Legal
Aviso de privacidad
Last Updated: 8th of July 2026
1. Introduction
1.1 Welcome to the Circit privacy notice. We hope it provides you with the information you are looking for, but if you need anything else, please reach out to us.
1.2. This privacy notice provides key information about the types of personal data processed by Circit, how we obtain it, and what we do with it.
2. Who we are
2.1 Circit Limited and its group companies are represented by Circit Limited, a company registered in Ireland with company registration number 564144 and registered office at The Business Centre, Mayor Street, IFSC, Dublin 1, Ireland (“we”, “our”, “us”). Circit Limited is the company responsible for collection, use, and disclosure of your personal data under this Privacy Notice.
2.2 We can be contacted at privacy@circit.io.
3. Whose data we process
3.1 Circit processes personal data of the following people:
- visitors to our website;
- prospective customers and past customers, and their personnel;
- customers, or personnel of our customers;
- end-users of the Circit platform (including trials or pilots);
- vendors or employees of vendors that provide services to us including prospective or past vendors;
- individuals who apply to Circit to fill a vacant role;
- individuals whose personal data has been collected by us e.g. for marketing purposes; and
- current, past and prospective investors in our company.
4. When Circit collects personal data
4.1 We may collect personal data about you and any other individual either directly or indirectly, including if that data is provided to us by another party in the following circumstances:
- You interact with us directly: This can be through using our platform, websites, contact forms, surveys, or when you contact us by phone, email, chatbots, fax or post. We may also collect information automatically, using cookies or similar technologies, as described in our Cookie Notice.
- You or your organization provide(s) services to us: In this context, we may collect basic personal data about you (mainly professional contact details).
- Third parties provide us with personal data about you: This can happen where: Someone who uses the Circit platform, or has interacted with us in another way, has given your personal data to us; You are an employee of a customer of ours, and your employer provides us with your contact details or other personal data in connection with your use of the Circit platform; You have a social media account, and social media service provides us with access to certain personal data for marketing purposes e.g. LinkedIn;
- You attend a Circit event: Where you attend seminars, learning, training or other events organized by Circit virtually or in person, or where you attend our premises for an event.
5. Personal data Circit collects
5.2 We collect the following categories of personal data:
5.2.1. Contact Information:
name, business address, email address (business or personal), phone number (business or personal).
5.2.2. Billing and payment information:
the individual or business making or receiving the payment, authorized user details, business bank account information.
5.2.3. www.circit.io online usage, metadata and web information:
information on the services you viewed and searched for, response times, errors, duration of access; visit and page interaction (such as scrolling, clicks and hovering the mouse over content), username, IP address, browsing time and history, passwords and logging data, device type, time zone, browser plug-in types and versions, social media profile photo or profile information, web log information, device identification number, device type, location information, connection information, operating system and platform.
5.2.4. Communication preferences:
marketing preferences, areas of interest, preferred contact method and details, correspondence relating to marketing, consent records, business information, such as name and number of employees.
5.2.5. Organization details:
place of work, job title, and organization contact information.
5.2.6. Job applicant information:
employment history, references, membership in professional organizations, licenses and certifications, education history, records, degrees, transcripts, and other related information.
5.2.7. Physical access data:
details of your visit to our office, CCTV recordings and event registration data.
5.2.8. Correspondence:
where you contact us for any reason (for example, requests for support, where you have a question, or where you exercise your data protection rights), we will collect personal data contained via correspondence.
5.2.9. Data processed using the Circit platform:
this is described in detail in the Data Processing Agreement for the relevant type of customer.
5.3 Circit does not collect special category data, as defined under the GDPR, or similar categories of sensitive or specially protected personal data under other applicable privacy laws.
6. Why Circit processes personal data
7. If you choose not to provide your personal data
7.1 Should you choose not to provide your personal data to Circit, we may not be able to provide our services to you.
8. If you provide Circit with someone else’s personal data
8.1. Should you, for any reason, disclose to us the personal information of another person, you represent that you have a lawful basis for both the disclosure and the processing of that personal information in accordance with this notice.
9. Data retention
9.1 Personal information that we process for any purpose or purposes, shall not be kept for longer than is necessary for that purpose or those purposes. The criteria used to determine our retention periods for documents containing personal data (including electronic documents) include:
9.2.1 The length of time we have an ongoing relationship with you and provide services to you, for example, for as long as you have an account with us or keep using our services, and the length of time thereafter during which we may have a legitimate need to reference your personal data to address issues that may arise;
9.2.2 Whether retention is required by law;
9.2.3 Retention of documents relevant to any ongoing or prospective legal proceedings.
10. How Circit protects the security of personal data
10.1 We will take reasonable technical and organizational precautions designed to prevent the loss, misuse or alteration of your personal information.
10.2 Circit’s platform is certified to ISO 27001:2022 – Information Security Management Systems. We also hold a SOC 2 Type 2 report which documents additional security controls. Circit is audited twice a year by ISO and SOC auditors.
11. Disclosure of personal data
11.1 We may disclose personal data to third parties for the purposes described below, depending on each specific jurisdiction and applicable law:
We may disclose all categories of personal data that we collect to Circit affiliates, service providers, law enforcement, professional advisors, and third parties in the event of a sale or business transaction.
12. Cookies
12.1 Our cookie notice can be viewed at www.circit.io/legal/cookies-policy
13. Controllers and processors
13.1 This privacy notice describes our processing of your personal data in our capacity as a “data controller”.
13.2 Where we process personal data on behalf of our customers, we are a data processor. Where we are a data processor of your personal data, we use it in accordance with the data controller’s instructions to us. Those instructions include the terms of service applicable to the Circit product you or your employer is using, and our Data Processing Agreement, which is included in those terms.
13.3 Where we are a data processor of your personal data, then you should also read the relevant data controller’s privacy notice.
14. Sources of personal data
14.1 We collect personal data from you.
15. Your data protection rights
15.1 Subject to applicable law, you may have the following data protection rights:
15.1.1 The right to be informed about the collection, processing, and disclosure of your personal data;
15.1.2 The right to obtain access to your personal data;
15.1.3 The right to have your personal data rectified or erased, or to place restrictions on processing your personal data;
15.1.4 The right to object to the processing of your personal data e.g., for direct marketing purposes or where the processing is based on our legitimate interests;
15.1.5 The right to have your personal data returned to you in a structured, commonly used and machine-readable format, or sent directly to another company;
15.1.6 Where the processing of your personal data is based on your consent, the right to withdraw that consent subject to legal or contractual restrictions;
15.1.7 The right to object to any decisions based solely on the automated processing of your personal data, including profiling;
15.1.9 The right to opt out of targeted advertising, including the “sharing of your personal data for cross-context behavioral advertising; and
15.1.9 The right to lodge a complaint with the data protection supervisory authority responsible for data protection matters in your location. For the UK, this is the Information Commissioner’s Office (ICO). For Ireland, this is the Data Protection Commissioner (DPC).
15.2 Please note that in some circumstances the exercise of the above rights may be limited by legal restrictions and exemptions. If relevant, we will explain this when responding to a request to exercise data protection rights. You have the right not to be unlawfully retaliated against for exercising your privacy rights.
15.3 If you think we hold any personal data about you which is incorrect or if there are any changes to your personal data, please let us know so that we can keep our records accurate and up to date.
15.4 If you wish to exercise your data protection rights as an individual, please contact us at our toll-free number +1 855 634 5761, or privacy@circit.io. We will verify and respond to your request consistent with applicable law, considering the type and sensitivity of the personal data subject to the request. We may need to request certain personal data from you to verify your identity and protect against fraudulent requests. If you maintain a password-protected account with us, we may verify your identity through our existing authentication practices for your account and require you to re-authenticate yourself before disclosing or deleting your personal data. If you make a request to delete, we may ask you to confirm your request before we delete your personal data.
15.5 If we refuse to act on your request, you may appeal this refusal within a reasonable period after you have received notice of the refusal. You may file an appeal by contacting us via privacy@circit.io or at our US toll free number +1 855 634 5761
15.6 If an agent would like to make a request on your behalf as permitted under applicable law, the agent may use the submission methods noted above. We will process the agent’s request consistent with applicable law. As part of our verification process, we may request that the agent provide, as applicable, proof concerning their status as an authorized agent. In addition, we may require that you verify your identity above or confirm that you provided the agent permission to submit the request.
15.7 If you do not want us to use your personal data for purposes set out in our privacy notice, we may not be able to provide you with access to all or parts of our website or products.
15.8 Circit does not knowingly sell or “share” personal data.
15.9 We also process opt-out preference signals, such as the Global Privacy Control. These signals set your opt-out preferences only for the particular browser or device you are using and any consumer profile that we associate with that browser or device, unless you are logged into your Circit account, in which case we will honor the signal with respect to that browser or device and your account, including your offline consumer profile associated with that account. If you wish to set your opt-out preferences for offline uses of your personal data and you are not logged into your Circit account, please contact us at our toll free number +1 855 634 5761], or privacy@circit.io. For information about how to use the Global Privacy Control, please visit https://globalprivacycontrol.org/.
16. International data transfers
16.1 The Circit platform is hosted entirely within the United States by default for any customers located in the US. In some circumstances, customers can choose to have their data stored in select alternative regions.
17. Use of services by minors
17.1 Our services are not directed to individuals under the age of sixteen (16), and we do not knowingly collect personal data from individuals under 16.
18. Updates
19.1 We may update this privacy notice from time to time. We notify Circit customers and will publish revised versions on our website at https://www.circit.io/legal/privacy-notice with a new “Last Updated” date.