Eurora Group

Privacy & Data Protection Policy – CYRUS TMS

Our Commitment to Data Protection

Eurora Group Limited is committed to protecting personal data and complying with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

We implement appropriate technical and organisational measures to safeguard data processed through the CYRUS TMS platform. 

Nature of the Services

CYRUS TMS is not primarily designed for the processing of personal data. However, depending on how customers use the platform, limited personal data (including information relating to drivers or other individuals) may be processed as part of the normal operation of the Services.

Roles and Responsibilities

Customers determine what data is uploaded to and processed within CYRUS TMS and act as the Data Controller for such personal data. Eurora Group Limited acts as a Data Processor and processes personal data only on documented instructions from customers and solely for the purpose of providing the Services.

Billing and Payment Data

For subscription and billing purposes, limited personal data is processed via third-party payment providers, including GoCardless.

This data is used solely for managing subscriptions and payments.

Data Retention and Deletion

Personal data is retained only for as long as necessary to provide the Services or comply with legal obligations. Upon termination, customers are provided with a 30-day period to retrieve their data, after which it is securely deleted.

Subject Access Requests

Data subjects should contact the relevant customer to exercise their data protection rights.

Eurora Group Limited will provide reasonable assistance to customers where required. Any queries may be sent to enquiries@eurora-group.com.

Hosting and Infrastructure

CYRUS TMS is hosted on Microsoft Azure cloud infrastructure, providing industry-standard physical and technical security measures, redundancy, and disaster recovery capabilities.

Security Measures

Security measures include encryption of data in transit and at rest, access controls, monitoring, and secure credential management. These measures are designed to prevent unauthorised access or disclosure.

Data Sharing and Sub-processors

Personal data may be shared with trusted sub-processors solely for the purpose of delivering the Services and subject to appropriate contractual safeguards, or where required by law.

Data Ownership

All data uploaded to CYRUS TMS remains the property of the customer. Data will be made available for retrieval following termination for a limited period before secure deletion..

Contact

For questions regarding this policy or data protection practices, please contact
enquiries@eurora-group.com.