
ISCC Ltd – Privacy Policy
Last updated: 03/12/25
ISCC Ltd is committed to protecting your privacy and managing your personal information lawfully, fairly and transparently, in accordance with the UK GDPR and the Data Protection Act 2018.
This Privacy Policy explains what personal data we collect, how and why we use it, who we may share it with, and your rights.

1. Who we are
ISCC Ltd
Website: iscc.co.uk
Email: enquiries@iscc.co.uk
Telephone: 01691 682800
We provide procurement consultancy and support services to schools, academies, Trusts, colleges and universities across the UK.
2. Personal data we collect
We may collect personal information in the following ways:
A) Website interactions
-
First name and surname
-
Email address
-
Information submitted via contact forms
-
Details provided via direct email communication
-
IP address, browser type and device data (Google Analytics)
-
Cookie preferences and tracking data
-
Meeting information provided as part of online calls (e.g., Microsoft Teams)
B) Procurement and consultancy work
-
Names, job roles and contact information for client and supplier staff
-
Data provided via procurement portals
-
Operational and business information relating to catering, cleaning and soft FM services
-
Tender submissions, supplier responses and contract documentation
-
Notes, reports and project communications shared with us in the course of our work
We do not intentionally collect special category data. If received in error, it will be securely deleted.
3. How we use your data
We process personal data to:
Website-related purposes
-
Respond to enquiries
-
Arrange conversations or meetings
-
Improve website performance and usability
-
Maintain security and system integrity
Consultancy and procurement purposes
-
Deliver contracted services to clients
-
Provide tender management, benchmarking, audits and procurement support
-
Communicate with clients and suppliers throughout projects
-
Comply with procurement law and associated legal obligations
-
Maintain accurate records and documentation
We only process personal data where we have a lawful basis.
4. Lawful bases for processing
Under UK GDPR, we rely on:
-
Legitimate Interests – responding to enquiries, developing services, record-keeping, necessary communications
-
Contract – delivering consultancy and procurement services
-
Legal Obligation – compliance with procurement legislation and audit requirements
-
Consent – for optional cookies or marketing communications
5. Who we share your data with
We may share personal data with:
-
Approved contractors supporting procurement projects
-
Procurement portal providers
-
Secure cloud-based storage and CRM platforms
-
Microsoft Teams for virtual collaboration
-
Professional advisers (e.g., legal, HR, financial) where necessary
-
Public authorities, where disclosure is required by law
We never sell personal data.
All third parties are required to comply with UK GDPR.
6. Data storage and security
We protect personal data using:
-
Encrypted hardware
-
Secure cloud systems
-
Password-protected files
-
Restricted access to internal systems
These measures help prevent unauthorised access, alteration or loss.
7. Data retention
We keep personal data only for as long as necessary:
-
General enquiries: up to 12 months
-
Project data: typically 6–7 years (to meet procurement and legal requirements)
-
Analytics data: retained in line with Google’s policies
Once data is no longer required, it will be securely deleted.
8. Your privacy rights
You have the right to:
-
Request access to your personal data
-
Request correction or deletion
-
Object to or restrict processing
-
Request data portability
-
Withdraw consent (for cookies/marketing) at any time
To exercise these rights, please contact: enquiries@iscc.co.uk
9. Cookies
Our website uses cookies to:
-
Support essential site functionality
-
Improve performance
-
Help us understand how visitors use our website
You can manage cookie choices on our cookie banner.
A detailed Cookie Policy is available on request.
10. Updates to this policy
We may occasionally update this Privacy Policy.
The most recent version will always appear on this page.
11. Contact us
If you have any questions regarding this Privacy Policy or our data handling practices, please contact:
ISCC Ltd
Email: enquiries@iscc.co.uk
%20FULL%20COLOUR.png)