1. Who we are
Netru Ltd ("Netru", "we", "us", "our") is a company registered in England and Wales. We provide compliance-as-a-service to organisations seeking certification against frameworks including SOC 2, ISO 27001, GDPR, HIPAA and others.
Our registered address and data controller contact details are available on request at hello@netru.co.uk.
2. What data we collect
We collect the following categories of personal data:
- Contact information: name, email address, phone number, company name and job title when you submit an enquiry or sign up for our services.
- Usage data: IP address, browser type, pages visited and time spent on our website, collected via cookies and analytics tools.
- Communications: the content of emails, messages or other correspondence you send to us.
- Service data: information you provide during the delivery of our compliance services, which may include business documentation and security information.
3. How we use your data
We use your personal data to:
- Respond to enquiries and provide our compliance services
- Send you relevant updates, resources and communications (where you have consented)
- Improve our website and services through analytics
- Meet our legal and regulatory obligations
- Manage our business relationship with you
4. Legal basis for processing
We process your personal data on the following legal bases under UK GDPR:
- Contract: where processing is necessary to perform a contract with you or take steps at your request before entering into a contract.
- Legitimate interests: where we have a legitimate business interest in processing your data, such as improving our services or sending relevant communications to existing clients.
- Consent: where you have given us explicit consent, such as subscribing to our newsletter.
- Legal obligation: where we are required to process data to comply with a legal obligation.
5. Data sharing
We do not sell your personal data. We may share your data with:
- Our trusted service providers who assist in delivering our services (e.g. cloud hosting, CRM, email platforms), under appropriate data processing agreements
- Professional advisers including lawyers and accountants, where necessary
- Regulatory authorities or law enforcement where required by law
6. Data retention
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Client data is typically retained for 7 years following the end of a service engagement, in line with UK legal requirements. Website enquiry data is retained for up to 2 years.
7. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erasure of your data in certain circumstances
- Restrict or object to processing
- Data portability
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, please contact us at hello@netru.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. Cookies
We use cookies and similar technologies to improve your experience on our website. You can manage your cookie preferences through your browser settings. For more information, please see our Cookie Policy.
9. International transfers
Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy decisions or Standard Contractual Clauses.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or by email where appropriate.
Questions about this policy?
Contact our data protection team at hello@netru.co.uk or write to us at Netru Ltd, United Kingdom.