Security Policy
Effective Date: 24 March 2026
Our Commitment
Precise Impact Ltd takes the security of your personal data seriously. This policy describes the technical and organisational measures we apply.
Technical Measures
- Encryption in transit: All data is transmitted over HTTPS (TLS 1.2 minimum)
- Encryption at rest: Database and storage encryption on Railway.com infrastructure
- Access control: Role-based access controls; production credentials are not shared
- Authentication: Strong password requirements and two-factor authentication for admin access
- Session management: Secure HTTP-only session cookies with appropriate timeouts
Organisational Measures
- Access to personal data is limited to authorised personnel only
- We review security practices regularly and update them as needed
- Third-party processors are vetted and subject to data processing agreements
Incident Response
In the event of a data breach that poses a risk to individuals, we will notify the ICO within 72 hours and affected individuals without undue delay, as required by UK GDPR.
Responsible Disclosure
If you discover a security vulnerability, please contact us privately through our website before public disclosure. We will investigate promptly and keep you informed.