Company Policies
Information Security Policy
Managing Director's Statement of Commitment
As a company, information processing is fundamental to our success and the protection and security of that information is a board level priority. Whether it is employee information or customer information, we take our obligations under the GDPR and Data Protection Act 2018 seriously. We have provided the resources to develop, implement and continually improve the information security management appropriate to our business.
Information Security Intent
- To ensure the confidentiality, integrity and availability of organisation information, including all personal data as defined by the GDPR, based on good risk management, legal, regulatory and contractual obligations, and business need.
- To provide the resources required to develop, implement, and continually improve the information security management system.
- To effectively manage third-party suppliers who process, store, or transmit information to reduce and manage information security risks.
- To implement a culture of information security and data protection through effective training and awareness.