throxy procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Request access to your personal data (commonly known as a “subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ To obtain more information about these safeguards or to request a copy of the relevant transfer mechanism, please contact us at privacy@throxy.com.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ By using the Services, you agree to be bound by our Privacy Policy, which is incorporated into these Legal Terms. Please be advised the Services are hosted in the United Kingdom. If you access the Services from any other region of the world with laws or other requirements governing personal data collection, use, or disclosure that differ from applicable laws in the United Kingdom, then through your continued use of the Services, you are transferring your data to the United Kingdom, and you expressly consent to have your data transferred to and processed in the United Kingdom.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated. ” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ We use a number of third-party service providers to support the functionality of our website and to deliver services such as analytics, lead tracking, and marketing. Some of these service providers are located outside the United Kingdom but process personal data in jurisdictions that do benefit from an adequacy decision under UK data protection law.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We will maintain certain data that you transmit to the Services for the purpose of managing the performance of the Services, as well as data relating to your use of the Services. Although we perform regular routine backups of data, you are solely responsible for all data that you transmit or that relates to any activity you have undertaken using the Services. You agree that we shall have no liability to you for any loss or corruption of any such data, and you hereby waive any right of action against us arising from any such loss or corruption of such data.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ Details of the purpose for the retention periods for different aspects of your personal data are set out in the table above. Regarding the retention period from the data sourced from public sources or other providers: Personal data is stored in Throxy’s systems only for as long as necessary to fulfill our outreach purpose. Throxy has defined a short retention period of one month for the personal data collected. In practice, this means that if an individual does not respond or engage within roughly one month of the initial data collection (or first contact), their data will be deleted from active databases. The one-month period aligns with the idea that data obtained for a particular campaign or introduction should not be kept indefinitely if there is no ongoing interaction. This limited storage duration mitigates the risk of unnecessary prolonged processing. ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may share your personal data where necessary with the parties set out below for the purposes described in the section “Purposes for which we will use your personal data” above. ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We require all third parties to respect the security of your personal data and to process it in accordance with applicable law. We do not allow our third-party service providers to use your personal data for their own purposes unless you have explicitly consented to this. Where we engage third parties to process your data on our behalf, we ensure they only act under our instructions and for specified purposes.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We do not sell or share mobile numbers with third parties for their own marketing purposes. We may share mobile numbers with service providers that help us deliver messaging services, solely to provide those services on our behalf” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Internal Third Parties: Members of our team who need access to the data to perform operational, technical, or marketing-related functions in accordance with this privacy policy.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Consent Management Tool Provider: Where applicable, the provider of the cookie consent platform may store your consent preferences to ensure compliance with data protection law.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ External Third Parties: Analytics and profiling service providers, such as PostHog (used to analyze user behavior and improve our platform),” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ and potentially Amazon Web Services (AWS) and Google, which may host or deliver these tools’ scripts.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Business Transfers: We may share your data with third parties to whom we may choose to sell, transfer, or merge parts of our business or assets. Alternatively, we may seek to acquire or merge with other businesses. If a change occurs, the new owners may use your personal data in the same way as set out in this privacy policy.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Marketing platforms, such as LinkedIn Insight Tag (used for retargeting and measuring the performance of LinkedIn ads); these providers may act as independent data controllers and may process your data according to their own privacy policies, which are linked in our Cookie Policy .” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Lead enrichment and B2B tracking providers, such as RB2B and Warmly (used to identify and segment business visitors),” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We do not share your personal data with third parties for their own direct marketing purposes. Where our service providers (e.g. analytics or advertising platforms) process personal data, they do so only to deliver services on our behalf or based on your interaction with our site.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Furthermore, we also obtain personal data not only directly when you engage with us, but also indirectly from third-party providers such as business intelligence platforms and from publicly accessible sources including professional networking sites, company websites, and corporate directories.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ All purchases are non-refundable. You can cancel your subscription at any time by contacting us using the contact information provided below. Your cancellation will take effect at the end of the current paid term. If you have any questions or are unsatisfied with our Services, please email us at privacy@throxy.com.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ Your subscription will continue and automatically renew unless cancelled. You consent to our charging your payment method on a recurring basis without requiring your prior approval for each recurring charge, until such time as you cancel the applicable order. The length of your billing cycle is usually 3 months, then MoM thereafter.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ We may, from time to time, make changes to the subscription fee and will communicate any price changes to you in accordance with applicable law.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.