1. Introduction

Ignite Technology (“Ignite”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, share, retain and protect personal data when you:

• visit our website at www.ignite-tec.com;
• contact us;
• enquire about our products or services;
• download resources;
• register for events or webinars;
• subscribe to marketing communications;
• engage with our sales or consulting teams;
• become or represent a customer, supplier or business partner; or
• otherwise interact with Ignite in a business or professional capacity.

It also explains your rights under applicable data protection law and how you can exercise them.

This Privacy Policy should be read alongside any more specific privacy information we provide in connection with particular activities, such as:

• candidate recruitment;
• employees and contractors;
• specific events;
• customer projects;
• data subject rights requests; or
• particular products and services.

Where a specific privacy notice applies, that notice supplements this Privacy Policy.

2. Who We Are

Ignite Technology provides enterprise software solutions, consulting, implementation, support, training and related technology services across the United Kingdom, Europe and the Middle East.

Ignite operates through a number of affiliated companies and offices.

Depending upon the nature of your relationship with us, the relevant data controller may include:

• Ignite Technology Ltd;
• Ignite MEA Ltd;
• Ignite UKI Ltd;
• Ignite NL B.V.;
• Ignite CZ s.r.o.; or
• another Ignite group entity that determines the purposes and means of processing your personal data.

For general website activities and enquiries directed through the UK website, Ignite Technology Ltd will normally be the primary point of contact for data protection matters.

Where another Ignite entity is the relevant controller, we will provide additional information where appropriate.

3. How to Contact Us About Privacy

For questions concerning this Privacy Policy or the way we use personal data, contact:

Data Protection Officer / Privacy Team
Ignite Technology
1010 Cambourne Business Park
Cambourne
Cambridge
CB23 6DP
United Kingdom

Email: DPO@ignite-tec.com
Telephone: +44 (0)1223 656 699

You may also contact us to:

• exercise a data protection right;
• object to direct marketing;
• raise a privacy concern; or
• make a formal data protection complaint.

4. Data Protection Laws That Apply

Depending on the relevant Ignite entity, your location and the processing involved, we process personal data in accordance with applicable legislation including:

• the UK General Data Protection Regulation (“UK GDPR”);
• the Data Protection Act 2018;
• the Data (Use and Access) Act 2025 (“DUAA”);
• the Privacy and Electronic Communications (EC Directive) Regulations 2003 (“PECR”), as amended;
• the EU General Data Protection Regulation (Regulation (EU) 2016/679) where applicable;
• applicable national data protection legislation in European Economic Area (“EEA”) countries in which Ignite operates; and
• other applicable privacy, direct marketing and electronic communications laws.

5. Our Data Protection Principles

We process personal data in accordance with the fundamental data protection principles.

Personal data must be:

• processed lawfully, fairly and transparently;
• collected for specified, explicit and legitimate purposes;
• adequate, relevant and limited to what is necessary;
• accurate and, where necessary, kept up to date;
• retained for no longer than necessary;
• protected by appropriate technical and organisational measures; and
• processed in a way that enables us to demonstrate compliance.

6. Personal Data We May Collect

The information we process depends upon how you interact with Ignite.

We may process the following categories.

6.1 Identity and Professional Information

This may include:

• name;
• title;
• job title;
• employer;
• department;
• professional role;
• business sector;
• seniority;
• professional interests; and
• other information relevant to your business relationship with us.

6.2 Contact Information

This may include:

• business email address;
• personal email address where appropriate;
• business telephone number;
• mobile telephone number;
• company address;
• postal address; and
• communication preferences.

6.3 Customer and Prospective Customer Information

Where you enquire about or purchase Ignite services, we may process:

• details of products or services of interest;
• account information;
• sales opportunities;
• proposals;
• quotations;
• contracts;
• service requirements;
• project information;
• customer-support information;
• meeting notes;
• correspondence; and
• records of your interactions with our teams.

6.4 Supplier and Partner Information

Where you represent a supplier, partner or other business organisation, we may process:

• professional contact information;
• employer;
• position;
• supplier records;
• contractual information;
• due-diligence information;
• account and payment information; and
• business correspondence.

6.5 Website Form Information

Where you complete a website form, we may collect information such as:

• name;
• email address;
• telephone number;
• organisation;
• job title;
• geographic location;
• product or service interest;
• marketing preferences;
• message or enquiry; and
• any other information you voluntarily provide.

6.6 Marketing and Engagement Information

We may process information concerning:

• marketing preferences;
• newsletter subscriptions;
• email opens;
• email link interactions;
• content downloads;
• events attended;
• webinar registrations;
• resources viewed;
• areas of interest; and
• previous communications with Ignite.

6.7 Technical and Website Information

When you use our website, information may be generated automatically, including:

• IP address;
• device type;
• operating system;
• browser type and version;
• screen resolution;
• approximate geographic location;
• referral source;
• pages viewed;
• date and time of visits;
• navigation paths;
• interactions with website content;
• cookie identifiers;
• advertising or analytics identifiers where permitted; and
• website security logs.

6.8 Communications

We may retain personal data contained in:

• emails;
• telephone communications;
• meeting notes;
• contact-form submissions;
• support communications;
• social media communications; and
• other correspondence with you.

6.9 Financial Information

Where necessary for a customer or supplier relationship, we may process:

• invoice information;
• payment status;
• bank account information;
• purchase-order information;
• transaction records; and
• financial correspondence.

7. Special Category Personal Data

Ignite does not ordinarily need to collect special category personal data through its general website or sales and marketing activities.

Special category data includes information concerning:

• racial or ethnic origin;
• political opinions;
• religious or philosophical beliefs;
• trade union membership;
• genetic information;
• biometric information used for identification;
• health; or
• sex life or sexual orientation.

Please do not provide special category information through general website forms unless it is genuinely necessary.

Where Ignite needs to process special category personal data for another purpose, we will identify an appropriate lawful basis under Article 6 UK GDPR and an additional condition under Article 9.

8. How We Obtain Your Personal Data

We may obtain information:

Directly from you

For example where you:

• contact us;
• submit a website form;
• request information;
• download content;
• attend an event;
• request a demonstration;
• enter into a contract;
• communicate with our staff; or
• subscribe to marketing.

From your organisation

Your employer or another business contact may provide your details where you are relevant to:

• a project;
• procurement;
• a contract;
• a service;
• a business relationship; or
• an introduction.

From Ignite group companies

Information may be shared between Ignite entities where necessary for legitimate business activities.

From business partners

We may receive business contact information from:

• technology vendors;
• commercial partners;
• distributors;
• event organisers;
• recruitment providers;
• professional advisers; or
• marketing service providers.

From public and professional sources

We may obtain limited business information from sources such as:

• company websites;
• Companies House;
• professional directories;
• LinkedIn;
• industry publications;
• conference lists where legally provided;
• business networking platforms; and
• other legitimate publicly available business sources.

Where we obtain personal data indirectly, we will provide the information required by applicable law unless an exemption applies.

9. Why We Use Personal Data

We may process personal data for purposes including:

• responding to enquiries;
• arranging calls, meetings or demonstrations;
• providing requested information;
• assessing customer requirements;
• preparing proposals and quotations;
• providing consulting and technology services;
• administering contracts;
• managing customer relationships;
• providing software support;
• project delivery;
• providing training;
• dealing with complaints;
• processing invoices and payments;
• managing suppliers;
• maintaining business records;
• conducting due diligence;
• protecting our systems;
• preventing fraud;
• managing cybersecurity;
• improving our website;
• analysing website performance;
• managing events and webinars;
• delivering marketing communications;
• measuring marketing effectiveness;
• developing business relationships;
• conducting legitimate B2B prospecting;
• maintaining suppression lists;
• complying with legal and regulatory obligations;
• establishing, exercising or defending legal claims; and
• managing Ignite’s corporate group.

10. Lawful Bases for Processing

We rely on different lawful bases depending on the processing activity.

10.1 Contract

We may process personal data where necessary:

• to enter into a contract with you;
• to perform a contract;
• to provide requested products or services; or
• to take steps at your request before entering into a contract.

This is based on Article 6(1)(b) UK GDPR.

10.2 Legal Obligation

We may process personal data where necessary to comply with legal obligations, including:

• tax;
• accounting;
• corporate governance;
• regulatory;
• sanctions;
• fraud-prevention; and
• legal compliance requirements.

This is based on Article 6(1)(c) UK GDPR.

10.3 Legitimate Interests

We may process personal data where necessary for our legitimate interests or those of another organisation, provided those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

• operating and developing our business;
• providing enterprise technology services;
• managing customer relationships;
• B2B marketing;
• identifying prospective corporate customers;
• responding to business enquiries;
• improving our services;
• maintaining network and information security;
• preventing fraud;
• internal administration;
• managing suppliers;
• defending legal claims; and
• maintaining appropriate business records.

Where appropriate, we balance our interests against the impact on individuals.

10.4 Consent

We may rely on consent for activities including:

• certain electronic marketing;
• certain non-essential cookies and similar technologies; and
• other optional processing where consent is the most appropriate lawful basis.

Where we rely on consent, it can be withdrawn at any time.

Withdrawal does not affect processing that occurred lawfully before consent was withdrawn.

11. Business-to-Business Marketing

Ignite markets enterprise technology, software and consultancy services primarily to organisations and business professionals.

We may process professional contact information in order to identify organisations and individuals who are reasonably likely to have an interest in our services.

Where we rely on legitimate interests for B2B marketing, we consider:

• the nature of our services;
• your professional role;
• whether our communication is relevant to that role;
• how your information was obtained;
• your reasonable expectations; and
• the potential impact on you.

We provide a clear method to object to marketing in every appropriate communication.

You may object to direct marketing at any time.

Once you object, we will stop using your personal data for direct marketing. We may retain limited information on a suppression list to ensure that your preference continues to be respected.

12. Electronic Marketing and PECR

In addition to UK GDPR requirements, our electronic marketing activities are subject to PECR.

The rules may differ depending upon whether the recipient is:

• a corporate subscriber;
• an individual subscriber;
• a sole trader; or
• certain forms of partnership.

Where PECR requires consent before we send marketing by email, text or similar electronic communication, we will obtain the necessary consent unless another statutory exception applies.

Every marketing email will provide an appropriate method of opting out.

We will not use an objection to marketing to prevent necessary:

• contractual;
• service;
• security;
• legal; or
• administrative communications.

13. HubSpot

Ignite currently uses HubSpot in connection with elements of its:

• website forms;
• customer relationship management;
• sales activity;
• marketing;
• communications; and
• prospect management.

Where you submit information through a website form, your information may be stored within or processed through HubSpot.

Information may include:

• contact information;
• organisation;
• role;
• marketing preferences;
• interaction history;
• website activity where permitted; and
• communications with Ignite.

Where HubSpot acts as a processor, we require appropriate contractual and data protection safeguards.

The precise use of HubSpot cookies or tracking functionality is governed by our cookie settings and applicable PECR requirements.

14. Analytics

We may use analytics technologies to understand:

• how visitors reach our website;
• which pages are used;
• how long users remain on pages;
• website performance;
• navigation patterns; and
• opportunities to improve our digital services.

Analytics may involve information such as:

• IP address;
• device information;
• browser;
• approximate location;
• page interactions; and
• identifiers.

Where analytics technology requires consent under PECR, it will not be used until the appropriate consent has been obtained.

Where analytics falls within a statutory exemption introduced under the Data (Use and Access) Act 2025, we will comply with the associated requirements, including providing clear information and any required mechanism to object.

15. Cookies and Similar Technologies

Our website uses cookies and similar storage and access technologies.

These technologies may include:

• cookies;
• pixels;
• tags;
• local storage; and
• similar technologies.

They may be used for:

• website operation;
• security;
• authentication;
• user preferences;
• statistical analysis;
• website optimisation;
• marketing; and
• measurement.

15.1 Strictly Necessary Technologies

Consent is not required where technology is strictly necessary to:

• provide a service requested by you;
• transmit communications;
• maintain security;
• authenticate users;
• detect fraud; or
• perform other purposes permitted under PECR.

15.2 Statistical Technologies

Following changes introduced by the Data (Use and Access) Act 2025, certain storage and access technologies used solely to collect statistical information about how our online service is used may qualify for an exemption from consent.

Where we rely on that exemption, we will:

• provide clear information about the technology;
• use the information for qualifying statistical purposes;
• comply with applicable restrictions on sharing; and
• provide a simple and free method of objecting where required.

15.3 Functionality and Preference Technologies

Certain technologies used to adapt or enhance the appearance or functionality of the website may also qualify for a statutory PECR exemption.

Where applicable, we will provide appropriate information and an easy means of objecting.

15.4 Marketing and Profiling Technologies

Cookies or similar technologies used for:

• personalised advertising;
• cross-site tracking;
• remarketing;
• behavioural profiling; or
• other non-exempt marketing purposes

will only be used where valid consent has been obtained.

Where consent is required, rejecting non-essential cookies will be as straightforward as accepting them.

You can change your cookie preferences at any time through our cookie-management facility.

16. Digital Marketing Service Providers

Ignite may use specialist marketing, prospecting or digital agencies to support legitimate marketing activities.

Depending on the service, such organisations may:

• identify potentially relevant corporate prospects;
• support marketing campaigns;
• manage advertising;
• undertake market research;
• provide campaign analytics; or
• assist with communications.

Before appointing a provider that processes personal data on our behalf, we undertake proportionate due diligence and implement appropriate contractual safeguards.

Where a provider determines its own purposes and means of processing, it will be responsible for complying with its obligations as an independent controller.

17. Social Media

Ignite operates accounts on professional and social networking platforms.

If you communicate with us through a platform such as LinkedIn, we may receive:

• your profile name;
• professional information;
• message content;
• interaction data; and
• information that you make available through the platform.

The platform provider will generally also process your information for its own purposes.

You should review the platform provider’s own privacy information.

18. Customers and Client Projects

Where Ignite delivers technology consulting, implementation, support or managed services, we may encounter personal data provided by a customer.

Depending upon the engagement, Ignite may act as:

• a data controller;
• a processor acting on the customer’s instructions; or
• both in relation to different processing activities.

Where Ignite acts as processor, the customer’s privacy notice will normally explain the primary processing, and our processing will be governed by a contract meeting applicable Article 28 requirements.

19. Recruitment and Employment

This general website Privacy Policy is not intended to provide all privacy information relating to employment.

Candidates and employees may receive separate privacy notices describing how Ignite processes personal data in connection with:

• recruitment;
• background screening;
• employment;
• payroll;
• benefits;
• performance management; and
• other HR activities.

20. Who We Share Personal Data With

We may disclose personal data to recipients including:

• other Ignite group companies;
• technology vendors;
• software providers;
• hosting providers;
• CRM providers;
• marketing service providers;
• professional advisers;
• accountants;
• auditors;
• insurers;
• banking and payment providers;
• IT support providers;
• cybersecurity providers;
• business partners;
• subcontractors;
• customer organisations where relevant;
• government agencies;
• tax authorities;
• law-enforcement authorities;
• courts; and
• regulatory bodies.

We disclose only information reasonably necessary for the relevant purpose.

21. Ignite Group Companies

Ignite operates internationally, including in:

• the United Kingdom;
• the Netherlands;
• the Czech Republic;
• Sweden;
• the United Arab Emirates;
• Saudi Arabia; and
• other jurisdictions in which Ignite undertakes projects or business operations.

Personal data may therefore be shared between relevant Ignite group companies for purposes including:

• customer management;
• project delivery;
• resource management;
• finance;
• IT;
• cybersecurity;
• legal and compliance;
• sales;
• marketing;
• management reporting; and
• corporate administration.

Access will be limited according to legitimate business need.

22. International Transfers

Because Ignite operates internationally and uses global technology providers, personal data may be transferred outside the United Kingdom and, where EU GDPR applies, outside the EEA.

Such transfers may include transfers to:

• Ignite group companies;
• cloud providers;
• CRM providers;
• technology vendors;
• support providers; and
• other organisations involved in providing our services.

Where international transfer restrictions apply, we will use an appropriate legal mechanism.

Depending on the destination and circumstances, this may include:

• UK adequacy regulations;
• an applicable European Commission adequacy decision;
• the UK International Data Transfer Agreement;
• the UK Addendum to the European Commission Standard Contractual Clauses;
• European Commission Standard Contractual Clauses;
• Binding Corporate Rules; or
• another legally permitted mechanism.

We will assess whether additional technical, organisational or contractual safeguards are required.

23. Information Security

Ignite implements technical and organisational measures designed to protect personal data against:

• accidental loss;
• unauthorised access;
• unlawful alteration;
• unauthorised disclosure;
• destruction;
• misuse; and
• other unlawful processing.

Measures may include, depending upon risk:

• access controls;
• multifactor authentication;
• encryption;
• endpoint protection;
• network security;
• vulnerability management;
• security monitoring;
• logging;
• backup and recovery;
• incident-management procedures;
• role-based access;
• employee training;
• confidentiality obligations;
• supplier security assessment; and
• business continuity controls.

Access to personal data is limited to people who require it for authorised purposes.

24. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

The appropriate period depends upon factors including:

• the nature of our relationship with you;
• contractual obligations;
• legal requirements;
• tax and accounting rules;
• the need to maintain business records;
• limitation periods for legal claims;
• regulatory requirements;
• information-security requirements; and
• whether an investigation or dispute is ongoing.

When information is no longer required, it will be:

• securely deleted;
• destroyed; or
• anonymised.

25. Marketing Retention

Marketing information will not be retained indefinitely merely because you have not actively requested deletion.

We periodically assess whether:

• your information remains accurate;
• our services remain relevant to your professional role;
• there has been meaningful recent engagement;
• continued processing remains necessary; and
• our lawful basis remains appropriate.

Where you unsubscribe, we may retain minimal information on a suppression list so that we do not inadvertently market to you again.

26. Automated Decision-Making and Profiling

We may use automated tools to support activities such as:

• marketing segmentation;
• lead prioritisation;
• website analytics;
• service recommendations; or
• business analysis.

We do not ordinarily use website or marketing information to make a decision based solely on automated processing that has a legal or similarly significant effect on you.

The Data (Use and Access) Act 2025 has changed aspects of the UK rules relating to automated decision-making.

Where Ignite undertakes significant solely automated decision-making, we will ensure that:

• an appropriate lawful basis exists;
• applicable restrictions concerning special category data are respected;
• suitable safeguards are implemented;
• affected individuals receive appropriate information;
• human intervention is available where required;
• individuals can make representations; and
• decisions can be challenged where the law requires.

27. Artificial Intelligence

Ignite provides and advises on technology solutions that may include artificial intelligence and automation.

Where Ignite itself uses AI systems involving personal data, we assess appropriate privacy safeguards including:

• purpose limitation;
• lawful basis;
• data minimisation;
• accuracy;
• transparency;
• security;
• bias and discrimination;
• human oversight;
• processor arrangements;
• international transfers; and
• the need for a Data Protection Impact Assessment.

Personal data submitted through the website will not be used to train a general-purpose third-party AI model unless that processing has been specifically assessed, an appropriate lawful basis exists and suitable transparency and safeguards are provided.

28. Children

Ignite’s website and services are primarily directed at business professionals and organisations and are not intended for children.

We do not knowingly use the general website to target services or marketing at children.

If we identify that children’s personal data has been collected unnecessarily, we will take appropriate steps to address the processing.

29. Your Data Protection Rights

Depending upon the applicable law and circumstances, you may have the following rights.

Right to Be Informed

You have the right to receive clear information about how your personal data is used.

Right of Access

You may ask whether we process personal data about you and request a copy of the relevant information.

Right to Rectification

You may ask us to correct inaccurate personal data and complete incomplete information.

Right to Erasure

You may request deletion of personal data where the legal conditions for erasure apply.

This is not an absolute right and information may sometimes need to be retained for legal or other permitted purposes.

Right to Restriction

You may request restriction of processing in certain circumstances.

Right to Data Portability

Where the statutory requirements are satisfied, you may request certain personal data in a structured, commonly used and machine-readable format.

Right to Object

You may object to processing based on legitimate interests because of your particular circumstances.

We will cease the processing unless we have compelling legitimate grounds to continue or processing is required for legal claims.

Right to Object to Direct Marketing

You have the right to object to direct marketing at any time.

Where you object, we will stop using your personal data for direct marketing.

Automated Decision-Making Rights

You may have rights in relation to certain significant decisions made solely through automated processing.

Right to Withdraw Consent

Where processing is based upon consent, you may withdraw that consent at any time.

30. Making a Subject Access or Other Rights Request

You can exercise your data protection rights by contacting:

DPO@ignite-tec.com

You are not required to use a particular form for a request to be valid.

We may ask for information reasonably necessary to:

• confirm your identity; or
• understand what information or processing your request relates to.

We will respond in accordance with the time limits required by applicable law.

Requests will normally be dealt with free of charge, although the law permits a reasonable fee or refusal in limited circumstances involving manifestly unfounded or excessive requests.

31. Data Protection Complaints

You have the right to complain directly to Ignite if you believe we have not handled your personal data in accordance with data protection law.

You may make a complaint by:

Email: DPO@ignite-tec.com

Post:
Data Protection Officer
Ignite Technology
1010 Cambourne Business Park
Cambourne
Cambridge
CB23 6DP
United Kingdom

We will facilitate the making of data protection complaints and will:

• acknowledge your complaint within 30 days;
• take appropriate steps to investigate it;
• keep you appropriately informed about progress where necessary; and
• respond to the complaint without undue delay, explaining the outcome.

Where appropriate, we will tell you about your right to complain to the Information Commissioner’s Office.

32. Complaints to the Information Commissioner’s Office

If you are dissatisfied with the way Ignite processes your personal data or handles your complaint, you have the right to raise the matter with the UK supervisory authority:

Information Commissioner’s Office (“ICO”)

You can find current contact and complaint information at the ICO’s official website.

We encourage you to contact Ignite first where possible, as this may allow us to resolve your concern promptly. However, you are not prevented from exercising your statutory right to approach the ICO.

If EU GDPR applies to your personal data, you may also have the right to complain to the competent supervisory authority in the EEA country where you live, work or believe an infringement has occurred.

33. External Links

Our website may contain links to websites operated by third parties.

Once you leave the Ignite website, the relevant third party may process your personal data under its own privacy policy.

Ignite is not responsible for the privacy practices of independent third-party websites.

We encourage you to review their privacy information before providing personal data.

34. Corporate Transactions

If Ignite or part of its business is involved in:

• a merger;
• acquisition;
• restructuring;
• financing;
• sale of assets; or
• other corporate transaction,

personal data may be disclosed to professional advisers, prospective purchasers, investors or other relevant parties where necessary.

Appropriate confidentiality and data-protection safeguards will be applied.

35. Changes to the Purpose of Processing

We will generally use personal data only for the purposes for which it was collected.

If we reasonably wish to use it for another purpose, we will consider whether that new purpose is compatible with the original purpose.

Where required, we will:

• identify a new lawful basis;
• provide additional privacy information; and
• obtain consent where consent is required.

36. Keeping Your Information Accurate

We take reasonable steps to keep personal data accurate and up to date.

You can help us by informing us when relevant information changes.

To update your information, contact:

info@ignite-tec.com

or, for privacy matters:

DPO@ignite-tec.com

37. Changes to This Privacy Policy

We may amend this Privacy Policy from time to time to reflect:

• changes in law;
• changes in ICO guidance;
• changes in our products and services;
• new technology;
• changes in suppliers;
• changes in our international operations; or
• changes in the way we process personal data.

The effective date at the top of this Privacy Policy identifies the current version.

Where changes materially affect individuals, we will take appropriate steps to communicate those changes.

38. Contact Details

For general enquiries:

Ignite Technology
1010 Cambourne Business Park
Cambourne
Cambridge
CB23 6DP
United Kingdom

Telephone: +44 (0)1223 656 699
General email: info@ignite-tec.com

For data protection enquiries, rights requests and complaints:

Data Protection Officer / Privacy Team
Email: DPO@ignite-tec.com

Our Privacy Commitment

Ignite Technology will process personal data lawfully, fairly and transparently, collect only information that is relevant to legitimate business purposes, protect that information using appropriate technical and organisational measures, and respect the rights of individuals under applicable UK and European data protection law.

Effective date: 25 August 2026
Version: 2.0