Information security statement

RP Alba Ltd recognises the importance of protecting information and maintaining the confidentiality, integrity and availability of data entrusted to the company. This statement outlines our approach to information security and data protection in a manner that is proportionate to the size and nature of our business.

Scope and principles

RP Alba Ltd processes information relating to clients, suppliers and business operations, including personal data and commercially sensitive information. We are committed to handling information responsibly and in accordance with applicable UK legislation and recognised good practice. Our information security approach is based on the following principles:

• Information is accessed only by authorised persons
• Information is protected against unauthorised access, loss or misuse
• Information is retained only for as long as necessary
• Information is handled in a manner appropriate to its sensitivity

Data protection and GDPR

RP Alba Ltd complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Personal data is processed lawfully, fairly and transparently and only for specified, legitimate purposes.Further details on how personal data is handled, including individual rights, are provided in the RP Alba Ltd Privacy Notice.

Information security measures

Information security measures implemented by RP Alba Ltd include, where appropriate:

• Use of secure, reputable IT systems and service providers
• Password protection and access controls
• Secure handling and storage of electronic and paper records
• Use of encrypted or secure portals for document exchange where appropriate
• Regular review of systems and working practices

Cyber security and assurance

RP Alba Ltd is not currently certified to ISO/IEC 27001 or Cyber Essentials. However, information security risks are considered as part of business planning and operational decision-making, and proportionate controls are applied based on the nature of the information processed.

Third-party services and cloud platforms

RP Alba Ltd uses reputable third-party service providers to support business operations, including secure cloud-based platforms for document management, communications, training delivery and accounting. Supplier selection considers security, reliability and suitability for purpose.

Review and continual improvement

This Information Security Statement is reviewed periodically and updated as appropriate to reflect changes in legislation, guidance, technology or business activities.