Privacy Policy
Internet Erasure Ltd (Henceforth IE), Company Registration Number 13916446 is registered with the Information Commissioner's Officer under registration number ZB325928. 

Joy Martin is our Data Protection Officer and can be contacted by email to [email protected]

IE collects, processes and stores personal data for the deindexation of search engine links and removal of articles from the internet as well as accounting purposes, legal compliance, industry research and to improve processes.

​Subject to your consent (which will form the lawful basis for processing your data), IE will process your personal data, which is likely to include sensitive information, including, but not limited to, contact details, previous names where applicable (and where solely related to the removal of damaging content from the internet), past and current employment, past life events, including criminal convictions and other reported events. Any information, comments or quotes provided to IE for any purpose may be used for research, training and marketing subject to all identifying information being removed.

Documentation and evidence, including but not limited to, copies of identification documents, criminal records, certificates of conviction or acquittal, evidence of employment or self-employment, statutory declarations, police reports, supporting letters from charities and agencies, harassment warning or other notices served, and other documents or material which you have provided to IE or which IE have obtained with your authority and in the course of our work, will be permanently deleted from our systems once our work on your behalf is finished.

Your general personal information will not be retained by IE for any longer than is necessary to ensure that it doesn't become inaccurate, out of date or irrelevant. Data will generally be retained for 6 years after our last communication. You have the Right to Erasure and can ask at any time for your data to be deleted, for no further contact and for data processing to stop by sending a request by email to [email protected], or by post to Suite 5, 5th Floor City Reach, 5 Greenwich View Place, London E14 9NN. After you have withdrawn consent or requested erasure, IE will only retain data which may be necessary for compliance with our legal obligations.

You have the Right to Access your personal information and can do so by making a written Subject Access Request to IE, by email to [email protected], or by post to Suite 5, 5th Floor City Reach, 5 Greenwich View Place, London E14 9NN. Subject Access Requests are fulfilled within 28days in accordance with UK GDPR
​
If you consider that your information has been handled incorrectly, you can obtain independent advice about data protection from The Information Commissioner's Office, Wycliffe House, Water Lane, Winslow. SK9 5AF. Tel: 0303 123 1113 www.ico.org.uk

Security and Encryption
Overview of the security and encryption measures currently implemented in our Case Management System (CMS), ensuring the highest standards for data confidentiality, integrity, and protection.
 
1. Data Encryption

• Encryption at Rest: All data stored in our CMS—including sensitive client records, case notes, and user credentials—is encrypted at rest. This ensures that stored data remains secure and inaccessible without proper authorization.
• Encryption in Transit: Data transferred between the user’s browser and our CMS is safeguarded through TLS encryption, protecting it from interception and ensuring its integrity during transit.

2. Authentication and Role-Based Access Control (RBAC)

• Role-Based Access Control (RBAC): Access to different areas and functionalities within the CMS is strictly role-based. With role-based access in place, each user (e.g., Caseworker or Client) has specific permissions that allow access only to relevant information.
• Password Management and Reset Functionality: Our CMS enables secure password management, with caseworkers having the ability to reset passwords within their role-based permissions, ensuring secure access for all users.

3. Audit Logging and Monitoring

• Activity Logging: Extensive logging functionality is implemented within the CMS. User activities such as logins, password resets, case updates, and any modifications are recorded, providing full traceability for data access and updates.
• Monitoring for Suspicious Activity: Logs are available for review to help detect any unusual patterns, contributing to the ongoing security monitoring within our system.

4. Data Privacy Compliance

• GDPR Compliance: Our CMS adheres to GDPR data protection requirements, especially in handling and securing client data. We prioritize transparency, allowing clients access to their active cases while ensuring no unauthorized data sharing occurs.
• Case Access and Permissions: Clients are only able to view their own cases, while caseworkers have controlled access to view and manage assigned cases. This is carefully managed to comply with data protection and privacy regulations.

5. Secure Data Backup and Availability

• Regular Data Backups: Our CMS database is backed up frequently to ensure data integrity and availability, with encrypted offsite storage as part of our disaster recovery protocol.