Privacy notice

Updated October 2022
DORA consultancy, part of INKASEC, is a compliance service provider. We consider your privacy as a fundamental right and will make every possible effort to maintain it accordingly. The following principles underpin our approach to respecting your privacy:

• We value the trust that you place in us by giving us your personal information.
• We will always use your personal information in a way that is fair and worthy of that trust.
• We will provide clear information about how we use your personal information.
• We shall always be transparent with you about what information we collect, what we do with it, with whom we share it and who you should contact if you have any concerns.
• We will take all reasonable steps to protect your information from misuse and keep it secure.
• We will comply with all applicable data protection laws and regulations and we will co-operate with data protection authorities in the UK.

This Privacy Notice explains the types of personal information we collect and how we use, disclose and protect that information.

What does this Privacy Notice apply to?
This Privacy Notice applies to personal information collected by INKASEC in connection with the services we offer. This Privacy Notice explains the types of personal information we collect and how we use, disclose and protect that information. INKASEC is registered with the Information Commissioner’s Office under registration reference ZA284049.

Your consent
By using an INKASEC Site, you are consenting to INKASEC ltd (company) collecting, using and disclosing your personal information in accordance with this Privacy Notice. If you do not agree to the collection, use and disclosure of your personal information in this way, please do not use the INKASEC Sites or otherwise provide the company with your personal information.

Purposes and Legal Grounds:

• INKASEC processes your personal information as necessary to perform our contract obligations with you for the service. INKASEC also processes your email address for the purpose of sending you important information about your services, or material changes to this Privacy Policy. The legal ground for processing your details for this purpose is contract​.
• INKASEC also processes your email address to associate it with your INKASEC account when you interact with our customer support representatives. The legal ground for this processing is our legitimate interest in providing quality customer support.
• Please note, however, that we may process your personal information without consent if we have a legitimate reason to do so, provided that such use will not have a prejudicial effect on your own rights, freedoms and interests. Any such use shall be in accordance with the INKASEC Privacy Principles set out above.

What information do we collect?
In this Privacy Notice, your “personal information” means information or pieces of information that could allow you to be identified. This typically includes information such as your name, address, email address, and telephone number, but can also include other information such as IP address.

How do we use your personal information?
We may use your personal information to:

• improve our products and your experience on the INKASEC sites
• to provide you with products or services that you request from us

Safeguarding your personal information
We take all reasonable precautions to keep your personal information secure and require any third parties that handle or process your personal information for us to do the same. Access to your personal information is restricted to prevent unauthorised access, modification or misuse and is only permitted among our employees and agents on a need-to-know basis.

Transfers and Shares of Personal Data
When you create a INKASEC account, add personal data in your account profile, or upload data to your INKASEC account, your personal data will be collected and stored on INKASEC servers in the EU. Personal data regarding individuals who reside in a country in the European Economic Area or in Switzerland is controlled by INKASEC.
Subject to applicable data protection law we may share your personal data with:

• Sub-contractors and other persons who help us provide our products and services
• Our legal and other professional advisors, including our auditors
• Fraud prevention agencies, credit reference agencies, and debt collection agencies
• Courts, to comply with legal requirements, and for the administration of justice
• In an emergency or to otherwise protect your vital interests
• Anyone else where we have your consent or as required by law

Your rights and who to contact
If you have any questions, comments or concerns about how we handle your personal information, then you may contact us by sending the email through Contact Us page. As an individual whose personal data is processed by INKASEC you have the following rights:

• the right to be informed which is what this privacy notice is for
• the right to access the data we hold about you the right to object to direct marketing either use the ‘unsubscribe’ button on our emails or contact us directly
• the right to object to processing carried out on the basis of legitimate interests
• the right to erasure (in some circumstances)
• the right of data portability
• the right to have your data rectified if its inaccurate
• the right to have your data restricted or blocked from processing

To exercise any of these rights, please use the Contact us page to get in touch. If you are not happy with the way we have handled your data, and are unable to resolve the issue with us personally, you have the right to lodge a complaint with supervisory authority - Information Commissioner's Office (ICO). It has enforcement powers and can investigate compliance with data protection law.
Help line 0303 123 1113
Web site: https://ico.org.uk
By post:
Customer Contact
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
SK9 5AF

Cookies and Similar Technologies

INKASEC does not use analytics or tracking cookies (or similar technologies) on this site.

Retention of Personal Data

The following criteria are used to determine data retention periods for your personal data:

• We will retain your personal data as long as your INKASEC account is considered to be active.
• We will retain technical information about your visits to INKASEC websites for 12 months.

Changes to our Privacy Notice

We may change this Privacy Notice from time to time by posting the updated version of the Privacy Policy on the INKASEC Sites. We will give you reasonable notice of any material change. We encourage you to visit frequently to stay informed about how we use your personal information.