Data Protection Act
- Data Protection Act
- Information Security Policy
- Website Terms and Conditions
- General Terms and Conditions
- Service Level Agreements
Cloud Direct complies with the UK Data Protection Act 2018.
Cloud Direct and On Direct Business Services Ltd are registered under the UK Data Protection Act 2018 as below:
Data Controller Name: On Direct Business Services Ltd
Registration Number: PZ7721712
Access to Data and Data Confidentiality
Data storage areas are physically secure and accessible only to named staff of Cloud Direct.
All client data held by Cloud Direct is stored in compressed and encrypted form. Cloud Direct and its employees do not possess the ability to decrypt this data.
Approved staff of Cloud Direct are able to view directories and file structure when required for support purposes, but will not open files and read encrypted client data.
Encryption is carried out using military-grade 128-bit and 256-bit AES algorithms.
Data being transferred between the client and Cloud Direct secure servers is at all times compressed, encrypted and transferred using a proprietary transfer protocol for increased resistance to “packet sniffing”.