Privacy Policy

RiskWise Privacy Policy (May 2018)

We are S₂ Partnership Ltd of 23 Station Road, Sheringham, Norfolk NR26 8RF, this privacy policy relates to the use the RiskWise web application software as a service and/or the RiskWise mobile application and/or any related documentation (including, for example, user guides, help leaflets or documentation or information available online), together known as ‘RiskWise’.

We are committed to protecting and respecting your privacy. This policy sets out the basis on which any personal data we collect will be processed by us. Please read this privacy policy carefully to understand our views and practices and your rights regarding your personal data. By visiting RiskWise you are accepting and consenting to the practices described in this policy.

What information do we collect from you?

We will collect and process the following data about you:

• Information you give us. This is information about you that you give us by filling in fields within RiskWise or by corresponding with us by phone, email or otherwise. The information you give us may include your name, address, email address, phone number(s) and log on details
• Information we collect from your use of RiskWise. With regard to each of your visits to RiskWise, we may automatically collect the following information:
  • Technical information, such as the Internet protocol (IP) address used to connect your device to the Internet, whereabouts you connected to our service, your internet service provider (ISP), and what type of device you are using to access our service
  • Information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from RiskWise (including date and time), products you viewed or searched for' page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page and any phone number used to call our customer service or helpdesk number

• Information we collect when you call us. We will automatically collect the phone number used to call us
• Information we receive from other sources. If you are using RiskWise on behalf of a third party organisation (e.g. your employer), and our contract is with that third party organisation, we may receive your information from that third party organisation

Why do we collect this information?

• We use this information in the following ways:
  • In order to take steps necessary to assess whether we can enter into a contract with you and in order to perform our contract with you. This includes carrying out our obligations to you and providing you with our products and services;
  • For the purpose of improving our service to you, to ensure that content from RiskWise is presented in the most effective manner for you and for your device
  • To deal with any legal queries relating to your use of our service
  • To provide you with service communications so that you receive a full and functional service and so we can perform our obligations to you. These may be sent by email and in-product notification. These will include notifications about changes to our service
  • To provide you with marketing communications including information about other goods and services we offer that are similar to those that you have already purchased or enquired about. You will always have the option to opt-out of such communications
  • In our third party’s legitimate interest of keeping customers up to date with good and services, increase awareness of us and third parties within the market, making promotional offers and generating new business, building and maintaining loyalty or market share.
• Information we collect from your use of RiskWise. We will use this information for the following purposes:
  • To administer RiskWise and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes
  • To improve RiskWise to ensure that content is presented in the most effective manner for you and for your device
  • As part of our efforts to keep RiskWise safe and secure
• Information we collect throughout our relationship. We will use this information to help us provide you with our services
• Information we receive from other sources. If you are using RiskWise on behalf of a third party organisation (e.g. your employer), and our contract is with that third party organisation, we will process your personal information as provided by the third party, in order to provide RiskWise to that third party.  The relevant third party will be the data controller in respect the processing of your personal data for that purpose and we will be a data processor

How long do we keep hold of your information?

• We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.

Who might we share your information with?

You agree that for the purposes set out in the ‘Why do we collect this information?’ section above, we have the right to share your personal information with:

• Selected associated third parties, some of whom we appoint to provide services, including:

• Business partners, subsidiaries, affiliates, suppliers and sub-contractors for the performance of any contract we enter into with you
• Hosting companies and IT support companies providing services such as in-product support
• Analytics and search engine providers that assist us in the improvement and optimisation of RiskWise
• Our third-party client (who you are accessing RiskWise on behalf of) to the extent that they are a data controller and we are a data processor in respect of the relevant information

Additionally, we will disclose your personal information to the relevant third party

• In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets
• If we are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets
• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of our customers, our regulator, or others

How your data is stored and kept secure?

At S₂ Partnership, we take your safety and security very seriously and we are committed to protecting your personal and financial information. All information kept by us is stored on our secure servers. Where we have given you (or where you have chosen) a password that enables you to access certain parts of our service, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Whilst core RiskWise hosting is based within the UK, some of our external third parties (such as CRM) may be based outside the European Economic Area (EEA) so their processing of your personal data may involve a transfer of data outside the EEA.

Whenever we transfer your personal data out of the EEA, we seek to ensure a similar degree of protection is afforded to it.

What are your rights?

Where processing of your personal data is based on consent, you can withdraw that consent at any time.

You have the following rights.  You can exercise these rights at any time by contacting us at S₂ Partnership Limited, 14-17 Avenue Business Park, Elsworth, Cambridge, CB23 4EY or Inforequest@s2partnership.co.uk. 

You have the right:

• To ask us not to process your personal data for direct marketing purposes
• To ask us not to process your personal data where it is processed on the basis of legitimate interests provided that there are no compelling reasons for that processing
• To ask us not to process your personal data for scientific or historical research purposes, where relevant, unless the processing is necessary in the public interest
• To request from us access to personal information held about you
• To ask for the information we hold about you to be rectified if it is inaccurate or incomplete
• To ask for data to be erased provided that the personal data is no longer necessary for the purposes for which it was collected, you withdraw consent (if the legal basis for processing is consent), you exercise your right to object, set out below, and there are no overriding legitimate ground for processing, the data is unlawfully processed, the data needs to be erased to comply with a legal obligation or the data is children’s data and was collected in relation to an offer of information society services
• To ask for the processing of that information to be restricted if the accuracy of that data is contested, the processing is unlawful, the personal data is no longer necessary for the purposes for which it was collected or you exercise your right to object (pending verification of whether there are legitimate grounds for processing)
• To ask for data portability if the processing is carried out by automated means and the legal basis for processing is consent or contract

Should you have any issues, concerns or problems in relation to your data, or wish to notify us of data which is inaccurate, please let us know by contacting us using the contact details above. In the event that you are not satisfied with our processing of your personal data, you have the right to lodge a complaint with the relevant supervisory authority, which is the Information Commissioner’s Office (ICO) in the UK, at any time.  The ICO’s contact details are available here: https://ico.org.uk/concerns/.

Changes to our privacy policy

This policy may be updated from time to time. Please check back frequently to see any updates or changes to our privacy policy.

Cookie Policy

We use cookies to distinguish you from other users of RiskWise. This helps us to provide you with a good experience when you use RiskWise and also allows us to improve RiskWise

We use the following cookies for the following purposes:

You can disable cookies by following the instructions in the following link: http://www.aboutcookies.org.uk/managing-cookies .

Contact us

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to S₂ Partnership Limited, 14-17 Avenue Business Park, Elsworth, Cambridge, CB23 4EY or Inforequest@s2partnership.co.uk, or +44 (0)1954 267788.