GDPR

We only process personal data, that you control and for which you are responsible, at your request, in accordance with the agreement we have with you, a written instruction or as required by law;

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risks that are presented by the processing, which may include End Point, Gateway and Server Level Security at our premises, strong password polices, daily anti-virus updates, use on encryption, SSL VPN for external access, secure access over wired and wireless networks to our systems, central patch management, access control, polices and training among others;

We take all reasonable steps to ensure that only authorised personnel subject to confidential obligations have access to the personal data;

We will only engage sub-processors to assist in the performance of the services we deliver to you, with your consent. We will hold sub-processors to terms no less onerous than these commitments made to you;

We will not deliberately do anything to place you in breach of the GDPR and will tell you if we become aware that your instructions run contrary to what the GDPR permits;

We will assist you to fulfil any requests received by data subjects (individuals) to exercise their rights or any regulator requests;

We will inform you straight away after becoming aware of any breach or suspected breach that might compromise your data or put it at risk;

Where we need to transfer personal data out of the EU/EEA, we will do so subject to appropriate legal safeguards.