GDPR & Data Privacy Policy

Continuity Direct is committed to the highest standards of data protection. When you use the Continuity Direct platform, we act as a Data Processor for our clients, who remain the Data Controllers.

This page covers the platform. For how we handle details submitted through this website, see our website privacy notice.

Key Privacy Features

• Data Sovereignty: You remain the owner of your data, and we don't sell, or give it away, to third parties.
• Right to Erasure: Our platform includes "Hard Delete" functionality, allowing administrators to permanently remove all data and contact details in compliance with Article 17 (Right to be Forgotten).
• Data Minimisation: We only collect the data necessary for emergency notification and accountability. Sensitive context fields in incident reports allow you to separate operational intelligence from personal data.
• Encryption: All data is encrypted at rest using AES-256 and in transit using TLS 1.2+.
• Access Control: Strict Role-Based Access Control (RBAC) ensures that personal data is only accessible to authorised Incident Managers and Administrators.

For a full legal review or Data Processing Agreement (DPA), please contact our compliance team at info@sycis.com.

Back to Home