Security Policy

Limitless Management Consultancy Limited takes the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse.

Your data is stored on secure cloud infrastructure provided by reputable hosting providers. Access to personal data is restricted to authorised personnel who require it to deliver our services. Administrative access is protected by authentication and role-based access controls.

All payments are processed by Stripe, a PCI-DSS Level 1 certified payment provider. Your card details are encrypted and handled entirely by Stripe. We never see, store, or transmit your card information on our servers.

All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security). Data at rest is encrypted by our hosting providers using industry-standard encryption protocols.

Access to admin and client portal areas requires authentication. We use secure authentication practices and support email verification to protect user accounts.

Your diagnostic responses are processed by AI language models via secure API connections. Our AI service providers are required to process data in accordance with applicable data protection laws and do not use your data to train their models.

In the event of a data breach, we will notify affected individuals and the relevant authorities in accordance with our legal obligations under GDPR. We maintain incident response procedures to identify, contain, and remediate security incidents.

You can help keep your data secure by:

• Keeping your account credentials confidential
• Using a strong, unique password for your account
• Contacting us immediately if you suspect unauthorised access

If you have any questions about our security practices or wish to report a security concern, please contact us at enquiries@limitless-consulting.co.uk.