Privacy policy

Infopoint Limited (“The Company, We and Us”) are committed to protecting and respecting your privacy.

This privacy policy (together with our terms and conditions and any other documents referred to on it) sets out the basis on which any personal data we collect from “You”, or that you provide to us, will be processed by us.

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting www.infopoint.org.uk you are accepting and consenting to the practices described in this policy. This website is maintained by Infopoint Limited , hitherto “The Company, We and Us”. A company registered in England – Company Number 3977080 – VAT No 846 8942 71

Any personal data you volunteer will be used for the purpose for which you supply it and will be treated with the highest standards of security and confidentiality, strictly in accordance with data protection principles. It will only be shared, where you have given consent.

This statement relates to our privacy practices in connection with this website. Some technical terms used in this statement are explained at the end of this page.

What is “personal data”?

Personal data means data relating to a person who is or can be identified either from the data itself or in conjunction with other information that is in, or is likely to come into, the possession of The Company. It covers any information that relates to an identifiable, living individual. This data can be held on computers or in manual files.

Data Controller

A “data controller” means a person who, either alone or with others, controls the contents and use of personal data.

The Data Controller for Infopoint Limited is Infopoint Limited, 9 Journey Campus, Castle Park, Cambridge CB3 0AX, email dpo@infopoint.org.uk

Phone Number: +44 1223 420020

The Company’s obligations

Infopoint Limited has obligations to ensure that:

• Data must be obtained and processed fairly.
• Data must be accurate, complete and where necessary, kept up to date.
• Data must have been obtained only for one or more specified, explicit and legitimate purpose.
• Data must not be further processed in a manner incompatible with that purpose.
• Data must be adequate, relevant and not excessive in relation to the purpose for which they were collected or are further processed.
• Data must not be kept for longer than is necessary for that purpose.
• Appropriate security measures must be taken against unauthorised access to, or unauthorised alteration, disclosure or destruction of the data, where the processing involves the transmission of data over a network. The same measures must be taken against all other unlawful forms of processing.
• The Company employs the most appropriate physical and technical measures, including staff training and awareness and these are reviewed regularly.
• The Company takes its obligations very seriously and adopts the strongest line in relation to the misuse of customer information by any of its staff. Staff, past and present commit to Confidentiality Agreements.
• Any breach of trust regarding the confidentiality of information is treated as serious misconduct under Infopoint Limited’s Staff Disciplinary clauses contained within individual Contracts of Employment and can lead to sanctions up to and including dismissal. Evidence of breach of confidentiality, or transfer of data by past members of staff where proven, will also be taken seriously and solutions sought through legal process.

Collection and use of personal information

Be assured that this website does not collect any personal data, apart from information that you volunteer (for example, when filling a form) and your IP address. Any information you provide in this way is used only for the purpose for which you provide it. The purpose is communicated clearly on any forms, for example, currently these purposes can include

• Enquiring about the services and products Infopoint Limited provides.

Website Security

This website is hosted in a Data Centre in the UK. Website hosting services supplied to The Company are provided by a trusted UK partner, with comprehensive GDPR policies and procedures in place.

Please note Infopoint Limited uses a Dedicated Server, to deliver this website. Only Infopoint Limited customer websites or email accounts exist on that server. Furthermore, only skilled Infopoint Limited website development staff have access to the server to control the configuration and resource of the Infopoint Limited website. The website uses an “SSL Certificate” meaning that any data visitors provide is encrypted.

Despite these features, you should be aware that unfortunately, the transmission of information via the internet is not completely secure. Although we do our very best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once your information has been transmitted, please be assured that we use the strict procedures and security features above to try to prevent unauthorised access.

Disclosure

Infopoint Limited enables users to view and digest information about its provided online services in a safe and secure manner.

Right of Access

You have a right to be given a copy of your held personal data. This subject access request (SAR) must be in writing through to the Data Controller. Your request should be as specific as possible. To enable us to issue the Data, it will be necessary for you to include evidence of your own identity such as a photocopy of your passport or photocopy of your driving license. Any access request will be subject to a fee of £10 to meet our costs in providing you with details of the information we hold about you. A response to your access request will be issued to you as soon as is possible and in any event within fourteen days.

Right of rectification

You have a right to have your personal data corrected, if inaccurate, or erased, if there is not a legitimate reason for retaining the data. Infopoint Limited makes every effort to ensure that your personal data is accurate and only retained for as long as it is required. If you have reason to believe that your personal data held by Infopoint Limited is not accurate or should no longer be retained, you can write to us on the issue setting out clearly what personal data is at issue and the reasons why you consider it to be inaccurate and/or why The Company should no longer retain it.

Concerns over Data Protection

If you believe that an individual or third party has accessed your personal information illegally and/or that your personal data may have been disclosed to a third party illegally by Infopoint Limited you can make a formal written complaint to:

Private and Confidential – the Data Protection Officer, Infopoint Limited, 9 Journey Campus, Castle Park, Cambridge CB3 0AX, or dpo@infopoint.org.uk.

Please specify the exact data and include as much evidence that has led you to believe that your personal information has been accessed illegally through a disclosure by The Company. The matter will be investigated by The Company and you will be notified regarding the outcome of the investigation as soon as possible.

Information we routinely collect

Our website collects the following information none of which can be traced back to any personal identifiable individuals.

• Standard web server log entries: browser version, the pages requested and the date and time of each request. These are written by the hosting server, not by analytics software. We do not run analytics on this website.
• The previous website address from which visits reached us, where your browser supplies it.
• IP addresses for the purposes of website security and safety.

Cookies

Cookies are small pieces of information, stored in simple text files, placed on your computer by a website. Some cookies can be read by the website on your subsequent visits. The information stored in a cookie may relate to your browsing habits on the webpage, or a unique identification number so that the website can ‘remember’ you on your return visit. Other cookies are deleted when you close your browser and only relate to the working of the website. Generally speaking, cookies do not contain personal information from which you can be identified, unless you have furnished such information to the website. Cookies help us to provide you with a good experience when you browse our website and also allows us to improve our site

This website sets a single cookie. It is written only once you answer the message shown on your first visit. It records whether you accepted or refused so that you are not asked again and it expires after a year. Our cookie policy names it in full.

• When you first visit this website, you will see a message asking whether you accept cookies. Accepting and refusing carry equal weight. Every page works either way.
• Cookie sessions can be removed by clearing your browsing history. To change an answer you have already given, clear this site’s cookies and the message will appear again on your next visit
• We do not run analytics, advertising or tracking cookies on this website. If that changes, our cookie policy will name what we use before it goes live. It will load only for visitors who have accepted.

Most browsers allow you to turn off Cookies or to customise your settings for cookies. To find out how to do this, see the ‘Help’ menu on your browser. Please note that if you turn off cookies or change your settings, some features on the website for Infopoint Limited may not work correctly.

If you are concerned about how personal data is processed via this website, please contact us by email using the following address dpo@infopoint.org.uk – Please mark your email as Private and confidential.

Links

This website may contain links to other websites. Infopoint Limited is not responsible for the content of these sites or for the privacy statements of other websites. Please check their policies before you submit any personal data to these websites.

Notification of Change

The Company, InfopointLimited, reserves the right to amend this statement at any future date and will post any substantive changes here. Please check back frequently to see any updates or changes to our privacy policy

This privacy policy together with our terms and conditions, constitute the entire agreement between you and us in relation to your use of our website and supersede all previous agreements in respect of your use of this website.

Glossary of technical terms used

1 Web Browser

A web browser is the piece of software you use to read web pages. Examples are Microsoft Internet Explorer, Chrome, Safari, Mozilla Firefox and Opera.

2 IP Address

The moment a computer connects to the Internet an IP address is created that can help your internet service provider identify the user. For most users the IP address will change regularly and no personally identifiable information is accessible to Infopoint Limited. Occasionally an IP address can provide useful general information such as the country of origin – this can aid Infopoint Limited in managing attempts to breach the security of our website.

3 Dedicated Server

A Dedicated Server is dedicated to one Company so that only their customer websites or email accounts exist on that server.

4 SSL Certificate

The Infopoint Limited website uses an SSL Certificate. SSL stands for Secure Sockets Layer. An SSL Certificate creates a secure connection between visitors and the website. The specific details a visitor completes via an enquiry form is encrypted and kept secure from hackers.

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to Mark Forton, Infopoint Limited, 9 Journey Campus, Castle Park, Cambridge CB3 0AX, email dpo@infopoint.org.uk

Last updated 9 September 2026