Privacy Policy
Last updated: 10 October 2026
1. Who we are
360comply (360comply Ltd, registered in England & Wales, company no. 17495169) provides a compliance management platform for UK small and medium-sized businesses. For any privacy questions or requests, contact us using the details on our Contact page.
2. What data we collect
We collect the account details you provide (name, email address), your organisation's compliance records (sites, employees, risk assessments, incidents, training and certificates), and standard technical data such as login activity. Payment is handled by our payment provider; we never see or store your full card details.
3. Why we use it (lawful bases)
We process your data to provide the service you signed up for (contract), to send service notifications such as expiry reminders (contract / legitimate interests), to keep the platform secure (legitimate interests), and to comply with legal obligations. Employee records you add may include special category data (for example health information in incident or first aid records) — you are the controller of that data and are responsible for having a lawful basis for adding it.
4. Who we share it with
We share data only with the service providers needed to run the platform: our hosting and database provider, our payment provider, and our email delivery provider. We never sell your data. Data may be processed outside the UK only where adequate safeguards are in place.
5. How long we keep it
We keep your organisation's records for as long as your account is active. If you close your account, records are deleted or anonymised within 90 days, unless we must keep them longer for legal reasons (for example, accident records have statutory retention periods you should observe on your side).
6. Your rights
You have the right to access, correct, export and delete your personal data, and to object to or restrict certain processing. You can exercise these rights via your account settings or by contacting us. You also have the right to complain to the Information Commissioner's Office (ICO).
7. Security
Your data is stored securely with encryption in transit and at rest, strict access controls, and tenant-level isolation so no organisation can see another's records.
8. Cookies
We use only essential cookies needed to keep you logged in and the platform working. We do not use advertising or tracking cookies.