Privacy policy

Last updated: 3 July 2026

1. Introduction

This Privacy Policy explains how Force Information Systems Ltd (“Force Information Systems”, “FIS”, “we”, “us” or “our”) collects, uses, discloses and protects personal information when you visit our website, https://www.force-uk.com/ (the “Site”), use our services, communicate with us, or otherwise interact with us (the “Services”). This Policy describes our practices for the personal information for which we are a “data controller” under applicable law.

Force Information Systems Ltd is registered in England & Wales (Company Number 2258880) and is part of the Harris group of companies (N. Harris Computer Corporation).

This Privacy Policy should be read together with our Cookies and Similar Technologies Policy, which explains how we use cookies and similar technologies.

2. Personal Information We Collect

We may collect and process the following personal information.

Contact Information — such as name, address, telephone number, and email address, for example when you contact us, request information, or interact with us.

Business Information — such as job title, employer, and business contact details, where you engage with us in a commercial or contractual context.

Account Registration Information — such as the details you provide when creating or maintaining an account with us.

Location and Technical Information — such as IP address, device identifiers, browser type, operating system, and information about how you use our Site and Services. This information may be collected through cookies and similar technologies.

Information from other sources — we may receive information about you from affiliates, service providers, business partners, or publicly available sources, where permitted by law.

3. How We Use Your Personal Information

We use personal information for the following purposes:

to provide and administer our Services and Site;
to manage our relationship with you and respond to enquiries;
to operate, maintain, and improve our Services;
to conduct analytics, research and development;
to ensure security, fraud prevention, and system integrity;
to communicate with you, including marketing communications where permitted;
to comply with legal, regulatory, and compliance obligations;
to exercise or defend legal rights; and
for other purposes disclosed to you at the time of collection or with your consent.

4. Legal Bases for Processing (UK/EU GDPR)

Where the GDPR applies, we process personal information on one or more of the following legal bases: performance of a contract; compliance with a legal obligation; our legitimate business interests (where these do not override your rights); your consent (e.g. for marketing or cookies); protection of vital interests; or public interest, where applicable.

5. Automated Decision-Making

We do not use personal information to make automated decisions that produce legal or similarly significant effects on you. If this changes, we will provide the notices, opt-out, and appeal mechanisms required by applicable law (including the CCPA/CPRA rules on automated decision-making technology) before doing so.

6. Disclosure of Personal Information

We may disclose personal information to:

affiliates and subsidiaries within the Harris group of companies;
service providers who support our operations (e.g. IT, hosting, payment processing, marketing);
business partners, where you request their services;
authorities or courts, where required by law; and
third parties in corporate transactions, such as mergers or acquisitions.

This may include third-party providers of analytics, marketing, security, and website functionality, where such providers act on our behalf and in accordance with applicable data protection laws. Details of cookie-based third-party providers are set out in our Cookies and Similar Technologies Policy.

We do not sell personal information for monetary consideration.

7. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy, or as required to meet legal, regulatory, accounting, or reporting obligations. We maintain records of consumer privacy requests and our responses for at least 24 months.

8. Security

We implement reasonable administrative, technical, and physical safeguards appropriate to the nature of the personal information to protect it from unauthorized or unlawful access, destruction, use, modification, or disclosure.

9. Your Rights

GDPR (UK / EU / EEA) — you may have the right to:

access your personal data;
correct inaccurate data;
request erasure (deletion);
restrict or object to processing;
request data portability; and
withdraw consent at any time, without affecting processing carried out before withdrawal.

California residents (CCPA / CPRA) — California residents have the right to:

know and access the categories and specific pieces of personal information we have collected;
request deletion of personal information;
correct inaccurate personal information;
opt out of the sale or sharing of personal information (we do not sell or share personal information for cross-context behavioural advertising);
limit the use and disclosure of sensitive personal information (if applicable); and
not be discriminated against for exercising privacy rights.

Notice at Collection (CCPA): the categories of personal information we collect and the purposes for which we use them are described in Sections 2 and 3 above. We do not sell or share personal information; where that is the case, no “Do Not Sell or Share” action is required, but you may still exercise the rights above.

Global Privacy Control (GPC): where required by applicable law, we recognize browser-based opt-out preference signals, such as Global Privacy Control (GPC), as valid requests to opt out of the sale or sharing of personal information.

Nevada residents have the right to opt out of the sale of certain personal information; you may submit such a request using the contact details below.

Requests may be submitted using the contact details in Section 12. We may verify your identity before responding and will respond within the timeframes required by applicable law. You may use an authorized agent to submit a request on your behalf.

10. Cross-Border Data Transfers

Personal information may be transferred outside the UK, EU or EEA. Where required, we use approved safeguards, such as Standard Contractual Clauses, to protect personal information.

11. Children

Our Services are not directed to children, and we do not knowingly collect personal information from children.

12. Updates and Contact

We may update this Privacy Policy from time to time. The “last updated” date above reflects the most recent revision, and we review this Policy at least once every 12 months.

To exercise your rights or ask questions about this Policy, contact us at:

Email: enquiries@forceinformationsystems.zohodesk.eu
Phone: 01270 848460
Address: Force Information Systems Ltd, 101b Park Drive, Milton Park, Abingdon, Oxfordshire, England, OX14 4RY