Privacy & DATA Protection
At FRisk, we prioritize the trust of our customers. We understand that the security and integrity of customer data is important to our customers’ values and operations. That is why we keep it private and safe.
How FRisk protects you:
Customer data remains in the UK and is hosted on ISO 27001 certified infrastructure
All communications are over HTTPS
Server backups are performed daily
File based backups are performed hourly
Our team is bound by our data protection policy
FRisk handles customer data in accordance with GDPR
This Policy details our commitment to protecting the privacy of individuals who:
visit our Websites (defined below) (“Website Visitors”) or individuals who request us to contact them via our online web forms;
who register to use the products and services which we market for subscription and purchase available at (the “Service(s)”); or
attend or register to attend webinars, sponsored events or other events at which FRisk Reports Ltd participates (“Attendees”).
For the purposes of this Policy, the term “Websites” shall refer collectively to www.familyriskreport.co.uk as well as the other websites that FRisk operates and that link to this Policy. This Policy describes how FRisk collects, uses, shares and secures the personal information that you provide. It also describes your choices regarding use, access and correction of your personal information.
2. Scope Of This Policy
When this Policy applies:
This policy applies to our Websites and FRisk Report software service.
When this Policy does not apply – Third party websites:
Our Websites may contain links to other websites. The information practices and the content of such other websites are governed by the privacy statements of such other websites. We encourage you to review the privacy statements of any such other websites to understand their information practices.
When this Policy does not apply – Service Data:
Subscribers and Service Providers registered on FRisk are solely responsible for establishing policies for, and ensuring compliance with, all applicable laws and regulations, as well as any and all privacy policies, agreements or other obligations, relating to the collection of personal information in connection with the use of our Services by individuals (also referred to as “data subjects”) with whom our Subscribers and Service Providers interact.
If you are an individual who interacts with a Subscriber or Service Provider using our Services (such as a customer or user of one of our Subscribers and/or Service Providers) and require assistance or would either like to amend your contact information or no longer wish to be contacted by one of our Subscribers and/or Service Providers that use our Services, please contact the Subscriber that you interact with directly.
3. Information That You Provide To Us
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:
Identity Data includes first name, maiden name, last name, title, date of birth and gender.
Contact Data includes billing address, delivery address, email address and telephone numbers.
Financial Data includes bank account and payment card details.
Transaction Data includes details about payments to and from you and other details of services you have purchased from us.
Technical Data includes IP address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
Profile Data includes orders made by you, your interests, preferences, feedback and survey responses.
Usage Data includes information about how you use our website and services.
Marketing & Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
Account and Registration Information
We ask for and may collect personal information about you such as your name, address, phone number, email address, instant messaging ID, and credit card information, as well as certain related information like your company name and website name, when you register for an account to access or utilize one or more of our Services (an “Account”). We also ask for and collect personal information such as an email address and a name or alias from any individual that you authorize to log into and utilize our Services in connection with Your Account (an “Agent” or “End-User”). We base the processing of your personal information on our legitimate interest, to provide you with the necessary functionality during your use of our Service(s).
A third-party intermediary is used to manage credit card processing. This intermediary is not permitted to store, retain, or use your billing information for any purpose except for credit card processing on our behalf.
We refer to any information described above as “Account Information” for the purposes of this Policy. By voluntarily providing us with Account Information, you represent that you are the owner of such personal information or otherwise have the requisite consent to provide it to us.
We ask for and may collect personal information from you when you submit web forms on our Websites or as you use interactive features of the Websites, including: participation in webinars, surveys, contests, promotions, sweepstakes, requesting customer support, or otherwise communicating with us. We process your personal information to perform our contract with you for the use of our websites and the Service(s) and to fulfill our obligations under the Service Agreement to you; where we have not entered into the Service Agreement with you, we base the processing of your personal information on our legitimate interest to operate and administer our websites and to provide you with the content you access and request.
We ask for and may collect personal information such as your name, address, phone number and email address when you register for or attend a sponsored event or other events at which any member of FRisk participates, in order to facilitate your registration or attendance at an event, including sending related communications to you.
4. Information That We Collect From You on our Websites
Cookies and Other Tracking Technologies
We partner with third parties to either display advertising on the Websites or to manage our advertising on other sites. Our third party partners may also use technologies such as cookies, web beacons, tags, flash, HTML5, scripts, or other tracking technologies to gather information about your activities on our Websites and other sites in order to suggest advertisements based upon your browsing activities and interests.
As is true with most websites and services delivered over the Internet, we gather certain information and store it in log files when you interact with our Websites and Services. This information includes internet protocol (IP) addresses as well as browser type, internet service provider, URLs of referring/exit pages, operating system, date/time stamp, information you search for, locale and language preferences, identification numbers associated with your devices, your mobile carrier, and system configuration information. Occasionally, we connect personal information to information gathered in our log files as necessary to improve our Websites and Services. In such a case, we would treat the combined information in accordance with this Policy.
5. Information Collected From Other Sources
Information From Services Provided by Third Parties
We may also obtain other information, including personal information, from third parties and combine that with information we collect through our Websites. For example, we may have access to certain information from a third party social media or authentication service if you log into our Services through such a service or otherwise provide us with access to information from the service. Any access that we may have to such information from a third party social media or authentication service is in accordance with the authorization procedures determined by that service. If you authorize us to connect with a third party service, we will access and store your name, email address(es), current city, profile picture URL, and any other personal information that the third party service makes available to us, and use and disclose it in accordance with this Policy. You should check your privacy settings on these third party services to understand and change the information sent to us through these services. For example, you may choose to log in to the Services using single sign-in services such as Facebook Connect or an Open ID provider.
These single sign-on services will authenticate your identity, provide you with the option to share certain personal information (such as your name and email address) with us, and pre-populate our sign-up form. Services like Facebook Connect give you the option to post information about your activities in the Services to your profile page to share with others within your network.
6. How We Use Information That We Collect
We may use the information we collect about you (including personal information, to the extent applicable) in order to perform our obligations under our Service Agreement with you and on the basis of our legitimate interest including to (a) provide, operate, maintain, improve, and promote the Websites and the Services; (b) enable you to access and use the Websites and the Services; (c) process and complete transactions, and send you related information, including purchase confirmations and invoices; (d) send transactional messages, including responses to your comments, questions, and requests; provide customer service and support; and send you technical notices, updates, security alerts, and support and administrative messages; (e) send promotional communications, such as providing you with information about products and services, features, surveys, newsletters, offers, promotions, contests, and events; and provide other news or information about us and our partners (you can opt-out of receiving marketing communications from us by emailing and providing the names/email address(es) that you would like removed from our marketing databases and added to our ‘Do Not Contact’ list” or following the unsubscribe instructions included in our marketing communications); (f) process and deliver contest or sweepstakes entries and rewards; (g) monitor and analyze trends, usage, and activities in connection with the Websites and Services and for marketing or advertising purposes; (h) investigate and prevent fraudulent transactions, unauthorized access to the Websites and the Services, and other illegal activities; (i) personalize the Websites and Services, including by providing features or advertisements that match your interests and preferences; and (j) for other purposes for which we obtain your consent.
Legal basis for processing (EEA visitors only)
If you are a visitor from the European Economic Area (“EEA”), our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.
However, we will normally collect personal information from you only where we need the personal information to perform a contract with you (e.g. to provide you with our Services), where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms, or where we have your consent. In some cases, we may also have a legal obligation to collect personal information from you.
If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).
Similarly, if we collect and use your personal information in reliance on our legitimate interests (or those of any third party), we will make clear to you at the relevant time why we need to use your personal information. If we process personal information in reliance on your consent, you may withdraw your consent at any time.
If you have questions about, or need further information concerning, the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the “Contact Us” section below.
7. Sharing Of Information Collected
Third-Party Service Providers
We share information, including personal information, with our third-party service providers that we use to provide hosting for and maintenance of our Websites, application development, backup, storage, payment processing, analytics and other services for us. Where you have expressly consented, these third-party service providers will also have access to or process End-Users' personal information for the purpose of providing the services chosen by the End-User within their FRisk Report. We do not permit our third-party service providers to use the personal information that we share with them for their marketing purposes or for any other purpose than in connection with the services chosen by you.
We may also share aggregated and/or anonymized information regarding your use of the Services with third parties for marketing purposes based on our legitimate interest to develop and promote Service(s). However, we would never identify you, your Agents or End-Users as the source of the information.
We may collect, and we may engage third-party analytics providers to collect, metrics and information regarding your use of the Service, including evaluating how Agents and End-Users use the Service (“Usage Data”), to develop new features, improve existing features or inform sales and marketing strategies, based on our legitimate interest to improve the Services. When we process Usage Data, any personal information shall be anonymized. Any such third-party analytics providers will not share or otherwise disclose Usage Data, although we may make Usage Data publicly available from time to time.
Compliance with Laws and Law Enforcement Requests; Protection of Our Rights
In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We may disclose personal information to respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims. We may also share such information if we believe it is necessary in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our Service Agreement, or as otherwise required by law.
From time to time, we may post testimonials on the Websites that may contain personal information. We always obtain your consent to post your name along with your testimonial. If you wish to update or delete your testimonial, you can contact us at email@example.com.
FRisk Reports Ltd Sharing
We may share information, including personal information, with any member of the FRisk Reports Ltd, and they will use that information only for the purposes already described in this Policy.
With Your Consent
We may also share personal information with third parties when we have your consent to do so.
8. International Transfer of Personal Information
We do not share your personal information with third parties, unless it is necessary to carry out your request, for our professional or legitimate business needs, or as required or permitted by law. Where we do transfer your personal information to third parties or service providers, appropriate arrangements will be made in order to ensure correct and secure data processing in compliance with applicable data protection law.
We store personal information about Website Visitors and Subscribers within the United Kingdom. To facilitate our global operations, we may transfer and access such personal information from around the world, including from other countries in which FRisk Reports Ltd has operations. Therefore, your personal information may be processed outside of the EEA and in countries which are not subject to an adequacy decision by the European Commission and which may not provide for the same level of data protection as the EEA.
In this event, we will ensure that the recipient of your personal information offers an adequate level of protection, for instance by entering into standard contractual clauses for the transfer of data as approved by the European Commission (Art. 46 GDPR), or we will ask you for your prior consent to such international data transfers.
9. Other Important Privacy Information
Notice to End-Users
Our Services are intended for use by enterprises and individual members of the public (“End-Users”). Where our Services are made available to you through a Subscriber of ours, that enterprise is the data controller of your personal information. Your data privacy questions and requests should initially be submitted to the FRisk Subscriber in its capacity as your data controller. FRisk is not responsible for our Subscribers’ privacy or security practices which may be different than this Policy.
FRisk’s Subscribers are able to:
restrict, suspend or terminate your access to the Services;
access and describe your personal information that you provided to them;
access and export your personal information processed by them; and
amend your personal information, including your end-user profile.
Where FRisk is the data controller of personal information (for example, personal information relating to Website Visitors, Attendees and individuals who register to use our Services), then we retain the personal information we collect where we have an ongoing legitimate business need to do so (for example, to provide you with our Services, to enable your participation in an event, and to comply with applicable legal, tax or accounting requirements).
When we have no ongoing legitimate business need to process your personal information, we will either delete or aggregate it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
If your personal information is processed within a Subscriber’s Service Data, we will process the personal information for as long as we are instructed to do so by the relevant Subscriber that is the data controller of the Subscriber Service Data.
10. How to Exercise Your Data Protection Rights
You have certain choices available to you when it comes to your personal information. Below is a summary of those choices, how to exercise them and any limitations.
Correcting, updating and removing your information:
An individual who seeks to exercise their data protection rights in respect of personal information stored or processed by us on behalf of a Subscriber of ours within the Subscriber’s Service Data (including to seek access to, or to correct, amend, delete, port or restrict processing of such personal information) should direct his/her query to our Subscriber (the data controller). Upon receipt of a request from one of our Subscribers for us to remove the personal information, we will respond to their request within thirty (30) days. We will retain personal information that we process and store on behalf of our Subscribers for as long as needed to provide the Services to our Subscribers.
Accessing and updating or deleting your information
Agents and End-Users have the ability to access, update and delete certain personal information from within the Service. For example, you can access your Agent or End-User profile and make updates to your personal information. In cases where we act as the data controller of your personal information, we will provide you with information about whether we hold any of your personal information upon request. We will respond to such requests within a reasonable timeframe. Please note, however, that we may need to retain certain information for record keeping purposes, to complete transactions or to comply with our legal obligations.
Deactivating your user profile
If you no longer wish to use our Services, FRisk’s Subscriber may be able to deactivate your End-User account. First, please contact FRisk’s Subscriber with your request. If you are a FRisk Subscriber and are unable to deactivate an End-User account through your administrator settings, please email firstname.lastname@example.org. Please be aware that deactivating your account does not delete your information; your information remains visible to other Service users based on your past participation within the Services.
Request that we stop using your information
You may request that your personal information no longer be accessed, stored, used and otherwise processed where you believe that a FRisk Subscriber or FRisk do not have the appropriate rights to do so. For example, if you believe a Services account was created for you without your permission or you are no longer an active user, you can request that we delete your account as provided in this Policy. Where you gave us consent to use your personal information for a limited purpose, you can contact us to withdraw that consent. You can also opt-out of our use of your personal information for marketing purposes by contacting us, as provided below. When you make such requests, we may need time to investigate and facilitate your request. Please note that an End-User of a FRisk Subscriber should first contact FRisk’s Subscriber with a request to stop access, storage, use of personal information. If there is delay or dispute as to whether we have the right to continue using your personal information, we will restrict any further use of your personal information until the request is honored or the dispute is resolved, provided the FRisk Subscriber does not object (where applicable).
Opt-out of communications
We offer those who provide personal contact information a means to choose how we use the information provided. You may manage your receipt of marketing and non-transactional communications by clicking on the “unsubscribe” link located on the bottom of our marketing emails or you may send a request to email@example.com. You may opt-out of receiving promotional communications from us by using this unsubscribe link within each email. Even after you opt-out from receiving promotional messages from us, if you are an Agent, then you will continue to receive transactional messages from us regarding our Services. You can opt out of some notification messages in your account settings.
Other data protection rights
If you wish to exercise any other data protection rights that are available to you under your local data protection laws (such as the right to data portability or to data restriction) then please send your request to firstname.lastname@example.org and we will respond to your request in accordance with applicable data protection laws.
You have the right to complain to your local data protection authority, the Information Commissioner’s Office (“ICO”), if you are unhappy with our data protection practices. However, we request that you contact us in the first instance as we would appreciate the chance to deal with your concerns before you approach the ICO.
11. Children’s Personal Information
We do not knowingly collect any personal information from children under the age of 16. If you are under the age of 16, please do not submit any personal information through our Websites or Services. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce this Policy by instructing their children never to provide personal information through the Websites or Services without their permission. If you have reason to believe that a child under the age of 16 has provided personal information to us through the Websites or Services, please contact us at email@example.com, and we will use commercially reasonable efforts to delete that information.
It is important to note that we do collect information regarding children where it has been provided by the End-User. This information may include the child’s name and age. We do not share this information with third parties without express consent from the End-User, unless it is necessary to carry out your request, for our professional or legitimate business needs, or as required or permitted by law.
12. Business Transactions
We may assign or transfer this Policy, as well as your account and related information and data, including any personal information, to any person or entity that acquires all or substantially all of our business, stock or assets, or with whom we merge. If we do, we will inform them of the requirement to handle your personal information in accordance with this Policy.
We do not sell personal information of any individual, including personal information of minors under 16 years of age.
We have not disclosed any personal information for valuable consideration in the 12 months prior to this Policy’s last update.
14. Changes To This Policy
This Policy may be updated from time to time to reflect changing legal, regulatory or operational requirements. We encourage you to periodically review this page for the latest information on our privacy practices.
If there are any material changes to this Policy, you will be notified by our posting of a prominent notice on the Websites prior to the change becoming effective.
If you do not accept any changes made to this Policy, please discontinue use of the Websites and the Services.
15. Contact Us
If you have questions or complaints regarding this Policy or about the Frisk’s privacy practices, please contact us by email at firstname.lastname@example.org, or at:
Family Risk Reports Ltd
46, Tower Street