Privacy Policy
Effective date: March 08, 2024
SupPortal UK Ltd (“us”, “we”, or “our”) operates the https://supportal-uk.com website (the “Service”).
This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data. Our Privacy Policy for SupPortal UK Ltd is managed through
Free Privacy Policy.
We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, accessible from https://supportal-uk.com
Information Collection And Use
We collect several different types of information for various purposes to provide and improve our Service to you.
Types of Data Collected
We collect and process personal data for the following categories of data subjects:
- Clients
- Business contacts which include suppliers, consultants, advisors
- Visitors to our website
- Recipients of our marketing activities
Personal Data
While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). Personally identifiable information may include, but is not limited to:
- Email address
- First name and last name
- Phone number
- Cookies and Usage Data
Clients
We collect personal information about our clients to provide them with our services. We hold the following information about customers:
- Contact details – name, business address, business email address, business phone numbers including mobile numbers
- Identity data – username and password to our online client portals including the IASME certification portal
- Transactional data including details about services you have purchased from us. We do not process credit card information, the payment transactions are handled securely by a PCI-DSS accredited vendor
- Video, call and chat recordings may be taken in order to provide you with our service. Your consent will be taken before any recordings are made and these recordings are deleted within 14 days.
We may receive personal information from our clients about other individuals, e.g. their employees, while providing our services. Any such information provided to us is used solely for providing our services and is handled strictly as per client instructions.
We may also receive personal information from third parties including other customers, partners, or 3rd parties that we run partnerships, competitions and events with. Any such information provided to us is used solely for providing our services and is handled strictly as per our data protection procedures.
Business contacts
If you are a supplier, service provider, advisor, or consultant, we may process the following personal data about you:
- Contact details – name, work email address, contact numbers
- Professional details – the name of employer, job role, educational or professional background, any professional disqualifications
- Verification of identity details – Passport or any other government-issued document, proof of address, professional indemnity insurance,
- Financial and Transactional details – invoices, bank account numbers for payment
- If you have access to any of our internal platforms – username and password
We use this information to enter into and fulfil a contract with you, to administer and manage our relationship with you including accounting, payment processing activities.
Visitors to our website
When you visit our website, we use third-party services (‘cookies’) to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to various parts of the website. The information is only processed in a way that does not identify any individual.
When you complete a contact form on our website, or email
[email protected], we will use the information provided by you only for the purpose of providing you with an appropriate response.
Marketing data
We hold name and contact details of individuals who have expressed interest in hearing from us about our services or have engaged with us for supply of our services in the past. All direct marketing activities to such individuals shall comply with relevant privacy and regulatory requirements.
How is your personal data collected?
You may give us your personal data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
- Engage us to provide services
- Subscribe to our publications
- Request marketing material to be sent to you
- Complete one of our enquiry forms
- Provide us with feedback
Apart from receiving personal data directly from you when you engage us to provide services, we may receive personal data from our partners and associates, for example our accreditation bodies.
When and how do we share your personal data?
We may share your personal data in the following circumstances:
- Internally with staff members who require your information to provide our services and who have received training in data protection
- Our accreditation bodies where this is a requirement for delivering our services
- With our professional advisors, including our legal advisors, financial advisors, insurers, accountants, auditors or other consultants to the extent they require this information to provide their services to us
- With sub-contracts, consultants or associates who are asked by SupPortal UK to deliver all or some of the services
- With courts, law enforcement authorities, regulators or government officials where it is legally required
- With third parties providing IT support and maintenance services, marketing and client support services, data storage services, and checks for credit risk reduction and other fraud and crime prevention purposes; and other financial institutions and credit reference agencies providing services to us
- Any third parties with whom you require or permit us to correspond
We do not sell personal information to anyone and only share it with third parties who are facilitating the delivery of our services and communications.
Transfer of personal data outside of the UK
There may be occasions where we will need to share your data with entities in third countries, such as when we are using cloud software providers or outsourced contractors which enable us to provide you with the services. We verify that any data transfer outside of EEA is subject to EU adequacy requirements, Standard Contractual Clauses or other transfer tools which comply with data protection legislation.
Automated decision making
We do not use automated decision-making in relation to your personal data.
Security of your personal information
To help protect the privacy of data and personally identifiable information you provide to us, we maintain physical, technical and organisational controls. We update and test our security technology and controls on an ongoing basis. We restrict access to your personal data to those employees who need to know that information to provide benefits or services to you.
In addition, we train our employees about the importance of confidentiality and maintaining the privacy and security of your information. We commit to taking appropriate disciplinary measures to enforce our employees’ privacy responsibilities.
We are certified to the IASME ICA Level 2, IASME Quality Principles and CE plus standards which demonstrates our commitment to the security and privacy of your personal information.
Usage Data
We may also collect information how the Service is accessed and used (“Usage Data”). This Usage Data may include information such as your computer’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
Tracking & Cookies Data
We use cookies and similar tracking technologies to track the activity on our Service and hold certain information.
Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyse our Service.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.
Examples of Cookies we use:
- Session Cookies. We use Session Cookies to operate our Service.
- Preference Cookies. We use Preference Cookies to remember your preferences and various settings.
- Security Cookies. We use Security Cookies for security purposes.
Use of Data
SupPortal UK Ltd uses the collected data for various purposes:
- To provide and maintain the Service
- To notify you about changes to our Service
- To allow you to participate in interactive features of our Service when you choose to do so
- To provide customer care and support
- To provide analysis or valuable information so that we can improve the Service
- To monitor the usage of the Service
- To detect, prevent and address technical issues
Transfer Of Data
Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.
If you are located outside United Kingdom and choose to provide information to us, please note that we transfer the data, including Personal Data, to United Kingdom and process it there.
Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.
SupPortal UK Ltd will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organisation or a country unless there are adequate controls in place including the security of your data and other personal information.
Disclosure Of Data
Legal Requirements
SupPortal UK Ltd may disclose your Personal Data in the good faith belief that such action is necessary to:
- To comply with a legal obligation
- To protect and defend the rights or property of SupPortal UK Ltd
- To prevent or investigate possible wrongdoing in connection with the Service
- To protect the personal safety of users of the Service or the public
- To protect against legal liability
Security Of Data
The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.
Service Providers
We may employ third party companies and individuals to facilitate our Service (“Service Providers”), to provide the Service on our behalf, to perform Service-related services or to assist us in analysing how our Service is used.
These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
Analytics
We may use third-party Service Providers to monitor and analyse the use of our Service.
Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualise and personalise the ads of its own advertising network.
You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity.
For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page:
https://policies.google.com/privacy?hl=en
Links To Other Sites
Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit.
We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
Data storage and retention
Your personal data is stored by SupPortal UK on the servers of the cloud-based services and IT service providers we engage, as well as in physical forms in our office and at backup and archive facilities.
We retain data as per our data retention policy and regulatory data retention requirements.
For more information on where and how long your personal data is stored, and for more information on your rights of erasure and portability, please contact us at
[email protected].
Data subject rights
We have appointed a Data Protection Officer for you to contact if you have any questions or concerns about our personal data policies or practices. If you are concerned about an alleged breach of privacy law or any other regulation by us, please contact our Data Protection Officer at
[email protected] who will ensure that your complaint is investigated.
You have the right to ask if SupPortal UK is processing your personal data, and to have access to the personal data we may have about you.
Where we have asked for your consent, you may withdraw consent at any time. If you ask to withdraw your consent, this will not affect any processing which has already taken place.
You also have a right to request correction of inaccurate information, deletion of information in certain circumstances, and to instruct us to stop processing your information. We are obliged to honour such requests as per the regulatory requirements unless we are unable to do so for legal reasons. If you’d like more information or would like to make such a request, please contact our Data Protection Officer stated above.
If you are not satisfied with our handling of your queries or complaints on data protection, you can contact the Information Commissioner’s Office (UK data protection authority) on 0303 123 1113 or at
https://ico.org.uk/make-a-complaint/.
Children’s Privacy
Our Service does not address anyone under the age of 18 (“Children”).
We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.
Changes To This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.
We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the “effective date” at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Contact Us
If you have any questions about this Privacy Policy, please contact us:
If you believe that any information we are holding on you is incorrect or incomplete, please email us as soon as possible, by emailing us at
[email protected]. We will promptly correct any information found to be incorrect.
