(“We”, “NexGen Software” or “NexGen”) is committed to providing a secure service as well as protecting and respecting your privacy. For the purpose of the Data Protection Act 1998 (the “Act”), we are a Data Processor.

1. Scope
   1. This Security and Privacy Policy describes how we collect, process, store, use and disclose any personal data in connection with the services that are made available to you through the NexGen website. By entering the site, you consent to the collection, storage, use and disclosure of your personal information and the authorised details of your clients as described in this Policy. It also gives information on how you should ensure the security of usernames and passwords.
2. Access and Security
   1. Only authorised users can enter the NexGen website. Restricted personnel from NexGen, the web hosting and maintenance contractor (Amazon Web Services) and the Serious Fraud Office also have access to the whole website (the “Authorized Third Parties”). For the avoidance of doubt any access by the Authorised Third Parties is allowed only on the basis that they agree to be bound by this Security and Privacy Policy and their respective obligations under the Act.
   2. You have been issued with a username and password which restricts you to the information relevant to you, and as such, you are not anonymous to us. The username and password are personal to you and you are responsible for keeping the username and password confidential. You must not share them with anyone.
   3. We use standard industry practices, including encryption, passwords and physical security to protect your personal information and the authorised details of your clients against unauthorised access and disclosure. In offering the website facility, users agree to abide by the terms and conditions relating to the security of usernames and passwords:
      1. Only registered users may use the website
      2. Each user must have their own username and password
      3. If a user no longer requires access to the website or leaves their organisation, the helpdesk must be notified in order that the username can be de-activated
      4. Please have regard for the obligations placed on all parties under the Data Protection Act
   4. Security is of utmost importance and if we believe that a user is abusing the website in any way, such as breaching the security requirements, we reserve the right to withdraw the website facility from the user or solicitors firm.
   5. We make no representation as to the availability of the website.

3. Collection
   1. We may collect and store the following personal data from you:
      1. Name, email address, company address, telephone number and other contact information
      2. Transactional information based on your activities on the Site (such as pages you view, documents you download, tools you use, etc.)
      3. Correspondence through the site and feedback
      4. Computer sign-on data, statistics and information on traffic to and from the site, IP address, browser information and standard web log information.
4. Storage
   1. Most of the data that is loaded and stored on to this website and that is capable of being viewed by you has been collected by you pursuant to the principles of the Data Protection Act 1998. We make no representation as to the accuracy of the data stored on this website.
   2. The data that is stored on the website is processed by staff that works for us or one of the Authorised Third Parties operating within the European Economic Area (“EEA”).
   3. All data you provide to us is stored on secure servers within the EEA.
   4. Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect the data, we cannot guarantee the security of your data transmitted to our site, any transmission is at you own risk. Once we have received your information, we will use strict procedures and security features to prevent unauthorised access. These are detailed above under the heading “Access and Security”.
5. Cookies
   1. We use “cookies” (small files placed on your computer's hard drive) to help identify you and maintain your signed-in status as well as manage user sessions. You are always free to decline our cookies if your browser permits, although doing so may interfere with your use of the website.
6. Disclosure to Third Parties
   1. We do not sell or rent any data to third parties (for example, marketing companies). However, if we are under a duty to disclose or share data in order to comply with a legal obligation we may be obliged to disclose information if requested by law enforcement agencies or other governmental agencies (for example, Inland Revenue, DWP, Serious Fraud Office, etc) in response to a request for information under the Data Protection Act or Prevention of Terrorism Act or an order of a competent court.
   2. We do not pass on personal data in any other circumstances unless we have express consent from you or your client.