Encryption

This is the process of encoding the sensitive data with a key or password.

Encryption provides strong security for our data and reduces the likelihood of unauthorized disclosure of confidential information, because the data cannot be accessed without the corresponding key or password.

Data Access policy

Setting up access is an important aspect of database security.

We control who has access and what type of access they are allowed i.e. a user may have permission to see only certain pieces of information, or they may be denied the ability to make changes to the system

Data Usage policy

This defines how data is used by Data Services, ensuring that data is secure.

In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the data we collect and how we use it.

We may use aggregate data across clients for

Informing future product features.
Internal operations including troubleshooting, data analysis, testing, research.
Service improvement.

GDPR Administration

Customer data must be:

Processed lawfully, fairly and in a transparent manner in relation to individuals.
Collected for specific, explicit and legitimate purposes, and not further processed in a manner that is incompatible with those purposes.
Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
Accurate and, where necessary, kept up to date; steps should be taken to rectify or erase without delay.
Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
Processed in a manner that ensures appropriate security of the data.
The GDPR also includes an accountability principle which states that we must be able to demonstrate compliance with the above principles