Security and data handling
Last updated
This page explains how we protect the information we hold, where it is kept, and how to report a security problem. It covers Assize Data and all of our trading names.
How our website works
- Our website is served by Cloudflare, only over HTTPS.
- It does not use tracking or advertising cookies, and it loads no third-party trackers.
- It sends a strict content security policy and other security headers, and our forms use a Cloudflare Turnstile check to keep out automated abuse.
- What you send through our contact and job application forms goes straight to our Microsoft 365 mailboxes. The website itself does not store it.
Where information is held
- Microsoft 365 holds our email and documents.
- Cloudflare hosts our websites and delivers what you send through our forms.
Our privacy notice lists everyone we share personal data with, explains any transfers outside the UK, and sets out how long we keep each kind of information.
How we protect information
- Only what we need. We collect the information a piece of work needs, and keep it only as long as our privacy notice says.
- Limited access. Only people who need personal data for their work can see it.
- Trained people. Everyone who works for us has a data protection induction and signs a confidentiality agreement.
- Careful with sources. We follow the rules on how we may use the data we work with. See data sources and licensing.
If something goes wrong
If we have a personal data breach that we are required to report, we report it to the Information Commissioner’s Office within 72 hours of becoming aware of it, and we tell the people affected without undue delay when the law requires us to.
Reporting a security problem
If you think you have found a security problem in any of our websites or services, email security@assizedata.co.uk with enough detail for us to reproduce it. We will acknowledge your report within 5 working days and keep you updated while we fix it.
When you look into a problem, please:
- do not access, change or delete data that is not yours
- do not disrupt our services or other people’s use of them
- give us a reasonable time to fix the problem before you tell anyone else about it
If you act in good faith and follow these rules, we will not take legal action against you. We do not currently pay for reports. Our contact details for security are also published at /.well-known/security.txt.