Security and data.
The answers your IT person will ask for, in plain English. If you need anything that isn't here, email help@littleridgeconnect.com and we'll answer it.
At a glance
UK only
Your contact data is stored and processed in two secure UK data centres, in Manchester and Newport.
Dedicated, not shared
The platform runs on dedicated servers, not shared with other businesses or a public cloud.
Encrypted everywhere
HTTPS rated Grade A in transit, AES encryption at rest, and encrypted backups.
Tested every year
The platform is penetration tested by an independent specialist every year.
Certified
Our platform provider is certified under the UK government's Cyber Essentials scheme.
Registered
Little Ridge is registered with the ICO (ZB857472) and works to UK GDPR and PECR.
How we look after it
Where is our data stored?
In two UK data centres, one in Manchester and one in Newport, with on-site security around the clock. Backups are kept in a separate UK data centre.
Is anything processed outside the UK?
Not on the platform. The only exception is texts: if you send SMS using our Twilio account, message details pass through Twilio in the US, with the UK's international transfer safeguards in place. You can use your own Twilio account instead.
Who can see our data?
At Little Ridge, Danny and Teresa, and only when they need to for work you've asked for. At our platform provider, their development team only, with individual access and regular audits.
How is it kept secure?
Encryption in transit and at rest, enterprise-grade firewalls, no direct public access to data, active monitoring for threats, and logs that can't be changed or deleted. Every email goes out over TLS, signed with DKIM and backed by SPF.
Who controls logins to our account?
You do. Your account has its own security settings, including password rules, and you decide who on your team can do what.
How is the platform updated?
With zero downtime. Changes go through development, testing and quality checks before they go live, and live data is never used for testing. Major updates are announced in advance.
What about backups?
Taken regularly to a separate UK data centre, on encrypted storage, with restore tests several times a year.
What if there's a data breach?
We'll tell you without undue delay, and within 72 hours of us becoming aware of it, and help you with anything you need to do next. The platform has never had a security breach.
What happens to our data if we leave?
You can export it, or ask us for it, for up to 30 days after your contract ends. After that, it's permanently deleted. You can ask us to delete it sooner at any time.
Can we run our own penetration test?
Yes, by arrangement. Tell us first and we'll agree the scope and timing.
Who helps us run Connect
| Who | What they do | Where |
|---|---|---|
| Our platform provider | Provides and hosts the email and SMS platform Connect runs on. | UK |
| Twilio | Sends text messages, only if you send SMS using our Twilio account. | US, with UK transfer safeguards |
| Our website hosting provider | Hosts websites we build for you, only if you use that add-on. Form submissions go straight into the platform and aren't stored by the host. | Global hosting network |
Our full list of sub-processors, with names, is in the data processing agreement every customer gets. We'll give you 30 days' notice before we add or change one.
Service levels
When we're around
Monday to Friday, 9am to 5pm UK time, not including bank holidays. The platform runs all the time, so your emails, texts and journeys keep working evenings and weekends.
Email help@littleridgeconnect.com, call +44 (0)1302 490833, or message us on WhatsApp.
| Urgent | Sending has stopped, the platform's down, or a security or data problem | Looked at within 4 working hours |
|---|---|---|
| Normal | Questions, small changes, reports and help | Looked at within 1 working day |
We monitor everything every minute and get alerted straight away, including outside our hours. Live status is always on our status page.
Your paperwork
Data processing agreement
Every customer gets one with their Order, including our full sub-processor list. Want to see it first? Just ask.
Security and data Q&A
A detailed version of this page for your IT team, on request.
Terms and policies