The Legal Stuff

Name of company

Information Security Services Ltd

 

Contact details

dan.thorne@informationsecurityservices.co.uk

 

Business ID no.

12859068

 

Privacy Policy

What is the purpose of this Privacy notice?

The purpose of this Privacy Notice is to provide you with a clear explanation about how your personal information is collected and used by us during your interaction with us as well as your rights in relation to your personal information.

Who are Information Security Services?

“Information Security Services” or "ISS" refers to the company Information Security Services Ltd (UK company number 12859068), registered at:

1 Garden Avenue

Bexleyheath

Kent

DA7 4LH

What personal information does ISS collect?

ISS only collects basic personal information about you (such as name, email address, direct work telephone number, your work employer/institution and other basic contact details – as well as any other information that you choose to provide) and only in the following ways:

  • Information that you yourself provide through our websites, in writing, via telephone, at our events or through other means; or
  • Information that we obtain from your interaction with our websites, services and/or social platforms that ISS uses;
  • ISS obtains contact details through selected third parties.

We will not ask for and do not intend to collect, any sensitive personal information about you for the purposes of general enquiry handling, correspondence, relationship management or marketing.

For Marketing and client relationship purposes, ISS uses its legitimate business interests in processing your personal details in order to maintain and enhance existing and ongoing client relationships it has with you and your organisation, this may include approaching you for real-time feedback on our services, research/surveys on current offering.

Personal Details for Specific Business Activities: When you engage with various services provided through ISS, you may be required to supply further personal information about you in line with the requirements of that service.

What about visitors to ISS premises?

When you visit our offices, we may collect only basic personal information about you (as set out above in this Privacy notice) and only for the purposes of maintaining site security and safety. You may be asked to sign-in and sign-out when you visit one of our offices, and you may be provided with a visitor’s pass to wear during your visit. Where Closed Circuit Television (CCTV) is operated at any of our offices, this is used for site security purposes

Why does ISS collect personal information?

ISS needs to know basic personal information about you in order to respond to requests you make to us (such as through our websites and social media platforms) and to provide you with information relating to our services (such as newsletters, industry updates, information about our products and services, event invitations, surveys, market research, etc.) which either you have consented to receive (by indicating in the appropriate tick box) or which relate to ISS products or services which we believe may be of interest to you and/or you currently receive under our legitimate interest to conduct business.

Data collected via your interaction with us through Telephone, email and digital media platforms, (e.g. LinkedIn, Go-To Webinar platforms) can be used for lead generation, relationship management and handling general enquiries of services/products.

We will not use your personal information for any other purpose, not outlined in this Privacy Notice.

ISS collects information about your usage of our websites through cookies. We do this so that we can tailor and personalise your experience and, in conjunction with other user’s information and usage, improve the content, layout and performance of our websites.

How is your personal information protected?

ISS will hold your personal information securely using appropriate technical and organisational measures and not disclose your personal information to anyone outside its own group, or to any person or entity outside the United Kingdom and/or the European Union, except and to the extent both: (i) necessary for the purposes stated in this Privacy Notice; and (ii) where it has first satisfied itself that appropriate safeguards are in place to ensure such information will continue to be held and used in accordance with this notice and compliance with the European Union’s General Data Protection Regulation (EU 2016/679).

We use service providers to operate our websites, such as website hosting and enquiry functionality. Some of these service providers will process your personal information as part of the services they provide to ISS. We will ensure that those service providers also comply with this Privacy Notice.

How long does ISS keep personal information?

Your personal information will be kept by ISS for no longer than reasonably necessary for the purposes set out in this Privacy Notice, unless required to be kept longer by law. This retention period will be determined by the nature of your interaction with ISS, your request and ongoing provision of services through our business. You can at any time indicate your wish for ISS not to process your data in writing via email or post.

What are your legal rights?

You have a number of legal rights surrounding your personal information, including:

  • the right to access and copy your personal information;
  • the right to obtain correction of any inaccurate or incomplete personal information;
  • the right to have your personal information deleted;
  • the right to restrict or object to ISS’s processing of your personal information;
  • the right to withdraw your consent to our processing at any time (i.e. including the right to opt-out of or unsubscribe from communications at any time, either by contacting us at the details provided in this Privacy Notice or clicking the unsubscribe link in the emails that you receive from us).

Please contact us if you would like to exercise any of your legal rights. We will respond to any rights that you exercise within one month of receiving your request unless the request is complex or involves a significant amount of data, in which case we will respond within three months.

How to contact ISS?

If you have any questions regarding this Privacy Notice or our use of your personal information, please contact our Data Protection Officer by:


How do you lodge a complaint?

If you have a complaint regarding how your personal information has been handled by ISS, please contact ISS’s Data Protection Officer, using the details provided above.

You have a legal right to lodge a complaint with the UK Information Commissioner’s Office (to lodge a complaint or report a concern, please visit: https://ico.org.uk/concerns/).

Does ISS update the Privacy Notice?

ISS may change the content of this Privacy Notice from time to time without notice to you. You should check this Privacy Notice occasionally to ensure that you are aware of the most recent version that will apply each time you access our websites. This Privacy Notice was last updated March 2023.

Terms & Conditions

  1. These Terms & Conditions shall apply to any contract between Information Security Services (“ISS”) and the buyer (“the Customer”) of services provided by ISS.
  2. Quotations are based on the information available and are valid for 30 days, which may be extended at ISS’s discretion.
  3. All quotations will be confirmed in writing and shall include a Statement of Works outlining the services for which the quotation applies. The Customer shall agree in writing (via post, email or facsimile) the accuracy of the Statement of Works before the engagement commences. Any amendments made by the Customer to the Statement of Works during the engagement may incur additional charges, at the sole discretion of ISS.
  4. ISS undertakes that it shall process any personal data (as defined in the Data Protection Act 1998) solely for the purposes of this contract and for no other purpose.
  5. ISS undertakes that it has in place appropriate technical and organisational measures against accidental or unlawful destruction or loss of alteration to, unauthorised disclosure of or unauthorised access to any personal data.
  6. ISS shall ensure that each of its employees, agents and subcontractors are made aware of its obligations with regard to the security and protection of personal data and shall require that they enter into binding obligations reflecting the provisions of this clause.
  7. Upon the completion or termination of any contract, the Customer shall provide instructions for the return or destruction of personal data. In the absence of specific instructions from the Customer, ISS shall destroy data in line with its Information Classification Policy.
  8. The Customer shall ensure that any computer data supplied to ISS is clean, unadulterated, capable of being read and processed and does not contain any computer viruses. In the event of computer data supplied being corrupt, ISS shall either require the Customer to supply clean unadulterated data that does not contain any computer viruses or decontaminate the data itself but at the Customer’s expense.
  9. The intellectual property rights in any work created by or for ISS in relation to this contract shall vest in ISS unless it is agreed in writing that such intellectual property rights shall pass to the Customer.
  10. The Customer shall be responsible for any work deemed to be illegal, unlawful, infringing any copyright, trademark or other intellectual or other proprietary rights of any third party, or is defamatory, obscene or the distribution of which may infringe postal or other regulations or which is in breach of any trade description or other legislation and ISS shall be indemnified against any claims, costs and expenses.
  11. Payment is in advance of any engagements commencing. At its discretion, ISS may agree to a staged payment plan, but in such an event, no work on the next stage will commence until payment has been received.
  12. The Customer shall bear the cost of any travel expenses, including accommodation if overnight stay is required. The Customer shall be notified in advance.
  13. Any invoice queries must be raised, in writing, within 14 days of the date of the invoice. Invoice queries arising when payment becomes due shall not be accepted.
  14. ISS shall not be liable for any indirect loss or damage, loss of profits or goodwill, or loss of any kind, other than direct loss suffered by the Customer.
  15. All sums due are payable to ISS and not its agent.
  16. In the event ISS does agree to offer credit terms, and without prejudice to ISS’s other rights, if terms are not complied with ISS shall have the right to: charge interest at the rate equivalent to that set for the purposes of s5A and s6 of the Late Payment of Commercial Debts (Interest) Act 1998 (a)calculated on a daily basis from the date of our invoice until payment, (b) compounded on the first day of each calendar month, and (c) before and after any Judgement (subject to court orders); cancel the contract between themselves and the Customer; pursue the matter through the County Court.
  17. The customer may not withhold payment of any invoice or any other amount due to ISS by reason of any set off or counterclaim.
  18. All quoted prices are exclusive of VAT, which shall be charged in accordance with the rules set down by HM Customs & Excise.
  19. ISS shall be under no liability if it shall be unable to carry out any of the provisions of the contract for any reason beyond its control including (without limiting the foregoing) Act of God; legislation; war; fire; flood; drought; failure of power supply; lockouts; strikes or other action in contemplation of the furtherance of a dispute (but not strikes or other action in contemplation of the furtherance of a dispute taken by ISS’s employees). During the continuance of a situation of ‘Force Majeure’ the Customer may by written notice to ISS terminate the contract and pay for work done and materials used, but subject to this shall otherwise accept delivery when available.
  20. All disputes arising from, or in relation to, these Conditions and any Contract will be subject to the exclusive jurisdiction of the English courts.
  21. These Conditions and any Contract following thereon shall be governed by and construed in accordance with the laws of England and Wales, which have exclusive jurisdiction.

All rights reserved. Information Security Services Ltd