Privacy Policy

Simply Data International Ltd is the data controller responsible for the personal data described in this policy.

Registered in England and Wales, company number 17438197. Registered office: 7 Montagu Gardens, Chelmsford, CM1 6EB, United Kingdom.

Contact for data protection matters: yaseen.valji@simplydata.uk

Simply Data International Ltd forms part of a group that includes Simply Data Sdn Bhd, incorporated in Malaysia. Where group companies are involved in processing your data, this is set out below.

This policy explains how we handle personal data collected through this website and through enquiries made to us. It does not cover personal data processed on behalf of our clients as part of delivering our security services, which is governed by the data processing agreement in place with each client.

Enquiry and briefing requests. When you complete a form on this site or contact us directly, we collect your name, work email address, organisation, telephone number if you provide one, the sector you select, and the content of your message.

Direct correspondence. If you email or telephone us, we hold the content of that correspondence and your contact details.

Website analytics. We use privacy-first, cookieless analytics that record aggregate information such as page views, referring sites, approximate country and device type. This does not identify you, does not set cookies and does not track you across other websites.

We do not use tracking cookies, advertising cookies or third party marketing trackers on this website.

To respond to your enquiry. Lawful basis: legitimate interests, namely responding to a request you have made to us.

To provide information about our services where you have asked for it. Lawful basis: legitimate interests.

To maintain records of business correspondence. Lawful basis: legitimate interests in the proper administration of our business.

To understand how the website is used and improve it. Lawful basis: legitimate interests. The analytics we use are aggregate and do not identify individuals.

To comply with legal obligations where these apply. Lawful basis: legal obligation.

We do not use enquiry data for marketing unless you have separately asked to receive it, and we do not add enquiries to a marketing list.

Enquiries submitted through this website are received by named individuals within Simply Data International Ltd and, where relevant to responding to you, by senior personnel within Simply Data Sdn Bhd, our group company in Malaysia.

We use third party service providers for website hosting and infrastructure, email and productivity services, and analytics. Each is engaged under a written contract requiring them to process personal data only on our instructions and to maintain appropriate security.

We do not sell personal data, and we do not share it with third parties for their own marketing purposes.

Some personnel who may access enquiry data are located in Malaysia. Malaysia is not currently covered by a UK adequacy decision, which means transfers of personal data to Malaysia are restricted transfers under UK data protection law.

Where personal data is transferred to our group company in Malaysia, we rely on appropriate safeguards, specifically the UK International Data Transfer Agreement or the EU Standard Contractual Clauses with the UK Addendum, supported by a transfer risk assessment and technical measures including encryption and access controls.

You may request further information about these safeguards by contacting us.

Enquiry and correspondence data is retained for as long as necessary to respond to you and to maintain a record of the business relationship, and reviewed periodically thereafter.

Where an enquiry does not lead to a business relationship, we retain the correspondence for a limited period and then delete it.

Analytics data is aggregate and is retained in line with the retention period of the analytics service.

As a security company we apply the controls we would expect of any supplier handling personal data. These include encryption in transit, access control limiting data to personnel who need it, multi-factor authentication on systems holding personal data, and monitoring of the systems we operate.

No system can be guaranteed entirely secure, but we take our own security posture seriously and treat it as a condition of being credible in this market.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

We maintain procedures for identifying, investigating and responding to personal data breaches. Where a breach is likely to result in a risk to your rights and freedoms, we will report it to the Information Commissioner's Office within 72 hours of becoming aware of it, and will notify you directly where the risk is high.

Under UK data protection law you have the right to be informed about how your data is used, to request access to the personal data we hold about you, to have inaccurate data corrected, to request erasure in certain circumstances, to restrict processing in certain circumstances, to data portability where applicable, and to object to processing based on legitimate interests.

To exercise any of these rights, contact yaseen.valji@simplydata.uk. We will respond within one month.

If you are unhappy with how we have handled your personal data, please contact us at yaseen.valji@simplydata.uk. We will acknowledge your complaint within 30 days and set out how we intend to address it.

If you remain dissatisfied, you have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection, at ico.org.uk or on 0303 123 1113.

We review this policy periodically and will update it where our processing changes. The date at the top of this page indicates when it was last revised.