- Everything you send us is encrypted in transit and stored with trusted providers.
- Only the people who need your data can see it.
- Card payments are handled entirely by Stripe.
01Our approach
We take the security of your data seriously and use technical and organisational measures to protect it from loss, misuse and unauthorised access.
02Storage and access
Your data is stored on secure cloud infrastructure. Only the people at Limitless who need it to deliver our services can see it. Admin access is protected by sign-in and role-based permissions, and CVs are stored as private files that only our admin team can open.
03Encryption
All data sent between your browser and our servers is encrypted using TLS. Data at rest is encrypted by our hosting providers.
04Payments
All payments are processed by Stripe, a PCI DSS Level 1 certified provider. We never see, store or send your card details.
05Sign-in and accounts
The client portal and admin areas need a secure sign-in. We support email verification and sign-in with Google, Microsoft or Apple.
06Spam and abuse
Our forms are protected by Google reCAPTCHA and by checks on our servers, so they cannot easily be used to send spam.
07AI providers
Diagnostic answers are sent to AI providers over secure connections. Our providers must protect data in line with data protection law and do not use it to train their models.
08If something goes wrong
If there is a data breach that affects you, we will tell you and the Information Commissioner's Office as the law requires. We have a process to find, contain and fix security problems.
09How you can help
- keep your portal login details private
- use a strong password that you do not use anywhere else
- tell us straight away if you think someone has used your account
10Report a concern
If you find a security problem or have a concern, email enquiries@limitless-consulting.co.uk.
Email us and a person will reply.