Garrison ULTRA® Redirect
Extension Privacy Policy

  1. Information about us
    1. The Garrison ULTRA® Redirect Extension (the “Extension”) is owned and provided by Garrison
      Technology Limited, a limited company incorporated under the laws of England and Wales with registration number
      09286531, whose registered address is 117 Waterloo Road, London, SE1 8UL, United Kingdom (“Garrison“,
      “we“, “us” and/or “our“).
    2. Our Data Protection Officer may be contacted by email at dpo@garrison.com.
  2. What Personal Data we collect, how we collect it and why
    1. Garrison has created this Privacy Policy to help you to understand what information, including Personal Data,
      we collect, store, and use when the Extension is installed. Personal data is, in simple terms, any information
      about you that enables you to be identified (“Personal Data“). Personal Data covers obvious information
      such as your name and contact details, but it also covers less obvious information such as identification
      numbers, electronic location data, and other online identifiers.
    2. The Extension is intended for use by organisations that have engaged Garrison under a service contract
      (“Organisation” or “Customer“) for the provision of the Garrison ULTRA® web isolation
      service provided by Garrison (“Garrison ULTRA®“) and their employees, contractors, members, or
      other participants (“End User“, “you“, or “your“).
    3. Once the Extension is installed and authenticated by logging in, we collect your browsing logs, including (i)
      the direct and indirect website domains you have visited; (ii) your username; and (iii) the time of your visit
      (“Browsing Logs”). We share your Browsing Logs with your Organisation’s designated administrator in your
      Organisation’s customer portal for Garrison ULTRA® in connection with the provision of Garrison
      ULTRA®.
    4. We may process the data identified under Section 2.3(i) and (iii) above where such data has been fully and
      irreversibly anonymised and aggregated for our own internal business purposes including for the purpose of
      analytics and/or to improve Garrison ULTRA®.
    5. By using the Extension, you and your Organisation accept and are bound by this Privacy Policy.
  3. Garrison as a processor
    1. Your Organisation is the controller of your Personal Data and other information we collect through the
      Extension. Your Organisation controls what information about you Garrison receives and how we use it. To the
      extent we receive any information about you, we will be acting as a processor and process such information
      according to your Organisation’s instructions, because your Organisation is the controller.
    2. Garrison is not responsible for the privacy of its customers.
    3. If you have questions about what information may be accessible or collected by your Organisation, you should
      contact your Organisation.
  4. Third Party Access to Your Information
    1. We do not share your information with any third party except any Garrison affiliated entities for the purpose
      of performing our contractual obligations to our Customer (your Organisation). However, we may share information
      with third party service providers who are contracted to provide services in connection with our provision of
      Garrison ULTRA® to your Organisation. Third party service providers may provide hosting services,
      support services, and other services for your benefit and the benefit of your Organisation.
    2. If you have questions regarding how your Organisation shares information with third parties, you should
      contact your Organisation.
  5. Location Data and Privacy Settings
    1. Garrison does not receive your geolocational information.
  6. International Data Transfers
    1. We will only transfer your Personal Data to your Organisation’s elected home region in the Garrison
      ULTRA® customer portal. If you are not in that elected home region, this will necessitate a transfer
      to a third country in accordance with our Data Processing Agreement for a Garrison ULTRA® Service, a
      copy of which is available at www.garrison.com/ultra-terms-of-use under the heading Data Processing Agreement for a
      Garrison ULTRA® Service, and which may be amended by us from time to time.
    2. If you have any questions regarding if and how your Organisation transfers your Personal Data to third
      countries, you should contact your Organisation.
  7. Cookies, Tracking Information and other Web Technologies
    1. The Extension does not use automatic collection tools, such as cookies, embedded web links and web beacons to
      send information back to Garrison. Information and data collected, used, and transmitted by third party
      applications and services are governed by their own privacy policies.
    2. We encourage you to learn about the privacy policies of all products, services, and applications prior to
      interacting with them in Garrison ULTRA®.
  8. Data Retention
    1. We will store Browsing Logs for twenty-four (24) months from when the logs are generated.
  9. Your rights
    1. Under Data Protection Legislation, you have the following rights:
      1. the right to be informed about our collection and use of your Personal Data;
      2. the right to access the Personal Data held about you;
      3. the right to have your Personal Data rectified if any of your Personal Data held is inaccurate or
        incomplete;
      4. the right to be forgotten: the right to ask to delete or otherwise dispose of any of your Personal Data;
      5. the right to restrict: the right to prevent the processing of your Personal Data;
      6. the right to object to the use of your Personal Data for particular purposes;
      7. the right to withdraw consent: where your consent is relied upon as the legal basis for using your
        Personal Data, you are free to withdraw that consent at any time;
      8. the right to data portability: if you have provided Personal Data directly, and it is being used with your
        consent, or for the performance of a contract, and that data is processed using automated means, you can ask
        for a copy of that Personal Data to re-use with another service or business in many cases; and
      9. rights not to be subject to a decision based solely on automated processing, including profiling, which
        produces legal effects or significantly affects you. We will never process your Personal Data in this way.
    2. Garrison as a data processor will act in accordance with your Organisation’s instructions. For more
      information about use of your Personal Data or exercising your rights as outlined above, please contact your
      Organisation.
    3. Further information about your rights can also be obtained from the Information Commissioner’s Office or your
      local Citizens Advice Bureau.
  10. How Do I Contact You?
    1. We welcome the opportunity to cooperate with your Organisation if needed. Our Data Protection Officer may be
      contacted by email at dpo@garrison.com.