Privacy & cookies
Contact details
Risk Coalition Research Company Limited
86-90 Paul Street, London, EC2A 4NE
Company No. 11689529 registered in England & Wales.
VAT registration: 311 7505 37
Website ownership
This website is owned and operated by the Risk Coalition Research Company Limited (RCRC) which is a not for profit company limited by guarantee which provides services to the Risk Coalition. The Risk Coalition is a loose affiliation of primarily professional membership organisations with an interest in improving the quality of risk governance, oversight and management within the UK.
This privacy policy sets out how RCRC uses and protects any information that you give us when you use this web site. We are committed to ensuring that your privacy is protected.
Use of cookies
This web site uses cookies to enable the site to operate effectively and to analyse visitor traffic flows and usage and for no other purpose. By using this website, you agree to our use of cookies.
Here is a list of all the cookies we might use: https://support.squarespace.com/hc/en-us/articles/360001264507
Our contact details
Should you have any query concerning how Risk Coalition Research Company Limited (“RCRC” or “we”) process your personal information then please send an email to team@riskcoalition.org.uk or use the contact form on this website.
RCRC is registered with the Information Commissioner’s Office as a Data Controller, Registration number ZA533626.
What type of information we have
This website collects information you provide from completed contact forms. We need the personal information you provide to respond to your enquiry.
The website provides access to RCRC’s GABI (Gap Analysis and Benchmarking Insights) service for subscribers to this service. RCRC needs this information to fulfil its contractual obligation for the provision of the services that have been purchased and for a customer to have access to maintain the information stored by RCRC.
Payments for the GABI service are transacted via Shopify. When you visit or make a purchase from risk-coalition.myshopify.com (the “Site”), the privacy policy which can be found here describes how your personal information in relation to your purchase transaction is collected, used, and shared.
How we get the information, why we do, we have it to
Personal information provided by you is used to:
respond to an enquiry made using the Contact Form, and
to activate and maintain the services that you have purchased
to be able to benchmark certain data in comparison to others, using anonymous numeric data
for administration purposes, to notify you about any changes to the services that we provide to you. (For example, approaching expiration of the service, your option to renew, or to notify changes to the service following software updates.)
RCRC will never sell your personal information. We will only share your personal information with another party that is directly involved in the provision of the services we provide to you under our contract with you.
RCRC contracts with Ipitsi Limited (a Data Processor) for the processing services we provide you as our customer. The activation and maintenance of access to the processing services provided by Ipitsi require RCRC to share a person’s email address with Ipitsi. The upload of personal information to Ipitsi is controlled by RCRC. If RCRC escalates a technical issue with Ipitsi it may require Ipitsi to have access to some personal information, usually confined to a person’s email address.
What we do with the information
The primary use of personal information you provide is to provision the services that RCRC is under contract to provide you.
How we store your information
Information is stored electronically and, for security, it is encrypted in transit and at rest.
How to complain to RCRC
You can contact RCRC at team@riskcoalition.org.uk.
What type of information we have
We currently collect and process personal identifiers, contacts and characteristics (for example, name and contact details, e.g. email address).
How we get the information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
to enable RCRC to provide services under a contract with you.
to provide support and other assistance that you require in the use of RCRC services.
We also receive personal information, indirectly, from Companies House website for publicly available information about registered companies.
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are where we have a contractual obligation.
What we do with the information we have
We use the information that you have given us in order to provide access to RCRC services and to contact you (e.g. email, telephone, online conferencing services) when you require assistance using our services. We may need to share information with Ipitsi Limited as described above.
How we store your information
We use Amazon Web Services with facilities in the Republic of Ireland and Germany for the storing and processing of personal information.
For our customers of RCRC services we keep personal information in accordance with our Terms and Conditions that are available on our website at www.riskcoalition.org.uk/subscribe-to-gabi.
Your data protection rights
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances.
Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at team@riskcoalition.org.uk with ‘Subject Access Request’ prominent in the email heading if you wish to make a request.
How to complain
You can also complain to the ICO if you are unhappy with how we have used your data. The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113