Wye Privacy Policy

Last updated 3 September 2026.

This policy covers our websites, our software, and the services we provide, including Ceres on Microsoft Dynamics 365 Business Central.

Wye means Wye, LLC and its subsidiaries and affiliates.

Start here: whose data is it?

Almost every privacy question about us comes down to one thing.

Sometimes the information is about you and us. You visit our website, ask us
a question, come to an event, or work with us as a customer or supplier. We decide how that
information is used, so this policy tells you what we do with it.

Sometimes the information belongs to our customer. An organization using our
software records its own contacts, the people it deals with and serves, its suppliers, and its
staff. That information is theirs. We only touch it to do the work they have asked us to do.

So if one of our customers holds information about you and you want to see it, correct it, or
have it deleted, ask them. It is their record.

What we collect

• When you visit our site: your IP address, cookie identifiers, your browser
  and device, which pages you looked at and for how long, and where you came from.
• When you contact us: your name, job title, employer, email address, phone
  number, and whatever you write to us.
• When we work together: contact details for the people involved, our
  correspondence and support history, and the billing details needed to invoice you.
• From business sources: business contact details from public sources and
  business databases, so we can reach organizations our software may suit.
• Inside our customers’ systems: whatever they record there. That belongs to
  them, and the section below explains how we handle it.

Why we use it

To provide, support, and improve our software and services. To answer you. To run our
relationship with you, including invoicing. To tell you about our products where you have asked
to hear from us or where the law allows, always with a way to stop. To keep our systems secure.
To meet our legal obligations.

Some privacy laws require us to have a specific legal reason for using personal information,
and to say what that reason is. Ours is normally one of these: we need the information to do what
we agreed with you or your organization; using it serves our legitimate interests in running the
business; you consented; or the law requires it of us.

Our software and your data

Where your information lives

Our software runs either on your own systems or on a platform you hold the account with. Where
it runs on a platform, that provider operates the systems your information sits in, under your
agreement with them. Either way the records you keep are yours, and they stay where you and your
provider have put them.

Diagnostic and usage information

Our software may report information back to us about how it is running and how it is used.
That can include errors and failures, performance and timing, which features are used and how
often, and details of the version, configuration, and environment it is running in. We use it to
keep the software working, to diagnose faults, to plan upgrades, and to decide what to improve.

Our policy is to keep this to technical and usage information rather than the records you keep
in the system, and to hold it under the same policies set out below. Where a product or platform
offers a way to control or switch off this reporting, that choice is yours to make.

Information you send elsewhere

Our software can be configured to exchange information with other systems. Where it does, that
happens because you have switched it on and pointed it somewhere: an integration you configure,
using credentials you supply, to a destination you choose. Where our software produces reporting
for an outside body, it may hand you documents to submit yourself, or send them for you if that
is how you have set it up.

When our people look at your system

To support you and to develop our software, we may:

• go into your environment, and look at the data in it, to investigate a support request;
• work with what you send us – screenshots, exports, database copies, logs – to reproduce a
  problem, kept to what that problem needs;
• look at how you use the software, so we know what to fix and what to build next.

Our policies for handling it

These are the policies we apply whenever we handle information belonging to a customer:

• Our policy is to use it to serve the customer and to develop our software, rather than for
  unrelated purposes.
• Our policy is not to sell it, and not to disclose it outside Wye except as set out under
  “Who we share with”.
• Our policy is to limit access to people who need it for the work, under confidentiality
  obligations that continue after their engagement with us ends.
• Our policy is to take the least information that answers the question – a reduced,
  redacted, or anonymized extract wherever that will do – rather than a full copy.
• Our policy is to treat any copy we hold as working material for the piece of work it was
  taken for, and not as an archive.
• Our policy is to apply safeguards appropriate to the information, including access
  controls, encryption in transit, and restricted handling of copies taken for diagnosis.
• Where another company helps us deliver a service, our policy is to place it under
  equivalent obligations.
• Our policy on becoming aware of a breach affecting customer information in our care is to
  notify the affected customer without undue delay, with the information they need to meet
  their own obligations.
• Our policy is to retain material sent to us only while the request and our record of it
  require it, and to return or delete customer information on request and at the end of the
  relationship, unless the law requires us to keep it.

What we learn from use

What we learn from supporting our software shapes what we build. Where we apply that beyond a
single customer – improving a product for everyone who uses it – we work from patterns of use and
how the system behaves, rather than from the personal records themselves, and our policy is not
to publish or pass on customer information as part of it.

Cookies

We and our providers use cookies and similar technologies to keep the site secure, remember
your preferences, understand how the site is used, and deliver marketing.

• Strictly necessary – without these, secure areas such as our cloud
  services and support portals do not work. Some reach information held in our customer
  relationship system.
• Performance – which pages are visited, where errors happen.
• Functionality – your language, when you last visited.
• Targeting and advertising – relevant marketing, how often you see it, and
  whether it worked.

We use a third-party marketing automation service. It records how you interact with our site,
along with your inferred region, IP address, and repeat visits.

That record can be linked to you as a named person, and that can happen simply because you
visited. The service may be able to identify you from your IP address or from information it
already holds, without you giving us anything. It also happens when you submit a form or arrive
from one of our emails. Once the link is made, visits you made before it was made can be
identified as yours too.

So you should not assume that browsing our site is anonymous.

You can control cookies through your browser settings. Block everything, including strictly
necessary cookies, and parts of the site will stop working. You can opt out of interest-based
advertising separately; you will still see generic ads.

Other sites we link to, and share buttons, set their own cookies under their own policies.

Who we share with

This section is about information we hold about you directly – as a visitor to our site, as
someone who contacts us, or as someone we do business with. Information belonging to our
customers is treated differently, and that is set out at the end of this section.

Our policy is to share that information only in these ways:

• Our own group companies, for the purposes in this policy.
• Service providers working for us, under confidentiality obligations, only to do the job we
  hired them for.
• Regulators, courts, and law enforcement, where the law requires it.
• Anyone, in aggregate statistics that identify nobody.
• A buyer or investor, if we sell or transfer part of our business.

Our policy is not to sell personal information, and not to share it for advertising.

Our policy is that our customers’ information is not sold or shared. Personal information held
in a customer’s system, or taken from it so we can do work for them, is theirs. We use it inside
Wye to do that work, under the policies set out earlier: the people who need it for the job have
it, and no one else.

Our policy is not to sell it. Outside Wye, it goes only to those helping us deliver a service
to that customer, to others under confidentiality obligations where our business requires it, and
where the law compels us.

Where we keep it

We hold information on our own systems and on systems run by the providers we use. We work
globally, and information may be stored and handled in any country where we or our providers
operate. We do not offer storage in a particular country as a standard part of what we do.

If your organization needs information kept in a specific country, tell us before you engage
us. It may be possible to arrange, as a customization or a separate arrangement, and it is better
settled at the start than discovered later.

Keeping it safe

Our policy is to encrypt information in transit, control who can reach it, and restrict how
copies are handled. If you have a login with us, use a strong and unique password, and tell us straight away
if you think it has been exposed, so that it can be reset. No system is perfectly secure, and we
cannot guarantee that information will never be reached in breach of our safeguards or those of
our providers.

How long we keep it

If you are a customer or partner: while your account is active and while we need it to serve
you, then as long as the law, a dispute, or our agreements require. If you are a visitor: under
our retention practices, and you can ask us to delete it at any time. Anything you send us for
support: only until the request and our record of it are done with it.

Your rights

You can ask us to:

• tell you what we hold about you and give you a copy;
• correct it, or delete it;
• limit how we use it;
• stop using it, and stop marketing to you;
• send a copy to you or to someone else in a portable form;
• opt out of sale, sharing, or profiling that significantly affects you.

You can object to our use of your personal information at any time, and not only in the
situations the law names. Our policy is to comply as far as we can. Some records we have to keep:
tax and accounting records, anything needed for a legal claim, and anything else the law requires
of us. Those we cannot delete, and our policy is to say so when that is the answer.

To make a request, contact us. We may ask for proof of identity before acting on it, and
someone you authorize may ask on your behalf. There is no charge, and our policy is not to treat
anyone worse for asking. If a request is excessive or clearly unfounded we may refuse it or
charge for it.

If you are unhappy with our answer, tell us; our policy is to look at it again. You can also
complain to your data protection authority or attorney general.

If your information sits inside a customer’s system, ask that organization.

Children

Our websites and software are for organizations and their staff, not for children, and we do
not knowingly collect information from children. Our customers may record details about the
people they deal with, which can include children, in their own systems. That is their
information, not ours. If a child’s information reaches us by mistake, tell
us, and our policy is to delete it.

Changes

Changes appear on this page and the date at the top changes with them. If we make a material
change to how we use information we already hold, our policy is to tell you.

Contact us

Any question about this policy, or to exercise any right above:

Wye, LLC
1980 Festival Plaza Drive, Suite 300
Las Vegas, Nevada 89135-2930
United States
1-702-745-6967
privacy@wye.com

To stop marketing email, use the unsubscribe link in any message or write to
unsubscribe@wye.com.