Privacy Notice

Scope of this Privacy Notice

This Privacy Notice applies to Renishaw plc and (where applicable) the relevant subsidiary involved in the processing of personal information. You can find our subsidiaries and their contact details here. This Privacy Notice does not apply to Renishaw Neuro Solutions Ltd, whose corresponding notice is available here.

This Privacy Notice applies to online and offline processing by us as a data controller, including but not limited to our mobile applications, our website (www.renishaw.com) and its subdomains, including our careers page. This Privacy Notice also applies whenever it is referenced by a URL or presented in printed form, whether at our physical locations, during in-person events, roadshows, or in connection with any Renishaw activity where this Privacy Notice is made available to you.

Our products and services are intended for use by organisations and not for individual consumer or household purchases. When our products and services are made available to you through an organisation (such as your employer), this Privacy Notice does not apply to the extent that we process personal information in the role of a processor or service provider on their behalf and you should refer to the organisation's own policies and notices. If you are a Renishaw employee or contractor, please refer to our internal privacy notice.

How do we collect personal information?

Information that you provide voluntarily

You may share information with us voluntarily, for example, you may provide your contact details in order to register an account with us, apply to work with us, download brochures and other content from our website, subscribe to marketing communications from us, register for an event or webinar, request a quote from us, purchase our products or services, or submit enquiries to us. You may also share personal information with us during meetings, by corresponding with us, or during other direct interactions. If you provide us with personal information relating to other individuals, you represent that you have the authority to do so and (where required) have obtained the necessary consent.

Information that we collect automatically

When you visit our website and portals or use our products, we may collect certain information automatically from your device as further explained under the headings ‘Cookies' and ‘Telemetry' below. In some countries, this information may be considered personal information under applicable data protection laws, and accordingly, you may be presented with pop-ups, banners or other notices which ask you whether you consent to such collection.

Information that we obtain from third party sources

From time to time, we may collect or receive personal information about you from publicly available sources (such as social media) or third party sources (such as providers of business contact information, recruitment agencies, former employers or supervisors, background check agencies, distributors or resellers who sell our products and services to you, and your colleagues who may provide us with your contact information for the purpose of providing or obtaining goods or services), but only where we have checked that these third parties are legally permitted or required to disclose your personal information to us. We may combine this with personal information provided by you to enhance or update our records.

What personal information do we collect and why?

Our purpose or legal basis for collecting and using personal information depends on the personal information concerned, applicable local laws, and the context in which we collect it.

However, we will normally collect personal information from you only where we need the personal information to perform a contract with you, where we have your consent to do so, or (if permitted by applicable local law) where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person.

Some common examples are described below. We will otherwise usually make the purpose or basis clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).

In general, we will use the personal information we collect from you only for the purposes described in this Privacy Notice or for purposes that we explain to you at the time we collect your personal information. However, we may also use your personal information for other purposes that are not incompatible with the purposes we have disclosed to you (such as statistical purposes) if and where this is permitted by applicable data protection laws.

If you have questions about or need further information concerning the purpose or legal basis on which we collect and use your personal information, please contact us using the contact details provided at the bottom of this Privacy Notice.

Recruitment

When you apply for a role, we collect and use personal information (such as your contact details, covering letter, CV/résumé, and application form) to reach a hiring decision. This includes assessing your skills and qualifications, verifying your information, carrying out reference checks, (where applicable to your role) carrying out background checks and improving our recruitment processes. We may also keep this information on file to contact you about future opportunities unless you ask us not to do this.

Cookies, pixels, and similar tracking technology

We use cookies, web beacons, pixels, and similar tracking technology to collect and use personal information. This may include your IP address, device type, unique device identification numbers, browser-type, broad geographic location (e.g. country or city-level location) and other technical information. We may also collect information about how your device has interacted with our website or portal, including the pages accessed and links clicked. We, and in some cases third party providers such as Google, use this information for analytics purposes, to improve the quality and relevance of our website to visitors, and in some cases, for the purposes of targeted or online behavioural advertising. For further information about the types of tracking technology we use and why, please see our Cookies Guide and the 'Marketing' section below. For further information about how Google uses your information, please refer to the section ‘How Google uses information from sites or apps that use our services' at www.google.com/policies/privacy/partners/.

When you install or update our products, you may be asked to share telemetry with us. Telemetry is valuable technical information (such as device type, operating system, or product version) that enables us to monitor product performance, improve usability, highlight errors for remediation, and take informed product security, development, and retirement decisions.

We manage tracking technology consents via a cookie banner pop-up.

Marketing

We may send you marketing information about our products and services. Where required by law, we will obtain your consent before contacting you. You can ask us to stop sending you marketing communications at any time by visiting our marketing preference centre or clicking on any unsubscribe options in the communications that you receive, in which case we may retain a record of your preference in order to keep our mailing list current. Please note that opting out of receiving marketing communications will not affect operational notices and correspondence described under the heading 'Account management' below.

We may use tracking technology to determine whether communications were delivered, whether they were opened, for how long certain pages of an attachment were viewed, and whether you responded to or accepted a proposal contained within the communication. We may combine this with information from other internal sources (such as website analytics, sales transactions, and event attendance lists) and external sources (such as your company's website and social media sites) in order to improve the quality and relevance of our marketing materials, determine whether you are likely to be interested in our products and content, assess the effectiveness of our marketing materials for the generation of sales, and report on marketing activities undertaken.

Events

If you attend an event at which we are exhibiting, you may consent to share your contact details with us for marketing purposes by allowing us to scan your attendee badge or giving us your business card. You can subsequently opt out as described under the heading ‘Marketing' above.

Account management

We may use your personal information (including where applicable financial information) to manage your account, including for the purposes of product forecasting, order processing, billing, payment processing, financial reporting, trend analysis, and product roadmap / lifecycle planning. We may also send you operational notices and correspondence about your account (such as product update notices, delivery status updates, security notices and license expiry/renewal notices).

Network monitoring

If you correspond with us, we may log personal information while monitoring our company systems, data and equipment for the purposes of threat detection and prevention, investigating and remedying security incidents, and ensuring lawful use of such systems, data and equipment.

Customer support

If you contact us to report problems or ask questions about our products and services, we may record your contact information and details of our interaction with you in our support ticket management system. We may use this information to respond to your request, improve our existing products and services, research and develop new products and services, troubleshoot and remedy issues with our products and services, and monitor support response times and effectiveness.

Compliance

We may use your personal information to enforce our terms and conditions and to carry out checks aimed at preventing illegal activities such as export and trade sanction violations, bribery, fraud, corruption, and modern slavery. If you raise any concerns via our Speak Up whistleblowing program, or are named as a party or witness, we will use the information provided to investigate such concern. We may also maintain compliance records and report on the steps we have taken to auditors and authorities.

Feedback

If you participate in customer satisfaction surveys, we may use your personal information for our internal business analysis and training purposes in order to improve our understanding of our users' requirements, to measure and increase customer satisfaction, and to improve our products and services.

Forums

Some of our webpages or social media pages may allow you to like, post or comment on information. You are reminded that any information that you share on publicly available pages may be read and used by any member of the public for any purpose and you should carefully consider the sensitivity of any information before you share it. Your interactions with social media sites are governed by the privacy notices of the relevant third-party provider.

Visitors

If you visit our offices or events that we organise, you may be required to register as a visitor/attendee and to provide your name, title, company name, contact details and time/date of arrival for security, confidentiality, health, safety, and event planning purposes. Some of our offices or events may operate closed circuit television monitoring for the purposes of preventing and investigating health and safety incidents and criminal activity, in order to protect and safeguard persons and property. Signage will indicate where such monitoring is in operation and any additional local monitoring purposes.

With whom do we share your personal information?

We do not sell or rent personal information to third parties. We may share with or disclose your personal information to the following categories of recipients:

• to our group companies, third party services providers and partners who provide data processing services to us (for example, cloud hosting services, marketing and advertising service providers, original equipment manufacturers, and payment service providers), or provide our products and services to you (for example, original equipment manufacturers, agencies, distributors, and resellers), to our professional advisors, or those who otherwise process personal information for purposes that are described in this Privacy Notice or notified to you when we collect your personal information;
  
• to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
  
• to an actual or potential buyer (and its agents and advisers) in connection with any actual or proposed change of control, assignment, transfer, purchase, merger, re-organisation or acquisition of all or any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this Privacy Notice;
  
• to any other person with your consent to the disclosure or for the purposes for which you disclosed the personal information to us as indicated at the time and point of the disclosure (or as was obvious at the time and point of disclosure).

We take care to restrict access to those third parties who have a legitimate purpose for accessing it. Whenever we permit a third party to access personal information, we will implement appropriate measures to ensure the information is used in a manner consistent with this Privacy Notice.

How do we keep personal information secure?

We protect personal information using technical and organisational measures designed to reduce the risks of loss, misuse, and unauthorised access, disclosure, alteration, and destruction of personal information appropriate to the type of personal information processed. While we make commercially reasonable efforts to protect your personal information, it is not possible to guarantee 100% security in all circumstances.

You are solely responsible for protecting any passwords or other credentials that provide access to our products, services, systems or other assets, for signing out of such accounts when you have finished using them, and for using the appropriate level of care whenever communicating with us.

International data transfers

Your personal information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country (and, in some cases, may not be as protective).

Specifically, our headquarters and website servers are located in the United Kingdom, and our group companies are located globally, as detailed here. We may also make onward transfers to the third parties identified under the heading ‘With whom do we share your personal information?' above. This means that when we collect your personal information, we may process it in the countries in which these recipients operate, for the purpose and duration described in this Privacy Notice.

However, we have taken appropriate safeguards to require that your personal information will remain protected in accordance with this Privacy Notice. For example, if we transfer personal information from the UK, Switzerland, China, Brazil, or European Economic Area, we will implement a data transfer mechanism approved by applicable laws, such as standard contractual clauses.

Data retention

We retain personal information we collect from you for as long as necessary to fulfil the purposes for which we collected it (for example, to provide you with a service you have requested) or to comply with applicable legal, tax or accounting requirements.

At the end of such period, we will either delete or anonymise it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Your data protection rights

Depending on your location, you may have the following data protection rights:

• Access, correct, update or request deletion of your personal information, by contacting us using the contact details below.
• Object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information. Again, if eligible, you can exercise these rights by contacting us using the contact details below.
• Opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe”, “opt-out” or “preference centre” link in the marketing e-mails we send you or by visiting our marketing preference centre at any time.
• Opt-out of cookies, pixels, and similar tracking technologies or adjust your preferences at any time by clicking the cookie icon at the bottom of our website. You may also adjust settings in your browser or device, however, such features and options are browser and device specific and are not uniform. If you choose to block cookies, certain features of our sites may not work. Blocking or rejecting cookies will not stop all of the tracking described in this Privacy Notice. You cannot disable all cookies, such as those that are essential to the functioning of the site.
• Similarly, if we have collected and process your personal information with your consent, then you may be entitled to withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
• You may be entitled to make a request to ‘Limit the Use of My Sensitive Personal Information' or ‘Do Not Sell or Share My Personal Information'' as described in the California Privacy Exhibit below.
• We encourage you to contact dataprotection@renishaw.com if you have a privacy related complaint or if you have any questions about this Privacy Notice. You may also have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. (Contact details for certain authorities are available here.)

You may have other rights under applicable data protection laws. We will respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. Depending on the circumstances, we may need to verify your identity before complying with your request and we may not always be able to comply with your request in full (for example when producing your information may reveal another person's personal information or when there is an overriding interest or conflicting legal obligation). We aim to respond to requests within one month, but we may sometime require additional time due to the complexity of your request.

If you are a California consumer, please see the California Privacy Exhibit below for information that may apply to you.

Links

Our websites and services may contain links to other websites, products and services maintained by third parties. The privacy practices of such third parties are not controlled by us and are governed by their privacy statements, which you should review to better understand their privacy practices.

Children

Our products and services are not directed to individuals under the age of 16. Apart from our community and educational outreach activities which we arrange with the consent of the applicable school, parent or guardian, we do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with their information without your consent, please contact us using the contact details below.

Updates to this Privacy Notice

We may update or modify this Privacy Notice from time to time in response to changing legal, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws. All changes will be effective immediately upon posting.

You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the top of this Privacy Notice.

How to contact us

If you have any questions or concerns about our use of your personal information, please contact us via dataprotection@renishaw.com.

If you prefer to contact us via alternative methods, you can do so via the contact details below or via the contact details of our applicable global offices here.

• Postal address: Renishaw plc, New Mills, Wotton-under-Edge, Gloucestershire, GL12 8JR, UK
• Telephone number: +44 (0)1453 524 524

If you are located in the UK or European Union, you may use the following information to contact our Data Protection Officer:

• dataprotection@renishaw.com
• Renishaw Data Protection Officer, XpertDPO Ltd, 20 Harcourt Street, Dublin, D02 H364, Ireland

EU representative

Our EU representative is Renishaw (Ireland) DAC and can be contacted at:

Email address: eurepresentative@renishaw.com

Postal address: Swords Business Park, Mountgorry, Swords, Co. Dublin, K67 FX67, Ireland.

VIDEO PRIVACY PROTECTION ACT EXHIBIT

This exhibit provides additional terms that apply to the United States only.

We may include ancillary video content (including pre recorded webinars, product demos, and support videos) for advertising, marketing, and support purposes. We may collect information about your interactions with this content via registration forms, cookies, pixels, SDKs, or similar technologies. To address any concerns related to the Video Privacy Protection Act (VPPA) and state wiretapping laws (including the California Invasion of Privacy Act), we do not disclose personal information relating to video viewing or ad tracking to third parties except: (i) with your prior consent, including via our cookie banner; (ii) pursuant to a lawfully issued court order, subpoena, or other legal process (with advance notice where legally permissible); (iii) in aggregated or de identified form that cannot reasonably be used to identify you; or (iv) as otherwise permitted by the VPPA or other applicable laws. We do not intercept or disclose the contents of your communications with us in a manner prohibited by law. Vendors that support analytics, video hosting, session diagnostics, or chat/support act as our service providers under contracts that limit their use of information to providing services to us and require appropriate safeguards.