Who We Are
CISR.Technical is committed to protecting the privacy and confidentiality of our clients, partners and website visitors. We process personal information responsibly and in accordance with applicable data protection legislation, including the EU General Data Protection Regulation (GDPR), the UK General Data Protection Regulation (UK GDPR), the UK Data Protection Act 2018 and the Gibraltar Data Protection Act 2004 (as amended).
Information We Collect:
Website Usage Information
When you visit our website, we automatically collect limited technical information to help us operate, secure and improve our services. This information may include:
- Date and time of your visit
- Approximate geographic location (country or region)
- Browser type and version
- Operating system (derived from the browser’s user-agent)
- IP address (where required for security, system administration and cyber security related website protections)
This information is used solely for website administration, performance monitoring, security, troubleshooting and service improvement. We do not use this information to identify individual visitors unless required for security or legal purposes.
Contact Form Information
If you contact us via our secure contact form, we collect only the information you choose to provide, which may include:
- Your name
- Organisation name
- Email address
- Telephone number
- Enquiry or service selection
- Message content
This information is used exclusively to respond to your enquiry, provide requested services or information and maintain appropriate business records where necessary.
Lawful Basis for Processing
We process personal information under one or more of the following lawful bases:
- Legitimate Interests – to operate, maintain, secure and improve our website and services.
- Consent – where you voluntarily provide information through our website.
- Legal Obligation – where we are required to retain or disclose information under applicable law.
Confidentiality and Information Security
Protecting the confidentiality of our clients’ information is fundamental to our business.
CISR.Technical does not sell, rent, licence, or disclose personal information to third parties for marketing, advertising, or commercial purposes. Information entrusted to us is treated in the strictest confidence and is processed only for the purpose for which it was provided.
Personal information is stored and processed in accordance with applicable data protection legislation and recognised information security standards. We implement appropriate technical and organisational measures to safeguard personal data against unauthorised access, disclosure, alteration, or loss.
All data is protected through encryption both in transit and at rest. Access to personal information is strictly restricted to authorised CISR.Technical personnel who require access to perform their duties and who are bound by appropriate confidentiality obligations. Access is managed using the principle of least privilege and is regularly reviewed.
Where trusted technology or infrastructure providers are used to support the secure operation of our services (such as website hosting, secure communications, or cloud infrastructure), they act only as data processors on our behalf and are contractually required to maintain appropriate confidentiality, security and data protection standards.
Data Retention
We retain personal information only for as long as necessary to fulfil the purpose for which it was collected, respond to enquiries, maintain business records, comply with legal obligations, or resolve disputes.
Technical website logs are retained only for operational and security purposes and are securely deleted when no longer required after a period of 12 months.
Cookies
Our website uses only essential cookies necessary for the secure operation and functionality of the website.
Should additional analytics or non-essential cookies be introduced, they will only be used where required consent has been obtained in accordance with applicable legislation.
Your Rights
Subject to applicable data protection legislation, you have the right to:
- Request access to the personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of your personal information where applicable.
- Request restriction of processing.
- Object to certain processing activities.
- Request a portable copy of your personal information where applicable.
- Withdraw your consent where processing is based on consent.
To exercise any of these rights, please make contact using the secure webform and clearly express your request’s specifics.
Changes to This Policy
This Privacy Policy may be updated periodically to reflect changes in our services, technology, legal obligations, or regulatory requirements. Any updates will be published on this page, with the revised effective date indicated accordingly.