1. Purpose

​

This policy outlines the approach taken by F&R Business Support Limited (“the Company”) to protect systems, data, and information from cyber security risks.

​

2. Scope

​

This policy applies to all systems, devices, and data used in connection with the provision of the Company’s services.

​

3. Security Approach

​

The Company implements appropriate technical and organisational measures, proportionate to its size and nature of operations, to protect against unauthorised access, loss, or misuse of data.

​

4. Access Control

​

• Access to systems and data is restricted to authorised personnel only

• Access is granted based on business need

• Access credentials must be kept secure and not shared

​

5. System & Device Security

​

• Systems and devices used for service delivery are maintained in a secure manner

• Reasonable measures are taken to protect against unauthorised access, malware, and cyber threats

​

6. Data Protection

​

• Data is handled in accordance with the Company’s Data Protection Policy and applicable data protection laws

• Personal data is processed only as required for service delivery

​

7. Incident Management

​

In the event of a suspected or actual cyber security incident, the Company shall:

​

• Take appropriate steps to contain and assess the issue

• Implement remedial actions as necessary

• Notify affected parties where required under applicable law

​

8. Third-Party Systems

​

The Company may rely on third-party systems and providers. While reasonable care is taken in their selection, the Company is not responsible for failures or vulnerabilities arising from such systems.

​

9. Continuous Improvement

​

The Company reviews its cyber security practices periodically and updates them where appropriate.

​

10. Limitation & Hierarchy

​

Nothing in this policy creates any additional contractual or legal obligations beyond those set out in the Company’s Terms & Conditions of Service.

​

This policy shall be read in conjunction with the Company’s Terms & Conditions, Data Protection Policy, and Information Security Policy. In the event of any conflict, the Terms & Conditions shall prevail.