Privacy policy

1. Who we are

This website is operated by SRS Support Limited (“we”, “us”), the provider of the iSite™ platform. For the personal data described in this policy, SRS Support Limited is the data controller.

SRS Support Limited
Registered in England and Wales, company number 07805852
Registered office: Woodland View, Heol Llangeinor, Llangeinor, Bridgend, CF32 8PW
ICO registration number: ZC230256
Email: hello@srscloud.co.uk

2. What this policy covers

This policy covers this marketing website only — isite.srscloud.co.uk — and the enquiries people send us through it.

It does not cover the iSite application itself at app.isite.srscloud.co.uk. When a contractor runs iSite on their sites, that contractor is the controller for their workers’ induction, access and attendance records, and we act as their processor under a separate written agreement. Workers wanting to know how their own site data is handled should ask the contractor operating the site, whose own privacy notice applies.

3. Cookies

This website sets no cookies and stores nothing in your browser. There is no cookie banner because there is nothing to consent to.

4. What we collect, and why

Website analytics

We use Cloudflare Web Analytics to count visits and see which pages people read. It is a privacy-first, cookieless tool: it does not use cookies, localStorage or browser fingerprinting, and it does not track you across other websites. For each page view it records the page address, the referring page, the general browser, operating system and device type, the country the request came from, and page-load timings. We see this only as aggregated statistics. We do not use it to identify individuals, and we do not attempt to re-identify anyone from it.

Lawful basis: legitimate interests — understanding whether our own website works and is worth running.

Enquiries you send us

The links on this site open your own email application. If you email us, we receive whatever you choose to send: typically your name, email address, employer, and what you tell us about your sites. We use it to answer you and, if you become a customer, to set up and support your account.

Lawful basis: legitimate interests in responding to a business enquiry, and, where you are moving towards a contract with us, taking steps at your request before entering into that contract.

Server logs

Our hosting provider keeps standard technical logs, which can include IP addresses, for delivering the site and protecting it from abuse. We do not use these logs for analytics or marketing.

Lawful basis: legitimate interests in keeping the service available and secure.

5. Who we share it with

We do not sell personal data, and we do not share it for advertising. We rely on these service providers:

• GitHub, Inc. — hosting for this static website.
• Cloudflare, Inc. — cookieless website analytics.
• Microsoft (Microsoft 365) — the mailbox that receives enquiries sent to hello@srscloud.co.uk.

We may also disclose personal data where we are required to by law, or to establish, exercise or defend legal claims.

6. Transfers outside the UK

GitHub, Cloudflare and Microsoft are United States companies. Depending on the service, data may be stored in the United Kingdom or processed outside it. Wherever personal data leaves the UK, the transfer is protected by appropriate safeguards under UK data protection law — the International Data Transfer Agreement, or the EU Standard Contractual Clauses together with the UK Addendum, or the UK Extension to the EU–US Data Privacy Framework where the provider is certified under it.

7. How long we keep it

• Analytics: Cloudflare keeps the raw beacon data for 7 days, after which it is aggregated down to a roughly 10% sample for longer-term reporting. None of it is tied to an identifiable person.
• Enquiries: kept for 90 days from our last contact with you, unless you become a customer, in which case we keep the correspondence for the life of the account and for 6 years afterwards, matching the period in which a contract claim could still be brought and the term HMRC requires business records to be held.
• Server logs: kept for a short period by our hosting provider and then deleted.

8. Your rights

Under UK GDPR you have the right to:

• ask what personal data we hold about you, and get a copy of it;
• have inaccurate data corrected;
• ask us to delete data we no longer need;
• ask us to restrict how we use it;
• object to processing we carry out on the basis of legitimate interests;
• receive data you gave us in a portable format.

To exercise any of these, email hello@srscloud.co.uk. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We would appreciate the chance to put things right first.

9. Security

This site is served over HTTPS. It is a set of static files with no database and no login, so there is no account data held on it. Access to the mailbox that receives enquiries is restricted to staff who need it.

10. Changes to this policy

If we change how we handle personal data on this site we will update this page and the “last updated” date at the top. Material changes will be made clear rather than slipped in quietly.

11. Contact us

Questions about this policy, or about data protection generally, go to hello@srscloud.co.uk, or write to us at the registered office above.