Security and privacy

The privacy policy explains how personal data is collected and used under UK GDPR. It also says that if you access the website whilst abroad, your personal data may be stored on servers in the same country as you or your organisation. A single hosting region is not named.

The data processing agreement sets controller and processor roles, sub-processors, international transfers, records of processing, security measures, and audit rights. It defines data protection laws as the UK GDPR, the Data Protection Act 2018, and PECR.

SOC 2 status is not stated anywhere on the site. This page does not add one. The terms cover use of the website.