Assurex Privacy Policy

This privacy policy applies between you, the User of this Website, and Assurex Limited, the owner and provider of this Website. Assurex Limited takes the privacy of your information very seriously.
This privacy policy applies to our use of any and all Data collected by us or provided by you in relation to your use of the Website.

Please read this privacy policy carefully

Definitions and interpretation

1. In this privacy policy, the following definitions are used:
   1. Data
      collectively all information that you submit to Assurex Limited via the Website. This definition incorporates, where applicable, the definitions provided in the Data Protection Laws;
   2. Cookies
      a small text file placed on your computer by this Website when you visit certain parts of the Website and/or when you use certain features of the Website. Details of the cookies used by this Website are set out in the clause below (Cookies);
   3. Data Protection Laws
      the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (as amended), and any successor or amending legislation;
   4. UK GDPR
      Regulation (EU) 2016/679 as it forms part of the law of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018;
   5. Assurex Limited, we, us or our
      Assurex Limited, a company incorporated in England and Wales with registered number 11888214 whose registered office is at International House, 24 Holborn Viaduct, London EC1A 2BN;
   6. User or you
      any third party that accesses the Website and is not either (i) employed by Assurex Limited and acting in the course of their employment or (ii) engaged as a consultant or otherwise providing services to Assurex Limited and accessing the Website in connection with the provision of such services; and
   7. Website
      the website that you are currently using, assurex.co or assurex.co.uk, and any sub-domains of this site unless expressly excluded by their own terms and conditions.

2. In this privacy policy, unless the context requires a different interpretation:

• the singular includes the plural and vice versa;
• references to sub-clauses, clauses, schedules or appendices are to sub-clauses, clauses, schedules or appendices of this privacy policy;
• a reference to a person includes firms, companies, government entities, trusts and partnerships;
• “including” is understood to mean “including without limitation”;
• reference to any statutory provision includes any modification or amendment of it;
• the headings and sub-headings do not form part of this privacy policy.

Scope of this privacy policy

3. This privacy policy applies to personal Data we collect through this Website. It does not extend to:

• any websites that can be accessed from this Website, including any links we may provide to social media websites or partner sites. We have no control over those websites and are not responsible for their content or privacy practices;
• personal Data we process on behalf of our clients in the course of delivering professional services. In those circumstances we generally act as a processor rather than a controller, and processing is governed by the data processing agreement in place with the client concerned;
• recruitment Data, which is covered by the candidate privacy notice supplied at the point of application.

4. For purposes of the applicable Data Protection Laws, Assurex Limited is the “data controller”. This means that Assurex Limited determines the purposes for which, and the manner in which, your Data is processed.

Data collected

5. We may collect the following Data, which includes personal Data, from you:

• name;
• job title, employer and professional role;
• business contact information such as email addresses, telephone numbers and postal addresses;
• the content of any enquiry, message or document you send us;
• information you provide when subscribing to updates or registering for an event;
• payment details, where you transact with us;
• IP address (automatically collected);
• web browser type and version (automatically collected);
• operating system and device type (automatically collected);
• a list of URLs starting with a referring site, your activity on this Website, and the site you exit to (automatically collected);
• cookie identifiers, subject to your consent preferences (automatically collected);

in each case, in accordance with this privacy policy.

6. We do not knowingly collect special category Data (such as Data revealing health, biometric information, racial or ethnic origin, political opinions, religious beliefs or trade union membership) through this Website. Please do not submit such information to us through the Website.

7. We do not knowingly collect personal Data from anyone under the age of 18. If you believe a child has provided us with personal Data, please contact us at info@assurex.co and we will delete it.

How we collect Data

8. We collect Data in the following ways:

• data is given to us by you; and
• data is collected automatically.

Data that is given to us by you

9. Assurex Limited will collect your Data in a number of ways, for example:

• when you contact us through the Website, by telephone, post, e-mail or through any other means;
• when you register with us and set up an account to receive our products/services;
• when you complete surveys that we use for research purposes (although you are not obliged to respond to them);
• when you make payments to us, through this Website or otherwise;
• when you use our services;

in each case, in accordance with this privacy policy.

Data that is collected automatically

10. To the extent that you access the Website, we will collect your Data automatically, for example:

1. we automatically collect some information about your visit to the Website. This information helps us to make improvements to Website content and navigation, and includes your IP address, the date, times and frequency with which you access the Website and the way you use and interact with its content;
2. we will collect your Data automatically via cookies, in line with the cookie settings on your browser and the consent preferences you have given. For more information about cookies, and how we use them on the Website, see the section below headed “Cookies”.

Our use of Data, and our lawful basis

11. We process personal Data only where we have a lawful basis for doing so. Specifically, Data may be used by us for the following purposes:

1. Responding to enquiries submitted through the Website or otherwise directed to us. Lawful basis: our legitimate interests in responding to a request directed to us, or taking steps at your request prior to entering into a contract.
2. Providing services and managing the client relationship, including correspondence, project delivery and invoicing. Lawful basis: performance of a contract between you and us.
3. Sending marketing communications about our services, insights and events. Lawful basis: your consent, or our legitimate interests where you are an existing business contact and have not objected.
4. Operating, securing and improving the Website, including network and information security. Lawful basis: our legitimate interests.
5. Website analytics and measurement. Lawful basis: your consent, given through our cookie consent banner.
6. Meeting our legal, regulatory, tax and accounting obligations. Lawful basis: compliance with a legal obligation.
7. Establishing, exercising or defending legal claims. Lawful basis: our legitimate interests, or compliance with a legal obligation.
8. Internal record keeping. Lawful basis: our legitimate interests.

12. Where we rely on legitimate interests, we have assessed that those interests are not overridden by your rights and freedoms. If you are not satisfied with this, you have the right to object in certain circumstances (see the section headed “Your rights” below).

13. Where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of any processing carried out before you withdrew it.

14. We do not carry out automated decision-making that produces legal or similarly significant effects concerning you.

Where your Data is held

15. Personal Data collected through this Website is stored on servers located in the United Kingdom. We do not routinely transfer personal Data collected through this Website outside the UK for storage.

16. Assurex operates delivery offices in Dubai, Delhi NCR and Delaware. Where a member of our personnel outside the UK requires access to personal Data in order to respond to your enquiry or deliver services to you, that access is treated as a restricted transfer under the Data Protection Laws and is safeguarded by:

1. an intra-group data transfer agreement incorporating the UK International Data Transfer Agreement (IDTA), or the EU Standard Contractual Clauses together with the UK Addendum, as applicable; and
2. technical and organisational controls including role-based access, access logging and least-privilege provisioning.

17. We carry out a transfer risk assessment before permitting such access, and review those assessments periodically. You may request a copy of the relevant safeguards by contacting info@assurex.co.

Who we share Data with

18. We may share your Data with the following groups of people for the following reasons:

1. our employees, agents and group companies – to respond to your request and deliver our services, subject to the safeguards described above;
2. our professional advisers, including lawyers, accountants, auditors and insurers – where necessary and under a duty of confidentiality;
3. third party payment providers who process payments made over the Website – to enable those providers to process payments and refunds. We do not store payment card details ourselves;
4. regulators, law enforcement agencies or courts – where we are required to do so by law, or where disclosure is necessary to establish, exercise or defend legal claims;

in each case, in accordance with this privacy policy.

19. We use a small number of service providers who process personal Data on our instructions, under written contracts meeting the requirements of Article 28 of the UK GDPR. These currently include providers of website hosting, transactional email delivery, website analytics, image optimisation, cookie consent management and contact management. A current list of these providers is available on request from info@assurex.co.

20. We do not sell personal Data, and we do not share it with third parties for their own marketing purposes.

Keeping Data secure

21. We use technical and organisational measures appropriate to the risk to safeguard your Data, including:

1. encryption of Data in transit and at rest;
2. role-based access control and least-privilege provisioning;
3. multi-factor authentication on administrative systems;
4. access logging and monitoring;
5. regular patching and vulnerability management;
6. staff training on data protection and information security;
7. documented incident response procedures.

22. No transmission over the internet can be guaranteed completely secure. If you suspect any misuse or loss of, or unauthorised access to, your Data, please let us know immediately by contacting us at info@assurex.co.

23. Where a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner’s Office within 72 hours of becoming aware of it, and will notify you directly where the risk to you is high.

24. If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.

Data retention

25. We retain personal Data only for as long as necessary for the purposes set out in this privacy policy. Our standard retention periods are:

1. Website enquiries that do not lead to a business relationship – 24 months from last contact;
2. client records and correspondence – 7 years from the end of the relationship, reflecting limitation and tax requirements;
3. marketing contact records – until you unsubscribe or object, and reviewed every 24 months;
4. website analytics data – 14 months;
5. server and security logs – 12 months.

26. These periods may be extended where a longer retention period is required or permitted by law, or where the Data is relevant to an actual or anticipated legal claim.

27. Even after we delete your Data from live systems, it may persist on secure backup or archival media for a limited period before being overwritten.

Your rights

28. You have the following rights in relation to your Data:

1. Right to be informed – the right to be told how we use your Data. This privacy policy serves that purpose.
2. Right of access – the right to request copies of the information we hold about you at any time. We will not charge you for this, unless your request is “manifestly unfounded or excessive.” Where we are legally permitted to do so, we may refuse your request. If we refuse your request, we will tell you the reasons why.
3. Right to rectification – the right to have your Data corrected if it is inaccurate or incomplete.
4. Right to erasure – the right to request that we delete or remove your Data from our systems, in certain circumstances.
5. Right to restrict our use of your Data – the right to “block” us from using your Data or limit the way in which we can use it, in certain circumstances.
6. Right to data portability – the right to receive Data you provided to us in a structured, commonly used and machine-readable format, and to have it transmitted to another controller where technically feasible.
7. Right to object – the right to object to our use of your Data where we rely on legitimate interests, and to object at any time to processing for direct marketing purposes.
8. Right to withdraw consent – the right to withdraw your consent at any time, where consent is our lawful basis for processing.

29. To make enquiries, exercise any of your rights set out above, or withdraw your consent to the processing of your Data, please contact us at info@assurex.co.

30. We will respond to your request within one month. That period may be extended by up to two further months where a request is complex or where we have received a number of requests from you, in which case we will tell you within the first month and explain why. We may ask you to verify your identity before acting on a request.

31. If you are not satisfied with the way a complaint you make in relation to your Data is handled by us, you may refer your complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection. The ICO can be contacted at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, by telephone on 0303 123 1113, or through their website at https://ico.org.uk/.

32. It is important that the Data we hold about you is accurate and current. Please keep us informed if your Data changes during the period for which we hold it.

Links to other websites

33. This Website may, from time to time, provide links to other websites. We have no control over such websites and are not responsible for the content of these websites. This privacy policy does not extend to your use of such websites. You are advised to read the privacy policy or statement of other websites prior to using them.

Changes of business ownership and control

34. Assurex Limited may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of Assurex Limited. Data provided by Users will, where it is relevant to any part of our business so transferred, be transferred along with that part, and the new owner or newly controlling party will be permitted to use the Data for the purposes for which it was originally supplied to us, under terms no less protective than those in this privacy policy.

35. We may also disclose Data to a prospective purchaser of our business or any part of it.

36. In the above instances, we will take steps with the aim of ensuring your privacy is protected.

Cookies

37. This Website may place and access certain Cookies on your computer. Assurex Limited uses Cookies to improve your experience of using the Website and to improve our range of services. Assurex Limited has carefully chosen these Cookies and has taken steps to ensure that your privacy is protected and respected at all times.

38. All Cookies used by this Website are used in accordance with the Privacy and Electronic Communications Regulations 2003 (as amended) and the UK GDPR.

39. Before the Website places non-essential Cookies on your computer, you will be presented with a consent banner requesting your permission. You may, if you wish, deny consent to the placing of Cookies; however certain features of the Website may not function fully or as intended. You may change or withdraw your preferences at any time using the consent controls on the Website.

40. You can find a list of Cookies that we use, together with their purpose and duration, in our detailed Cookie Policy.

41. You can choose to enable or disable Cookies in your internet browser. By default, most internet browsers accept Cookies but this can be changed. For further details, please consult the help menu in your internet browser.

42. You can choose to delete Cookies at any time; however, you may lose any information that enables you to access the Website more quickly and efficiently including, but not limited to, personalisation settings.

43. It is recommended that you ensure that your internet browser is up to date and that you consult the help and guidance provided by the developer of your internet browser if you are unsure about adjusting your privacy settings.

44. For more information generally on cookies, including how to disable them, please refer to aboutcookies.org. You will also find details on how to delete cookies from your computer.

General

45. You may not transfer any of your rights under this privacy policy to any other person. We may transfer our rights under this privacy policy where we reasonably believe your rights will not be affected.

46. If any court or competent authority finds that any provision of this privacy policy (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this privacy policy will not be affected.

47. Unless otherwise agreed, no delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.

48. This privacy policy will be governed by and interpreted according to the law of England and Wales. All disputes arising under it will be subject to the exclusive jurisdiction of the English and Welsh courts.

Changes to this privacy policy

49. Assurex Limited reserves the right to change this privacy policy as we may deem necessary from time to time or as may be required by law. Any changes will be immediately posted on the Website and you are deemed to have accepted the terms of the privacy policy on your first use of the Website following the alterations. Where changes are material, we will take reasonable steps to bring them to your attention.

Contact us

50. You may contact Assurex Limited about this privacy policy or about your Data by email at info@assurex.co, or for general enquiries at info@assurex.co.

Assurex Limited, International House, 24 Holborn Viaduct, London EC1A 2BN. Registered in England and Wales, company number 11888214.

Cookies

Please see our Cookie Policy for details on how we manage Cookies on the website and how you can opt in or out.

Updated on 18 August 2026