Specific Risk Assessments Ltd is committed to protecting and respecting your privacy. This Privacy Statement explains how we collect, use, store, share and protect personal information when you access or use the Specific Risk Assessments website, platform and related services ("Services"). Specific Risk Assessments is an online platform designed to help competent persons create, manage and review professional Risk Assessments and COSHH Assessments using structured webforms, built-in guidance, AI support and professional PDF Templates. We are committed to handling personal information fairly, lawfully and transparently and in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Statement applies to visitors to our website, Account Holders, additional users and anyone using the Services. By accessing or using the Services, you acknowledge that your personal information will be handled in accordance with this Privacy Statement.
We may update this Privacy Statement from time to time to reflect changes to the Services, technology, legal requirements or business operations. Users are encouraged to review this Privacy Statement periodically to ensure they remain informed about how their information is collected and used.
Specific Risk Assessments Ltd is responsible for the collection and processing of personal information through the Specific Risk Assessments website, platform and related services. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Specific Risk Assessments Ltd acts as the data controller in relation to the personal information described in this Privacy Statement.
Company Name: Specific Risk Assessments Ltd
Company Registration Number: 17182817
VAT Registration Number: 518 7911 65
Registered Office Address: 71-75 Shelton Street Covent Garden
United Kingdom
Email us using the Contact Us form. Specific Risk Assessments Ltd owns and operates the Specific Risk Assessments website, platform and related services. The platform is primarily intended for users within the United Kingdom, although users outside the UK may also access and use the Services. References in this Privacy Statement to "Specific Risk Assessments", "we", "us" or "our" refer to Specific Risk Assessments Ltd. References to "you" and "your" refer to any visitor, Account Holder, additional user or other person accessing or using the Services. If you have any questions about this Privacy Statement or how we process personal information, please contact us using the details provided above.
Specific Risk Assessments Ltd may collect and process different types of information depending on how the Services are used.
When an Account Holder registers for the Services, we may collect information including:
Where additional users are invited to access the Services, we may collect:
Users may upload, create, store and manage documents and information through the platform, including:
The information contained within such documents may include personal information where users choose to include it.
Payments are processed securely through Stripe. Specific Risk Assessments Ltd does not store or have access to complete payment card information. Payment providers may collect and process payment information in accordance with their own privacy policies.
When users access the website or Services, we may automatically collect technical information including:
Website Analytics
We may collect information relating to how visitors use our website and Services through analytics tools, including Google Analytics. This information helps us understand how the Services are used and enables us to improve the website, platform and user experience.
Where users contact us, we may collect and retain information contained within:
Documents generated through the Services may include verification features. Verification pages linked to Verification IDs and QR codes may display information including:
Risk Assessments platform.
Specific Risk Assessments Ltd may, from time to time, introduce additional features, modules, services or other document and compliance management services, which will be governed by this policy. Information collected through such future features will also be processed in accordance with this Privacy Statement.
Specific Risk Assessments Ltd uses personal information to provide, operate, maintain and improve the Services. Depending on how the Services are used, we may use information for the following purposes:
We use information to:
Managing Accounts and Subscriptions
We use information to:
We use information to:
Services.
Information may be used to provide AI guidance and platform support. The AI Assistant is designed to help users understand the platform and explain how forms and features are intended to be used. The AI Assistant does not replace the judgement and responsibilities of the competent person completing an assessment.
We use information to:
We use information to:
We may process information where necessary to:
Assessments Ltd, users and third parties.
We may use information to:
We will only send marketing communications where permitted by law or where users have provided their consent.
Information entered by users may be used to provide verification functionality associated with documents generated through the Services. Verification pages linked to Verification IDs and QR codes may display information including:
Risk Assessments platform.
As Specific Risk Assessments Ltd continues to develop the platform, information may also be used in connection with additional services and features. Such information will continue to be processed in accordance with this Privacy Statement.
Specific Risk Assessments provides an AI Assistant designed to offer practical guidance and platform support to users of the Services. The AI Assistant is intended to help users understand:
The AI Assistant is designed to explain how the platform and webforms are intended to be used and to help users understand the information being requested. The AI Assistant provides guidance and platform support only and does not replace the knowledge, experience, judgement or responsibilities of the competent person completing an assessment.
Where users interact with the AI Assistant, questions and related information may be processed to:
Users should avoid submitting unnecessary sensitive or confidential information when interacting with the AI Assistant.
Responses generated by the AI Assistant are based on the information available to the platform and may not always be complete, accurate or applicable in every circumstance. Users remain responsible for ensuring that assessments, controls, ratings and actions reflect the work activity, hazards, products and circumstances involved.
Specific Risk Assessments Ltd does not sell personal information submitted through the AI Assistant. Information processed in connection with the AI Assistant is handled in accordance with this Privacy Statement and applicable data protection laws.
The AI Assistant may be updated, improved, modified or enhanced from time to time as part of the ongoing development of the Services.
Specific Risk Assessments Ltd is committed to using AI technologies responsibly and transparently while supporting users in creating, reviewing and managing assessments with confidence.
Specific Risk Assessments Ltd uses third-party payment providers to process subscription payments securely.
Payments made through the Services are processed by Stripe, a secure payment processing provider. When users make payments, certain payment and billing information may be collected and processed by Stripe in accordance with Stripe's own privacy policies and terms. Specific Risk Assessments Ltd does not store or have access to complete debit card or credit card information.
We may collect and process information relating to:
This information is used to:
Paid subscriptions are billed every thirty (30) days unless otherwise stated. Account Holders are responsible for ensuring that billing information remains accurate and up to date.
Specific Risk Assessments Ltd takes reasonable steps to ensure that payment-related information is handled securely. Sensitive payment card information is processed by trusted third-party payment providers and is not stored by Specific Risk Assessments Ltd.
Users should be aware that third-party payment providers may collect, process and store payment information in accordance with their own privacy policies and terms of service.
Specific Risk Assessments Ltd is not responsible for the privacy practices of third-party payment providers, and users are encouraged to review the policies of such providers.
Payment and transaction information may be used where necessary to:
Specific Risk Assessments Ltd does not sell payment information or use payment information for marketing purposes.
Specific Risk Assessments Ltd uses cookies and similar technologies to help operate, improve and secure the website and Services. Cookies are small text files stored on a user's device that help websites function efficiently and provide information about how the website is used.
Certain cookies are necessary for the operation of the website and Services. These cookies may be used to:
Without these cookies, certain features of the Services may not function correctly.
Specific Risk Assessments Ltd may use analytics tools to understand how visitors use the website and Services and to help improve performance and user experience. Analytics information may include:
Specific Risk Assessments Ltd currently uses Google Analytics. Google Analytics helps us understand how users interact with the website and Services and enables us to improve content, functionality and user experience.
Google Analytics may collect information including:
Information collected through Google Analytics is generally aggregated and used for statistical and analytical purposes.
Users can control and manage cookies through their browser settings. Most browsers allow users to:
Disabling certain cookies may affect the functionality and performance of the Services.
Specific Risk Assessments Ltd may introduce additional analytics tools, technologies and features from time to time to improve the Services and user experience. Any such technologies will be used in accordance with applicable data protection laws and this Privacy Statement.
Further information regarding the use of cookies and similar technologies is provided in our Cookie Policy. Users are encouraged to review the Cookie Policy alongside this Privacy Statement.
Specific Risk Assessments Ltd provides document verification features to help users and third parties confirm that documents have been generated using the Specific Risk Assessments platform. Verification features may include:
Documents generated through the Services may contain a unique Verification ID. Verification IDs are intended to help demonstrate that a document has been created using the Specific Risk Assessments platform. Verification IDs do not constitute legal certification, approval or endorsement by Specific Risk Assessments Ltd.
Generated documents may include QR codes that allow users and third parties to access associated verification pages. QR codes are provided to support transparency and assist in confirming that documents have been created using the Services.
Verification pages may be publicly accessible to anyone with access to the Verification ID or QR code. Depending on the information entered by the user, verification pages may display information including:
Risk Assessments platform. Verification pages are intended solely to provide transparency and assist with document verification.
Users are responsible for ensuring that the information entered into the platform is accurate and appropriate.
Users should be aware that information included on verification pages may be visible to third parties who have access to the Verification ID or QR code. Users should avoid including unnecessary personal information within documents where such information is not required.
Verification information is used to:
Assessments platform.
Specific Risk Assessments Ltd may introduce additional verification technologies and functionality as part of the ongoing development of the Services. Any future verification features will be operated in accordance with this Privacy Statement and applicable data protection laws.
Specific Risk Assessments Ltd respects the privacy of its users and does not sell personal information to third parties.
Information may, however, be shared in certain circumstances where necessary to operate the Services, comply with legal obligations or protect the rights and interests of Specific Risk Assessments Ltd, users and third parties.
We may share information with trusted third-party service providers who assist us in operating and maintaining the Services. Such providers may include:
These third parties are only permitted to process information on our behalf where necessary to provide their services.
Subscription payments are processed securely through Stripe. Stripe may collect, process and store payment-related information in accordance with its own privacy policies and terms. Specific Risk Assessments Ltd does not store complete debit card or credit card information.
Analytics Providers
We currently use Google Analytics to help us understand how visitors use the website and Services. Google Analytics may process technical and usage information to provide statistical and analytical insights that help improve the platform and user experience.
Information entered into the platform may be displayed through Verification IDs, QR codes and associated verification pages. Verification pages may include:
Risk Assessments platform. Users are responsible for ensuring that information entered into documents is accurate and appropriate.
We may disclose information where reasonably necessary to:
Ltd, users or third parties.
In the event of a merger, acquisition, restructuring, sale of assets or other business transaction, user information may be transferred as part of that transaction. Where required, we will take reasonable steps to ensure that personal information continues to be protected in accordance with this Privacy Statement.
Some service providers may process information outside the United Kingdom. Where personal information is transferred internationally, Specific Risk Assessments Ltd will take reasonable steps to ensure that appropriate safeguards are in place and that information is protected in accordance with applicable data protection laws.
Specific Risk Assessments Ltd does not sell personal information and does not permit third parties to use personal information for their own marketing purposes without the user's consent.
Future Services
As the platform evolves, additional service providers and technologies may be introduced to support new features and functionality. Any sharing of information in connection with such services will be carried out in accordance with this Privacy Statement and applicable data protection laws.
Specific Risk Assessments is primarily intended for users within the United Kingdom, although users outside the UK may also access and use the Services. By using the Services, international users acknowledge that their information may be collected, processed and stored in accordance with the laws of England and Wales and this Privacy Statement. Specific Risk Assessments Ltd is committed to protecting personal information in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Certain third-party service providers used in connection with the Services may process information outside the United Kingdom. Where personal information is transferred internationally, Specific Risk Assessments Ltd will take reasonable steps to ensure that appropriate safeguards are in place and that personal information receives an adequate level of protection consistent with applicable data protection laws.
Users located outside the United Kingdom are responsible for ensuring that their use of the Services complies with any laws and regulations applicable within their own jurisdiction. Nothing in this Privacy Statement is intended to limit any rights or protections available to individuals under applicable data protection legislation.
Specific Risk Assessments Ltd retains personal information and documents for as long as reasonably necessary to provide the Services, support users, comply with legal obligations and protect the operation and integrity of the platform.
We may retain account information, subscription records and user documents to allow users to continue managing their information and, where applicable, to reactivate their accounts in the future. Information may continue to be retained following the cancellation of a subscription.
Information retained by Specific Risk Assessments Ltd may include:
Specific Risk Assessments Ltd does not currently apply a fixed retention period to user documents and records.
Where information has been retained, users may be able to reactivate their accounts and regain access to previously stored documents and records. Specific Risk Assessments Ltd does not guarantee that all historical information will remain available indefinitely.
Users may request the deletion of their personal information and account data at any time. Upon receiving a valid request, Specific Risk Assessments Ltd will take reasonable steps to delete personal information, subject to any legal, regulatory or legitimate business requirements that require certain information to be retained.
Backups and Disaster Recovery
Specific Risk Assessments Ltd may maintain secure backup copies of information and documents for operational, security and disaster recovery purposes. Backup information may remain in secure systems for a period of time after deletion requests have been processed.
Certain information may be retained where reasonably necessary to:
As Specific Risk Assessments Ltd introduces additional services and features, including Certificates, Cards and other document management tools, information relating to those services may also be retained in accordance with this Privacy Statement. Ongoing Review Specific Risk Assessments Ltd periodically reviews its data retention practices to ensure that information is retained appropriately and in accordance with applicable laws and business requirements.
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, individuals have certain rights in relation to their personal information. Specific Risk Assessments Ltd is committed to respecting those rights and responding to requests in accordance with applicable law.
You have the right to request access to the personal information we hold about you. This allows you to understand what information we hold and how it is being used.
You have the right to request that inaccurate or incomplete personal information is corrected. We encourage users to keep their account information up to date to help ensure that information remains accurate.
You have the right to request the deletion of your personal information in certain circumstances. Upon receiving a valid request, Specific Risk Assessments Ltd will take reasonable steps to delete personal information, subject to any legal, regulatory or legitimate business requirements that require certain information to be retained.
You may request that we restrict the processing of your personal information in certain circumstances. Where applicable, we will continue to store information but limit the way it is used.
You have the right to object to the processing of your personal information where processing is based on legitimate interests or for direct marketing purposes. We will consider such requests in accordance with applicable data protection laws.
Where applicable, you have the right to request a copy of certain personal information in a structured, commonly used and machinereadable format. You may also request that such information be transferred to another organisation where technically feasible.
Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out before consent was withdrawn.
If you believe that your personal information has been handled improperly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). Further information about the ICO can be found at: www.ico.org.uk We would, however, appreciate the opportunity to address any concerns directly before you contact the ICO.
If you wish to exercise any of your rights or have any questions regarding the way your personal information is processed, please contact: Specific Risk Assessments Ltd Email us using the Contact Us form. We may request information to verify your identity before responding to requests relating to personal information. Specific Risk Assessments Ltd will respond to requests in accordance with applicable data protection laws and within the timescales required by law.
Specific Risk Assessments Ltd takes the security of personal information seriously and is committed to protecting information against unauthorised access, misuse, loss, alteration and disclosure. We take reasonable technical and organisational measures to help safeguard the information processed through the Services.
Users are responsible for maintaining the confidentiality of their login credentials and passwords. Users should:
Account Holders are responsible for managing access permissions for additional users and ensuring that authorised users access the Services appropriately.
Specific Risk Assessments Ltd takes reasonable steps to help protect information through measures that may include:
Certain services used by Specific Risk Assessments Ltd are provided by trusted third-party providers, including payment processors, hosting providers and analytics providers. Although we take reasonable steps when selecting service providers, users should be aware that third-party providers operate under their own terms and privacy policies.
Users play an important role in protecting their own information. Users are responsible for:
No Absolute Guarantee
While Specific Risk Assessments Ltd takes reasonable steps to protect personal information, no method of electronic storage, transmission or processing can be guaranteed to be completely secure. Accordingly, Specific Risk Assessments Ltd cannot guarantee absolute security and users acknowledge that they provide and store information through the Services at their own risk.
In the event of a security incident affecting personal information, Specific Risk Assessments Ltd will take reasonable steps to investigate the incident and, where required by law, notify affected individuals and relevant authorities.
Specific Risk Assessments Ltd continually reviews and improves its security practices as part of the ongoing development and operation of the Services. As new features and services are introduced, additional security measures may be implemented to help protect users and their information.
Specific Risk Assessments Ltd may update or amend this Privacy Statement from time to time to reflect:
Updated versions of this Privacy Statement will be published on the website and will take effect from the date stated at the top of the document unless otherwise specified. Where changes are material and affect existing users, Specific Risk Assessments Ltd will take reasonable steps to notify Account Holders using the contact information associated with their accounts. Continued use of the Services following the publication of an updated Privacy Statement constitutes acceptance of the revised Privacy Statement. If a user does not agree with any changes to this Privacy Statement, they should stop using the Services and may close their account in accordance with the Terms of Use. Specific Risk Assessments Ltd encourages users to review this Privacy Statement periodically to ensure they remain informed about how their personal information is collected, used and protected. No delay or failure by Specific Risk Assessments Ltd in exercising any right or remedy under this Privacy Statement shall constitute a waiver of that right or remedy. This Privacy Statement should be read together with our:
These documents together form the legal and operational framework governing the use of the Services.
If you have any questions about this Privacy Statement, your personal information or the way Specific Risk Assessments Ltd processes information, please contact us using the details below. Specific Risk Assessments Ltd Company Registration Number: 17182817 VAT Registration Number: 518 7911 65 Registered Office: 71-75 Shelton Street Covent Garden London WC2H 9JQ United Kingdom Email us using the Contact Us form. Information Commissioner's Office (ICO) Registration Number: ZC135798
If you wish to:
Please contact us using the details provided above. Specific Risk Assessments Ltd may request information to verify the identity of individuals submitting requests relating to personal information. We will respond to requests in accordance with applicable data protection laws and within the timescales required by law.
If you are dissatisfied with the way your personal information has been handled, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent authority responsible for data protection. Further information can be found at: www.ico.org.uk
Specific Risk Assessments Ltd would, however, appreciate the opportunity to address any concerns directly before a complaint is made to the ICO. Specific Risk Assessments Ltd Company Number: 17182817 VAT Number: 518 7911 65 Registered Office: 71-75 Shelton Street Covent Garden London WC2H 9JQ United Kingdom Email us using the Contact Us form. © Specific Risk Assessments Ltd. All rights reserved.
