide you with: (1) a Pibbix Voicemail account; (2) support services; and (3) important information about our services; (4) voicemail / missed call notifications. Processing is necessary for the performance of our contract with you. For as long as you use the Pibbix Voicemail service, plus 90 days. We may share your email address with Amazon Web Services so that we can provide you with missed call / voicemail notifications by email.

      We may also share your mobile number with Google (crashlytics) to help us diagnose issues and improve the service.

      		 Amazon and Google may process your personal information in the USA. We rely on the fact that Amazon and Google are certified as complying with Privacy Shield.
      3. Any personal data contained in your voicemail greeting To provide you with our enhanced voicemail greeting function. You have provided your consent.  You can disable this functionality at any time. Until (1) you disable the personal voicemail greeting functionality or (2) you cease using the Pibbix Voicemail service, plus 90 days – whichever is shorter. No.  However, anyone may call and listen to your voicemail greeting. No
      4. The full name, email address and mobile number of any third-party contact that you add to the address book of the Pibbix app, if you allow Pibbix to sync with your contacts. To improve user-experience, caller information and back-up / sync across devices.

       

      		 Processing is necessary for our legitimate interests (i.e. to improve the services) and/or the legitimate interests of the Pibbix account holder. Until (1) you delete the contact or (2) 90 days after the termination of the appropriate Pibbix  individual account – whichever is shorter. No No
      5. Details of voice calls that you make and receive (including missed calls).  This includes the called number; calling number; redirected number (if a voicemail); and date, time and call duration. To provide you with the Pibbix Voicemail service. Processing is necessary (1) for the performance of our contract with you and (2) to comply with our legal obligations. For 7 years, as required by law. To make / receive a voice call, it is necessary to share your personal data with other communications providers.

      We may be required by law to disclose the details of any calls you make / receive.

      		 If you make or receive a call to / from a destination outside the EEA, it is necessary to share your personal data with other communications providers.  This might involve a transfer to a country where no adequate safeguards exist.
      6. Voicemails that you receive. To provide you with the Pibbix Voicemail service. Processing is necessary for the performance of our contract with you. For your use of the Pibbix Voicemail service, plus 90 days. It is necessary to share your voicemails with our transcription provider, Nuance Communications Inc. No.
      7. The IP address of the device you used to access our Website. To improve the function of the Website. Processing is necessary for our legitimate interests (i.e. to understand who is visiting the Website). 30 days Unless we are otherwise legally required, we may share this data with Google Analytics to help us improve our Website. Google Analytics may store this data in the USA.  We rely on the fact that Google is certified as complying with Privacy Shield.
      8. Your name, email address and phone number, but only if you provide it to us. To enable us to contact you / send information that you have requested. You have provided your consent. For as long as we send you relevant information. No. No.
      To enable us to engage in direct marketing (such as newsletters or marketing emails for products and services provided by us that we believe will be of interest to you). Processing is necessary for our legitimate interests (i.e. direct marketing activities). Until such time as you inform us you don’t want to continue receiving marketing communications – you have the right to unsubscribe at any time. No. No.
      9. A record of any communication / correspondence you have with us (e.g. when you contact us by email, telephone or post). To enable us to maintain records with our potential and actual clients. Processing is necessary for our legitimate interests (i.e. to understand who contacts us). 6 years No. No.
      10. Any personal data provided on a CV / resume provided to us (e.g. via email or through our “jobs” webpage). To enable us to consider your application. You have provided your consent. We will keep your details on file for 24 months in case any other relevant positions become available. No. No.
      11. Any personal data that you provide to us as part of a survey. To improve our Website or services. Processing is necessary for our legitimate interests (i.e. to understand the requirements of our potential and actual clients). 24 months No.

       

      		 No.