Privacy notice

This portal is run by Lighthouse IT to help our clients keep the records needed for Cyber Essentials certification.

What we hold

Your name, work email address, job role and organisation; records of your sign-ins and the changes you make; and the security information your organisation records here (for example devices, approvals and login details).

Why

To provide IT security and compliance services to your organisation under our contract with them, and to keep an audit trail that shows who approved what and when.

Where it's kept

On Lighthouse IT's own server in the UK. Stored passwords are encrypted. Backups are encrypted and copied to a secure off-site location. We don't sell or share your data, and we don't use it for marketing.

How long

For as long as your organisation is our client, and audit records for up to 7 years after that, unless your organisation asks us to delete them sooner.

Your rights

You can ask to see, correct or delete your personal data. Contact Lighthouse IT via www.lighthouse-it.co.uk. You can also complain to the Information Commissioner's Office (ico.org.uk).