Riskpoint respects the privacy of its clients and visitors to this website.
We respect the privacy of our clients and website visitors and recognise that when you choose to provide us with information about yourself, you trust us to act in a responsible manner with that information. We will always give you the option of how you would like your data to be used and for what purposes you wish to be contacted.
What information do we collect?
At times we may request that you voluntarily supply us with personal information. Generally, this information is requested when you want us to contact you as our client or prospective client, supply you with information or submit an application for employment. From time to time we may ask you to submit information for other purposes, but we will always make it clear what that information will be used for.
We may gather the following information about you:
- Email address
- Telephone number
- Information provided by you in relation to submitting a job application to us (this may include sensitive personal information)
Do we pass your information to third parties?
As a general rule we will not share any of your information with third parties. However, we may share your personal information with our subcontractors or other parties working on your projects to the extent required by the project work. We will ensure that the third parties who receive your personal information are required to keep it confidential.
We may disclose personal information to third parties when we reasonably believe we are required by law, and in order to investigate, prevent, or take action regarding suspected or actual unlawful or otherwise prohibited activities, including, but not limited to, fraud.
How do we use your information for marketing?
We do not engage in any email shoots, cold-calls or other mass-marketing campaigns. We will only use your contact data for our work on a specific project for you/your company or for a reply to a specific query.
Where do we keep your information?
We keep our clients personal data in EEA. We have technical and administrative measures to ensure that your personal information disclosed to us is kept secure, accurate and up to date and kept only for so long as is necessary for the purposes for which it is used.
How long do we keep your information?
Riskpoint's role as Data Processor
In our role as IT developers, we routinely have access to personal data supplied to us as part of our clients' projects. As a Data Processor, we will never disclose, share, distribute, analyse, copy, amend or otherwise use our client's data outside the scope of the project. We will only do so following explicit instructions and/or permissions by our clients in their role as Data Controller.
As part of any project work, we normally make several copies of the project's data, including any personal data, on our servers and laptops. All such copies are held within EEA and are protected by a range of technical and administrative measures. They are only made either as backups/for audit purposes or for the ongoing project work.
Our clients are fully entitled to ask for the deletion or anonymisation of any of their project data, including backups, at any time during the project or after project completion or termination.
In case such a request has not been made, following project completion or termination, we will keep project data only for a limited period, and only for transfer, legacy or audit purposes.
You are entitled to ask:
- for a copy of the personal information we hold about you, and details about how we are processing your personal information;
- to have any inaccuracies in your personal information corrected;
- if we are processing your personal information by automated means and on the basis of your consent (see “How do we use it?”, above), for us to provide your personal information to you in a structured, commonly-used and machine-readable format. You can also ask us to provide your personal information directly to a third party in this format, and, if technically feasible, we will do so; and
- to have your personal information erased, or for our use of it to be restricted (for example, if your preferences change, or if you don’t want us to send you the information you have requested).
Please contact us if you would like to exercise any of these rights.
You also have the right to make a complaint to the supervisory authority if you’re not happy with how we’ve handled your personal information. In the UK, the supervisory authority is the Information Commissioner's Office (http://www.ico.org.uk)