How we protect your data

What is the ‘data’ journey?

We are committed to ensuring that your information is secure. We use leading technologies and encryption software to safeguard your data, and maintain strict security standards to prevent any unauthorised access to it. However, given that transmitting information over the internet cannot be completely secure, we cannot guarantee the security of your data in transit.

The CRN Finance Tool is hosted on behalf of the CRNCC by Audacia Consulting Limited on the Microsoft Azure cloud platform from a UK-based data centre which provides for disaster recovery processes across its servers. None of the data contained within the CRN Finance Tool will go outside the UK or the EEA.

We will not sell your personal data. We will not disclose your personal data to third parties outside of the CRNCC, unless we have your explicit permission, or are required by law to do so.

We will hold the data for as long as we are providing you services and for as long as you agree to this. We will retain your data for as long as we are contractually obligated to do so by our Contract with DHSC or until such time as the CRN Finance Tool is decommissioned:

• We only store data that is necessary for a specific purpose

• We will not store your data for longer than is necessary

• Your data will be securely deleted when no longer needed for the purpose(s).

Destruction of Data

When a disc drive fails or is no longer required for use, this is securely destroyed in accordance with ISO27001 security standards.

Your data will not be deleted from the CRN Finance Tool in line with financial auditing requirements.

No paper records are kept of personal confidential data.