Policy Statement

Sixfold International Limited (Sixfold) is committed to protecting the personal data it holds and to keeping its information and systems secure. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and we are registered with the Information Commissioner’s Office (ICO).

Scope

This policy covers all personal and business information Sixfold handles – including client contacts, course delegates, associates and suppliers – in any format, and applies to all directors, employees and associates.

Data protection principles

We will ensure that personal data is:

  • Processed lawfully, fairly and transparently
  • Collected only for specified, legitimate purposes, such as delivering consultancy and training services and administering course bookings
  • Adequate, relevant and limited to what is necessary
  • Accurate and kept up to date
  • Kept no longer than necessary
  • Kept secure against unauthorised access, loss or damage

Individuals’ rights

We respect individuals’ rights to be informed, to access their data, and to have it corrected or erased where appropriate. Requests should be sent to accounts@sixfold.biz and will be answered within one month.

Information security

  • Business email and file storage use Microsoft 365, with access limited to authorised users
  • Devices are password-protected, kept up to date with security patches and protected by anti-virus software
  • Multi-factor authentication is used for key business systems where available
  • Client information is shared only with those who need it and is not taken outside agreed systems
  • Client confidentiality obligations and any client-specific security requirements are followed at all times

Third parties

Where we use suppliers or associates who process personal data on our behalf, we ensure they provide appropriate safeguards and are bound by confidentiality.

Data breaches

Any actual or suspected data breach must be reported immediately to Andy Haigh, Director. Breaches that are likely to risk individuals’ rights will be reported to the ICO within 72 hours and affected clients will be informed without delay.

Responsibility

Andy Haigh, Director, is responsible for data protection and information security at Sixfold. This policy is reviewed annually by the Board.

Approved by Andrew Haigh, Director, on behalf of the Board of Sixfold International Limited, 19 October 2026. Next review: October 2027.