1. About This Privacy Policy

This Privacy Policy explains how IRIS Automation collects, uses, stores, shares and protects personal information when you visit our websites, contact us, request information, interact with our marketing, use our services or enter into a business relationship with us.

This policy applies to IRIS Automation websites, including:

• iris-auto.com
• iris-auto.ae

This Privacy Policy replaces earlier versions of the IRIS Automation website privacy policy.

2. IRIS Automation Entities

General privacy and data protection enquiries can be sent to:

info@iris-auto.com

3. Data Protection Framework

Where applicable, IRIS Automation processes personal information in accordance with relevant data protection and privacy legislation.

For activities governed by United Kingdom law, this includes the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended from time to time.

For activities governed by United Arab Emirates law, this includes applicable UAE privacy and data protection requirements, including Federal Decree-Law No. 45 of 2021 Regarding the Protection of Personal Data where applicable.

4. Information We May Collect

Depending on how you interact with IRIS Automation, we may collect information including:

• Name
• Job title and professional role
• Company or organisation name
• Business email address
• Telephone number
• Country or business location
• Information submitted through website forms
• Product demonstration requests
• Quotation and commercial enquiries
• Technical or project-related information you provide
• Correspondence with IRIS Automation
• Customer, supplier and partner information
• IP address
• Browser and device information
• Website usage information
• Advertising and campaign interaction information
• Cookie and analytics information where applicable

IRIS Automation primarily operates in a business-to-business environment and generally processes professional and business contact information.

5. How We Collect Information

We may collect information when you:

• Visit an IRIS Automation website
• Complete a website contact form
• Request a product demonstration
• Request a quotation or proposal
• Contact us by email or telephone
• Communicate with us through social media
• Meet us at an exhibition, event or business meeting
• Interact with our online advertisements
• Subscribe to marketing communications
• Become a customer, supplier, contractor or partner

We may also receive professional contact information from legitimate business sources, public company websites, professional networking platforms, partners and business directories where permitted by law.

6. How We Use Personal Information

Personal information may be used for purposes including:

• Responding to enquiries
• Arranging meetings and product demonstrations
• Preparing quotations and commercial proposals
• Providing products and services
• Providing technical and customer support
• Managing customer and supplier relationships
• Managing contracts and projects
• Managing payments, invoices and financial records
• Improving our products, websites and services
• Measuring website performance
• Understanding website visitor behaviour
• Measuring marketing and advertising effectiveness
• Sending relevant business communications
• Maintaining information security
• Preventing fraud, misuse or unlawful activity
• Meeting regulatory, legal and accounting requirements

7. Legal Basis for Processing

Where UK data protection law applies, we process personal information using one or more appropriate lawful bases.

• Contract: where processing is necessary to provide products or services, prepare contractual arrangements or perform a contract.
• Legitimate interests: where processing is reasonably necessary for legitimate business operations, B2B communications, customer relationships, service improvement or security.
• Consent: where you have provided consent, including where required for marketing communications or non-essential cookies and tracking technologies.
• Legal obligation: where processing is necessary to comply with applicable laws, regulations, accounting requirements or regulatory obligations.

8. Cookies and Similar Technologies

Our websites may use cookies and similar technologies to operate correctly, remember settings, measure performance and understand website usage.

Cookies may include:

• Essential cookies required for the operation and security of the website.
• Analytics cookies used to understand how visitors interact with our websites.
• Advertising cookies used to measure campaigns and, where appropriate, provide relevant advertising.
• Preference cookies used to remember website choices and settings.

Where required by applicable law, non-essential cookies and similar tracking technologies will not be activated until the appropriate consent has been obtained.

Users may also manage cookies using their browser settings or our website cookie controls where available.

9. Website Analytics and Visitor Tracking

IRIS Automation may use website analytics and tracking technologies to understand website traffic, page usage, visitor journeys and campaign performance.

Depending on the services enabled on the website, these technologies may collect information such as device type, browser type, approximate location, pages visited, referral source, advertising interaction and session information.

Where these technologies require consent, they will be managed through appropriate consent controls.

10. Digital Marketing and Advertising

IRIS Automation may advertise its products and services through professional, search and social media advertising platforms.

These may include:

• Google Ads
• LinkedIn
• Instagram
• Facebook and other Meta services
• YouTube
• Other relevant B2B advertising platforms

These platforms may use cookies, pixels, tags and similar technologies to measure advertising performance, attribute website visits, create advertising audiences and understand campaign interactions where permitted.

IRIS Automation does not sell personal information to advertisers.

11. Email Mailing Lists and Marketing Communications

IRIS Automation may operate email mailing lists or business communication programmes to provide information about our products, services, events, demonstrations, company news and related activities.

Where consent is required, marketing communications will only be sent where the appropriate permission has been obtained.

Business-to-business communications may also be sent where permitted by applicable law and where IRIS Automation has an appropriate legitimate business reason to contact an organisation or professional.

Marketing emails may contain tracked links or similar technologies used to understand whether communications have been opened or interacted with.

You can unsubscribe from marketing communications at any time using the unsubscribe link provided in an email or by contacting:

info@iris-auto.com

Unsubscribing from marketing does not prevent us from sending necessary contractual, service, project or administrative communications.

12. Contact Forms and Communication With Us

When you contact IRIS Automation through a website form, email, telephone or another communication channel, we may process the information you provide so that we can respond to your enquiry, provide requested information and maintain appropriate business records.

Please avoid submitting sensitive personal information through general website contact forms unless it is genuinely necessary.

13. Social Media

IRIS Automation may maintain official accounts on professional and social media platforms including LinkedIn, Instagram, YouTube and other relevant services.

When you interact with IRIS Automation through a third-party social media platform, the platform may independently process information about you in accordance with its own privacy policy.

We recommend reviewing the privacy settings and privacy policy of each platform you use.

IRIS Automation will not request your account password through social media.

14. Downloads and Media Files

Documents, brochures, media files, technical information and other downloadable materials may occasionally be made available through IRIS Automation websites.

We take reasonable steps to ensure files published by us are legitimate and appropriate. Users should nevertheless maintain suitable device security and anti-malware protection when downloading files from any website.

IRIS Automation is not responsible for downloads hosted or supplied independently by external third-party websites.

15. External Links and Third-Party Websites

Our websites may contain links to third-party websites, social media services, partners or other external resources.

IRIS Automation does not control the privacy practices or content of independent third-party websites.

Users should review the relevant privacy policy before submitting personal information to a third-party service.

16. Sharing Personal Information

IRIS Automation may share information with trusted organisations where reasonably necessary to operate our business.

These may include:

• Website hosting providers
• IT and cybersecurity providers
• Cloud storage providers
• CRM and business software providers
• Email communication providers
• Analytics providers
• Marketing and advertising platforms
• Professional advisers
• Accountants and auditors
• Legal advisers
• Authorised contractors and delivery partners
• Regulators and government bodies where legally required

We do not sell personal information to third parties.

17. International Data Transfers

IRIS Automation operates internationally, including in the United Kingdom and United Arab Emirates.

Personal information may therefore be transferred between countries or processed using service providers located in different jurisdictions.

Where required, IRIS Automation will use appropriate contractual, organisational or other safeguards for international transfers of personal information.

18. Data Security

IRIS Automation takes reasonable technical and organisational measures intended to protect personal information against:

• Unauthorised access
• Accidental loss
• Unauthorised disclosure
• Alteration
• Misuse
• Destruction

Access to business information is restricted where appropriate to employees, contractors and service providers who require access for legitimate business purposes.

19. Data Retention

Personal information will be retained only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting, regulatory and contractual requirements.

Typical retention periods may include:

• General enquiries: normally up to 24 months after the last meaningful interaction.
• Customer, contractual, accounting and transaction records: for the period required by applicable legal and financial record-keeping requirements.
• Marketing information: until consent is withdrawn, an objection is received or the information is no longer reasonably required.

Information may be retained for longer where necessary for legal proceedings, regulatory requirements or the establishment, exercise or defence of legal claims.

20. Your Data Protection Rights

Depending on the laws applicable to you, you may have rights concerning your personal information, including:

• The right to request access to personal information
• The right to request correction of inaccurate information
• The right to request deletion in certain circumstances
• The right to request restriction of processing
• The right to object to certain processing
• The right to data portability where applicable
• The right to withdraw consent where processing relies on consent

These rights may be subject to applicable legal requirements and exemptions.

To make a request, contact: info@iris-auto.com

21. Useful Privacy and Data Protection Resources

The following external resources provide further information about privacy and data protection:

• UK Information Commissioner's Office — UK GDPR Guidance
• Data Protection Act 2018
• Privacy and Electronic Communications Regulations 2003
• ICO Guide to PECR
• UAE Government — Data Protection Laws

22. Third-Party Privacy Policies

Where we use third-party platforms, their own privacy policies may also apply:

• Google Privacy Policy
• LinkedIn Privacy Policy
• Meta / Facebook Privacy Policy
• Instagram Privacy Policy
• YouTube / Google Privacy Policy
• Mailchimp Privacy Policy
• X Privacy Policy

23. Changes to This Privacy Policy

IRIS Automation may update this Privacy Policy periodically to reflect changes in our business, websites, products, technologies, advertising activities, service providers or applicable legal requirements.

The latest version will be published on this page together with the current revision date.