Privacy notice
Last updated: November 2026
Who we are
Rise Control Ltd (“Rise Control”, “we”, “us”) provides independent IT audit and assurance. We are the controller of personal data processed through risecontrol.co.uk and our enquiry channels.
| Company | Rise Control Ltd, registered in England and Wales |
|---|---|
| Company number | 11356857 |
| VAT number | GB 340 5063 38 |
| info@risecontrol.co.uk | |
| Telephone | 0161 524 9960 |
Calls to our number may be recorded and transcribed by our telephone provider so we keep accurate notes. Recordings and transcripts are kept for up to 90 days unless they become part of client work.
What we collect
- Consultation requests: your name, work email and organisation, and anything optional you add: business phone, role, organisation size, the service and timeframe you are interested in, meeting preferences and your message.
- Readiness score: the readiness check runs entirely in your browser. Your answers are never sent to us or stored. Only if you tick “share my readiness score” with a request do we receive the score and level (for example “50/100, partly ready”), never the individual answers.
- Emails and calls: what you choose to tell us when you contact us.
- Technical data: our hosting provider keeps standard server logs (IP address, browser type, pages requested and time) for security and troubleshooting. To stop spam, the form keeps a short-lived counter based on a one-way hash of your connection, which does not store your IP address and expires within an hour.
- Audit engagement data: during an engagement we may review evidence that includes limited personal data about our client’s staff, such as user and access lists. For that data our client is normally the controller and we act as its processor, under the written terms of the engagement.
We do not knowingly collect personal data from children.
How we use it and why
| Reply to your request and arrange a consultation | Steps at your request before a contract, and our legitimate interest in responding to business enquiries |
|---|---|
| Deliver and manage engagements | Contract |
| Keep the website and form secure | Legitimate interests |
| Relevant business-to-business contact | Legitimate interests, following electronic marketing rules (see below) |
| Keep records and meet legal duties | Legal obligation |
| Marketing emails to individuals | Consent, which you can withdraw at any time |
We do not make decisions about you based solely on automated processing. The readiness score is calculated in your own browser and is only an indication.
Cookies and tracking
This website does not use cookies, analytics or advertising trackers, so there is no cookie banner. Our web font is currently delivered by Google Fonts, so your browser connects to Google’s servers and shares your IP address with Google when pages load; Google Fonts does not set cookies. We intend to serve the font from our own hosting and will update this notice when we do. If we ever introduce cookies or tracking, we will ask for your consent first and update this notice.
Business-to-business contact
We may use business contact details from public professional sources, such as company websites and professional directories, to contact organisations about relevant services. We consider your reasonable expectations and follow the Privacy and Electronic Communications Regulations; where consent is required, we obtain it first.
You can object at any time by replying to the message or emailing info@risecontrol.co.uk. We will stop and keep only what we need to respect your choice.
Who we share it with
We share personal data only where necessary, with:
- IONOS: website hosting and delivery of form emails.
- Our email and office software provider: our mailboxes and documents.
- Our telephone provider: calls, recordings and transcription.
- Professional advisers, such as accountants, lawyers and insurers, where needed.
- Authorities, where the law requires it.
Our other services. BetaSec is another service of Rise Control Ltd. We only pass your details to it if you ask us to. Links from this site to other websites pass no personal data. Those sites have their own privacy notices.
Our providers handle personal data only on our instructions and must keep it secure. We do not sell personal data.
International transfers
We use providers in the UK and European Economic Area where possible. If personal data is transferred outside the UK, we make sure a lawful safeguard is in place, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
How long we keep it
| Enquiries that do not become work | 24 months from the enquiry, then deleted |
|---|---|
| Contracts, reports and invoices | 7 years after the engagement ends |
| Audit evidence | Returned or securely deleted at the end of the engagement, unless the engagement terms say otherwise |
| Spam-prevention counters | Up to one hour |
| Server logs | A limited period set by our hosting provider |
| Marketing preferences | Until you ask us to stop; we keep a record of your objection |
Your rights
Under UK data protection law you may have the right to access, correct or erase your personal data, to restrict or object to its use, to data portability, and to withdraw consent. Email info@risecontrol.co.uk; we may need to confirm your identity first and will reply within one month.
You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would, however, welcome the opportunity to resolve your concern first.
Security
We use appropriate technical and organisational measures, including access controls, multi-factor authentication, encryption and secure hosting. Please do not send passwords, personal records or confidential material through the form or by email; we will agree a secure method with you if needed.
Changes to this notice
We will publish any changes on this page and update the date at the top.