Security Statement

At System Insight, we are committed to ensuring the highest level of security for our customers, partners, and visitors. We recognise the importance of safeguarding your personal and business information and employ industry-leading security measures to protect against unauthorised access, data breaches, and cyber threats.

Data Protection & Privacy

• We comply with UK GDPR (General Data Protection Regulation) and Data Protection Act 2018 to ensure that personal data is processed securely and lawfully.
• Any data collected through our website, including customer details and payment information, is encrypted and stored securely. Once the data is no longer needed, it will be securely deleted.
• We do not share, sell, or distribute personal data to third parties without explicit consent unless required by law.

Website & Network Security

• Our website uses SSL (Secure Sockets Layer) encryption to protect data transmission and ensure secure communications.
• We regularly update and monitor our systems to mitigate vulnerabilities and prevent unauthorised access.
• Firewalls, intrusion detection systems, and anti-malware solutions are deployed to enhance security.
• We utilise reCAPTCHA technology to protect against automated attacks and fraudulent activities.

Payment Security

• All online transactions are processed using secure, PCI-DSS compliant payment gateways.
• If you give your card details over the phone to make a payment, your details are inputted into our trusted payment system Tyl by Natwest with the strictest confidence.
• We do not store any payment information, ensuring customer financial details remain protected.
• Online banking transactions may require additional approvals from your bank, which are beyond our control and not associated with our security measures.

Access Control & Authentication

• Role-based access controls (RBAC) are implemented to limit access to sensitive information.
• Multi-factor authentication (MFA) is used where applicable to enhance account security.
• Employees undergo security awareness training at their own discretion to mitigate human-related security risks.

Third-Party Security

• We conduct due diligence on third-party vendors and partners to ensure they meet our security standards.
• Any third-party integrations undergo rigorous security assessments before implementation.

Incident Response & Monitoring

• Our technical team continuously monitors for potential threats and responds promptly to security incidents.
• In the event of a data breach, we will notify affected users and take corrective action immediately.

Customer Responsibilities

• We encourage users to choose strong passwords and update them regularly.
• Customers should be cautious of phishing attempts and report suspicious activity related to their accounts.
• Customers share their data at their own risk.

For any security concerns or inquiries, please contact our team at salesdept@systeminsight.co.uk.

Last Updated: 5th March 2025