Privacy Policy

Effective date: March 15, 2025

1. Preamble

This privacy policy (the "Privacy Policy") is designed to inform users, customers, partners, and visitors about how Ciao Apps LTD ("we," "us," or "our"), a company registered in the United Kingdom, processes personal data through our website at https://scrape-that.com (the "Website") and our web scraping services.

This Privacy Policy explains in clear terms what personal data we collect, how we use it, and what rights you have regarding your data. We encourage you to read this policy carefully. If you do not agree with any terms in this Privacy Policy, please discontinue use of our Website and services.

2. Definitions

For the purposes of this Privacy Policy, we use the following definitions in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018:

• "Personal Data" means any information relating to an identified or identifiable natural person
• "Processing" means any operation performed on personal data
• "Data Subject" means the individual to whom the personal data relates
• "Data Controller" means the entity determining the purposes and means of processing personal data
• "Data Processor" means the entity processing personal data on behalf of the controller

3. Data Controller Information

Ciao Apps LTD takes its role as data controller seriously, ensuring proper handling and protection of all personal data processed through our services. As a UK-registered company, we strictly adhere to UK data protection laws and regulations. We maintain full transparency about our data processing activities and are committed to protecting your privacy rights.

Our contact details are:

Company Name: Ciao Apps LTD Registered Address: 64 NILE STREET, N1 7SR LONDON, ENGLAND Email: [email protected]

If you have any questions about how we handle your personal data, our Data Protection Officer can be reached at the above address or via email at [email protected].

4. Personal Data We Collect

We believe in transparency regarding the data we collect and process. Our data collection is limited to what is necessary to provide our services effectively and maintain legal compliance.

4.1 Automatically Collected Data

When you interact with our Website, our systems automatically collect certain technical information. This collection is necessary for the proper functioning of our service and to ensure security. The data includes your IP address, which helps us prevent abuse and maintain security, as well as technical details about your browser and device that help us optimize your experience. We also collect information about how you use our Website through access timestamps and usage patterns, which helps us improve our service.

4.2 Data You Provide

To provide you with our services, we need certain information that you provide directly. This includes basic account information such as your name and email address, which are essential for communication and account management. For business users, we collect company information to properly maintain our business relationship. We handle billing information with utmost care, using industry-standard security measures to protect your financial data.

Your communication preferences help us ensure we respect your wishes regarding how we contact you. We maintain detailed records of service usage and scraping configurations to provide you with the best possible service and support.

4.3 Payment Information

We understand the sensitive nature of payment information and take extra precautions in this area. While we need to process payments for our services, we never store complete credit card information on our servers. Instead, we work with reputable payment processors who specialize in securing financial transactions. These processors maintain the highest levels of PCI DSS compliance to ensure your payment data remains safe.

4.4 Service Usage Data

The nature of our web scraping service requires us to collect specific technical data about your usage. This includes details about your scraping requests, target URLs, and how our system responds to these requests. We maintain logs of this information to ensure service quality, prevent abuse, and provide technical support when needed. All of this data is handled with appropriate security measures and retained only as long as necessary.

5. How We Use Your Data

Our use of your personal data is always purposeful and limited to what's necessary for providing and improving our services. We process your data with care and transparency, ensuring that each use case serves a legitimate purpose and complies with data protection regulations.

We use your personal data for the following purposes:

1. Service Provision

   • Managing your account
   • Processing scraping requests
   • Providing customer support
   • Sending service notifications

2. Business Operations

   • Processing payments
   • Preventing fraud
   • Improving our services
   • Analytics and performance monitoring

3. Communications

   • Sending service updates
   • Marketing communications (with consent)
   • Responding to inquiries

4. Service Optimization

   • Improving scraping efficiency
   • Optimizing request handling
   • Enhancing data cleaning algorithms
   • Performance monitoring and scaling

5. Legal Compliance

   • Maintaining audit trails
   • Responding to legal requests
   • Enforcing our terms of service
   • Protecting our legal rights

6. Legal Bases for Processing

Under UK data protection law, every instance of data processing must have a valid legal basis. We take this requirement seriously and ensure that all our data processing activities are properly justified. Here's a detailed explanation of how we use each legal basis:

Contract Performance When you sign up for our services, we enter into a contract with you. This requires us to process your data to fulfill our obligations under that contract, such as providing the scraping service, managing your account, and processing payments. Without this processing, we would be unable to deliver our services to you.

Legitimate Interests Sometimes we need to process your data to pursue our legitimate business interests. This includes improving our services, preventing fraud, and ensuring the security of our platform. We carefully balance our interests against your privacy rights and only proceed when we're confident this balance favors both parties.

Legal Obligation As a UK-based company, we must comply with various legal requirements that necessitate data processing. This includes maintaining proper business records, complying with tax laws, and responding to valid legal requests from authorities.

Consent For certain types of processing, particularly marketing communications, we rely on your explicit consent. You have the right to withdraw this consent at any time, and we make this process as straightforward as possible.

7. Data Sharing and Transfers

We recognize that sharing your data with third parties requires special care and attention. While we do need to share data with certain service providers to operate our business, we maintain strict control over these relationships:

Our service providers undergo rigorous vetting to ensure they meet our security and privacy standards. We maintain detailed data processing agreements with each provider, ensuring they handle your data according to our instructions and applicable law.

When we transfer data outside the UK, we implement appropriate safeguards as required by UK GDPR. This may include:

• Standard Contractual Clauses approved by the UK authorities
• Adequacy decisions where applicable
• Additional technical measures to ensure data protection

We regularly review our data sharing arrangements and maintain a detailed register of all third parties who process data on our behalf.

8. Data Retention

Our data retention policies balance your right to privacy with our legal obligations and legitimate business needs. We keep your data only for as long as necessary, implementing different retention periods based on the type of data and its purpose:

• Account information: As long as your account is active plus 2 years
• Transaction records: 7 years (as required by law)
• Usage logs: 12 months
• Marketing preferences: Until you withdraw consent

Additional retention periods:

• Scraping logs: 30 days
• Error reports: 90 days
• API access logs: 6 months
• Compliance documentation: 3 years

We regularly review these retention periods to ensure they remain appropriate. When data reaches the end of its retention period, we ensure it is securely deleted or anonymized using industry-standard methods.

9. Your Rights

Under UK data protection law, you have significant rights regarding your personal data. We are committed to honoring these rights and making it easy for you to exercise them:

• Access your personal data
• Rectify inaccurate data
• Erase your data (right to be forgotten)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent

When you submit a request to exercise your rights, we aim to respond within one calendar month. We won't charge you for these requests unless they are manifestly unfounded or excessive. To protect your privacy, we may ask for verification of your identity before proceeding with any request.

10. Security

Protecting your data is fundamental to our business. We implement a comprehensive security program that includes both technical and organizational measures:

• Encryption at rest and in transit
• Access controls
• Regular security assessments
• Employee training
• Incident response procedures

We regularly review and update our security measures to address new threats and vulnerabilities. Our security team monitors our systems 24/7 for any suspicious activity, and we maintain incident response plans to address any potential security issues promptly.

11. Cookies

We use cookies and similar technologies to:

• Maintain your session
• Remember preferences
• Analyze usage patterns
• Improve performance

You can control cookie preferences through your browser settings.

12. Children's Privacy

Our services are not intended for users under 18. We do not knowingly collect data from children.

13. Changes to This Policy

We may update this Privacy Policy periodically. The latest version will be posted on our Website with an updated effective date.

14. Contact Us

For any questions about this Privacy Policy or our data practices, please contact:

• Email: [email protected]
• Address: [Your UK Registered Address]
• Phone: [Your Contact Number]

15. Complaints

If you are unsatisfied with our response to a privacy concern, you have the right to complain to the Information Commissioner's Office (ICO):

Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF

Website: https://ico.org.uk

16. Service Specific Disclaimers and Limitations

16.1 Data Usage Responsibility

We provide a data extraction and cleaning service that helps users obtain structured content from websites. It's important to understand that while we provide the tools and infrastructure for data extraction, we do not control or take responsibility for how users utilize the extracted data. The responsibility for proper data usage lies entirely with our users.

Users must ensure they have the necessary rights and permissions to scrape and use any data obtained through our service. We do not claim ownership of any scraped content, and users are required to comply with all applicable laws, including copyright laws, when using our service.

16.2 Prohibited Uses

Our service must not be used for any unlawful purposes. Specifically, users are prohibited from scraping content protected by copyright without proper authorization from the content owners. The service may not be used to collect personal data without a proper legal basis, nor to violate websites' terms of service or robots.txt directives. We strictly prohibit any activities that could harm or overload target websites.

16.3 Service Limitations

Our service is provided "as is" without warranties of any kind. While we strive to maintain high quality and reliability, we cannot guarantee the accuracy, completeness, or availability of scraped data. We maintain the right to limit or block requests that violate our terms, and we may modify or discontinue any feature without prior notice when necessary for service improvement or maintenance.

16.4 Third-Party Websites

When it comes to third-party websites, users should understand that we serve solely as a technical intermediary. We do not endorse or take responsibility for content on scraped websites. Users must respect third-party websites' terms of service and robots.txt files, and implement appropriate delays and rate limits when scraping. We cannot be held liable for any damages resulting from the scraping of third-party websites.

16.5 Data Cleanliness and Processing

Our data cleaning tools are designed to help extract and structure content efficiently. However, users should understand that while we provide these tools, the responsibility for validating and verifying scraped data remains with the user. Our cleaning operations are limited to basic structuring and formatting of data, and we do not modify or alter the original content beyond these basic operations. We strongly recommend that users implement their own validation and verification processes to ensure the data meets their specific requirements.

17. Compliance and Legal Obligations

17.1 User Obligations

Using our service comes with important responsibilities. Users must obtain necessary permissions before scraping any website and comply with all applicable laws and regulations. This includes respecting intellectual property rights and implementing appropriate data protection measures. We expect our users to maintain accurate records of their data processing activities and be prepared to demonstrate compliance when required.

17.2 Our Commitment to Compliance

We take our compliance obligations seriously and maintain comprehensive measures to ensure service integrity. This includes conducting regular security audits, monitoring access controls, and analyzing usage patterns to detect and prevent abuse. Our automated systems work continuously to maintain service security while protecting both our users and the websites they interact with.

17.3 Limitation of Liability

While we strive to provide reliable and efficient service, we must limit our liability in certain areas. This includes user's scraping activities, content accessed through our service, data accuracy and completeness, service availability and performance, and third-party claims. These limitations are necessary to provide our service while maintaining reasonable business operations.

18. Technical Safeguards

18.1 Service Protection

To maintain service quality and protect both our users and target websites, we implement comprehensive technical measures. Our system includes sophisticated rate limiting, request validation, and IP rotation mechanisms. We also employ browser fingerprint management and anti-bot detection measures to ensure smooth operation of the service.

18.2 Data Protection

Your security is paramount to us. We implement robust data protection measures including end-to-end encryption and secure data transmission protocols. Our systems undergo regular security updates, and we maintain comprehensive access logging and intrusion detection systems to ensure data safety.

19. Indemnification

By using our service, users agree to indemnify and hold harmless Ciao Apps LTD from any claims or legal proceedings arising from their use of the service. This includes, but is not limited to, claims related to violations of third-party rights, misuse of scraped data, regulatory violations, and any legal proceedings related to scraping activities.

This indemnification is essential to maintain our service and protect our ability to serve our users while operating within legal and ethical boundaries. Users acknowledge that their use of our service is at their own risk and accept responsibility for ensuring their activities comply with all applicable laws and regulations.