01Who we are
This privacy policy explains how ITSX LTD collects and uses personal data when you visit itsxassure.com or itsxcommercial.com, or contact us through either website.
ITSX LTD trades as ITSX Assure and ITSX Commercial. It is the data controller for the personal data described here.
- Legal entity
- ITSX LTD
- Company number
- 12953882, registered in England and Wales
- Registered office
- 13th Floor, Piccadilly Plaza, Manchester, M1 4BT, United Kingdom
- Privacy contact
- hello@itsxassure.com
We have not appointed a Data Protection Officer, because the law does not require one for our activities. Send any question about this policy or your personal data to the address above.
02What we collect
Information you give us. When you use a contact form or email us, we collect:
- your name and work email address
- the contents of your message
- anything else you choose to include, such as your organisation, role or the services you are interested in
Please don't include sensitive personal data, such as health information, in your message.
Technical information. When you visit, our hosting provider automatically records standard server logs. These include your IP address, browser and device type, the pages requested and the date and time. Fonts and some page components load from third-party content delivery networks, which also receive your IP address so they can deliver those files.
Analytics. We don't currently use analytics or tracking tools on either website. If we add them, we will ask for your consent first and update this policy.
Client and supplier records. If you become a client, a client contact or a supplier, we keep the business contact details and correspondence needed to deliver and administer that relationship.
03How we use it and our lawful basis
Under the UK GDPR, we need a lawful basis for each way we use personal data.
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiry and following up on it | Legitimate interests: responding to people who contact us about our services |
| Preparing a proposal or taking steps you ask for before entering a contract | Contract: steps taken at your request before a contract |
| Delivering and administering an engagement, including invoicing | Contract; and legitimate interests where the contract is with your employer |
| Keeping the websites secure, preventing abuse and diagnosing faults | Legitimate interests: operating a secure, reliable service |
| Keeping accounting and tax records | Legal obligation |
| Sending marketing to individuals, or using non-essential cookies, if we ever do | Consent, which you can withdraw at any time |
Where we rely on legitimate interests, we have weighed them against your rights and expectations. You can ask us for details of that assessment.
05Where it is stored and how we protect it
ITSX is based in the UK. Where our providers offer a choice, we store business records in UK or European data centres.
Some providers, including content delivery networks and form delivery, may process data in other countries, including the United States. Where personal data leaves the UK, we rely on UK adequacy regulations, including the UK Extension to the EU-US Data Privacy Framework where it applies. Otherwise we use the UK International Data Transfer Agreement or Addendum.
We hold Cyber Essentials Plus certification (2026, via CyberSmart), and our controls follow that standard. They include:
- encryption in transit (HTTPS) on both websites
- multi-factor authentication and least-privilege access to company systems
- managed, patched devices with malware protection
- access to personal data limited to staff who need it
06How long we keep it
| Record | Retention period |
|---|---|
| Enquiries that don't lead to an engagement | Up to 24 months from our last contact with you, then deleted |
| Client and supplier records, contracts and correspondence | The length of the relationship plus 6 years, in line with limitation periods |
| Accounting and tax records | 6 years from the end of the financial year they relate to |
| Server and security logs | Short periods set by our hosting provider, normally no more than 90 days |
We may keep data for longer if we need it to establish, exercise or defend a legal claim.
07Your rights
Under the UK GDPR and the Data Protection Act 2018 you have the right to:
- access: get a copy of the personal data we hold about you
- rectification: have inaccurate or incomplete data corrected
- erasure: have your data deleted where there is no good reason for us to keep it
- restriction: ask us to limit how we use your data
- objection: object to processing based on legitimate interests, and to direct marketing at any time
- data portability: receive data you gave us in a machine-readable format, where processing is based on consent or contract
- withdraw consent at any time, where we rely on consent
To use any of these rights, email hello@itsxassure.com. Using them is free. We will reply within one month, and we may need to confirm your identity first.
Complaints. If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint, or by phone on 0303 123 1113.
08Cookies and similar technologies
Neither website sets its own cookies, and we don't use advertising, analytics or tracking cookies. We don't store anything on your device to identify you or follow you between websites.
Third-party content delivery networks may set their own cookies or record standard request information when your browser loads fonts or components from them. Their own privacy policies cover this.
If we introduce analytical cookies, we will ask for your consent through a cookie banner before setting them, and we will update this section.
09Other information
Children. Our websites and services are for businesses and aren't directed at children. We don't knowingly collect data from anyone under 18.
Links. Our websites link to other sites, such as vendor and partner pages. We aren't responsible for their privacy practices.
Changes. We may update this policy from time to time. The date at the top of the page shows when it last changed.
See also our Terms of Service.