Privacy policy

Effective Date: 6 September 2026
Last Updated: July 2026

1. Introduction

Avsec Resilience Ltd is committed to protecting personal information and handling it responsibly, securely and transparently.

This Privacy Policy explains what information we collect, why we collect it, how we use it, who we may share it with, how long we keep it and the rights available to you under applicable UK data-protection law.

This Policy applies when you visit our website, contact us, use our training or e-learning services, download resources, use our digital tools or use the Three Clocks web or Android application.

2. Who we are

Avsec Resilience Ltd
Registered in England and Wales
Company number: 08349700
Registered office:
Chiltern House
45 Station Road
Henley-on-Thames
Oxfordshire
RG9 1AT
United Kingdom

Email: info@avsec-resilience.com

Avsec Resilience Ltd is the data controller for personal information processed for the purposes described in this Policy.

3. Information you provide

Depending on how you interact with us, we may receive:

  • Name

  • Email address

  • Telephone number

  • Organisation and job title

  • Billing and transaction information

  • Course enrolment and completion information

  • Assessment, quiz and certificate records

  • Messages submitted through contact forms

  • Feedback and survey responses

  • Information provided when requesting support

Please do not submit confidential, classified, sensitive, security-restricted or commercially sensitive information unless you are authorised to do so.

4. Information collected automatically

When you use our website or online services, limited technical information may be collected, including:

  • IP address

  • Browser and operating-system information

  • Device type

  • Pages or resources accessed

  • Cookies and similar technologies

  • Security and diagnostic information

  • Website or service usage information

We use this information to operate, secure, maintain and improve our services.

5. App and browser application

Avsec Resilience Ltd provides browser-based and installable digital tools, including Three Clocks, TrainerClock and Avsec Exercise Builder. Other applications may be added to this group as they become available.

These applications are designed to operate without requiring users to create an account or provide their name, email address or password.

Information stored locally

Depending on the application and features used, the following information may be stored locally on the user’s device or browser:

  • Clock locations, time zones and labels
  • Working-hours and appearance preferences
  • Exercise content, scenarios and notes
  • Timers, reminders and saved sessions
  • Webinar dates, times and locations
  • Saved clock sets and favourite exercises
  • Uploaded or captured images
  • Accessibility and display settings

This information is generally stored on the user’s device and is not automatically sent to Avsec Resilience Ltd.

Application-specific functions

Three Clocks may store clock settings, world-time locations, exercise times, webinar plans, saved images and captured clock images.

TrainerClock may store training-session settings, countdowns, notes, reminders, delegate information, saved layouts and session-resume data.

Avsec Exercise Builder may store exercise selections, scenarios, participant or facilitator inputs, generated exercise content, notes and saved or downloaded results.

Deleting local data

Users can remove locally stored information through the application’s Delete Data, Clear Data or equivalent function. Local information may also be removed when users:

  • Uninstall the application
  • Clear browser or app storage
  • Delete browser data
  • Reset or replace their device
  • Use a different browser or device

Avsec Resilience Ltd cannot recover information stored only on the user’s device.

Images and sharing

Some applications may allow users to upload, save, capture or share images. Images are used for the function selected by the user, such as displaying an image, creating a clock or sharing a result through the device’s sharing options.

Users are responsible for ensuring that they have permission to use and share any image they upload.

External services

Some features may use external services, such as public-holiday data, hosting, security, analytics or application delivery. Third-party platforms, including Base44 where applicable, may process limited technical information needed to provide those services. Users should consult the relevant third-party privacy information where applicable.

Important information

These applications are general planning, training and educational tools. Users should not enter classified, confidential, sensitive, security-restricted, health, biometric or highly sensitive personal information.

Locally stored information is not automatically recoverable by Avsec Resilience Ltd if the device, browser data or application storage is lost.

6. Training and e-learning information

If you enrol in or access training or e-learning, we may process:

  • Course access and enrolment information

  • Lesson progress

  • Quiz and assessment results

  • Completion status

  • Certificates issued

  • Download and learning activity

  • Course feedback

  • Login information for the relevant learning platform

We use this information to provide training, support learners, issue certificates, maintain records and improve our services.

7. AI tools and assistants

If you use an Avsec Resilience AI assistant, chatbot or GPT-based tool, we may process information that you enter, including prompts, questions, uploaded content and generated responses.

AI tools are provided for general learning and guidance. Do not submit confidential, classified, security-sensitive, personal or commercially sensitive information unless you are authorised to do so.

AI-generated responses may be incomplete, inaccurate or outdated and should not replace professional judgement.

8. How we use personal information

We may use personal information to:

  • Respond to enquiries and support requests

  • Provide training, consultancy and digital services

  • Manage course access and learner records

  • Process payments and transactions

  • Issue certificates

  • Provide downloads and resources

  • Maintain service security

  • Prevent misuse and fraud

  • Improve our website and services

  • Send service communications

  • Send marketing communications where permitted

  • Meet legal, regulatory, accounting and tax obligations

9. Legal bases for processing

Depending on the circumstances, we may process personal information on the following legal bases:

  • Contract: to provide a service you have requested

  • Consent: where you have given consent

  • Legitimate interests: to operate, secure and improve our services

  • Legal obligation: where processing or retention is required by law

10. Who we share information with

Where necessary, we may share limited personal information with trusted service providers, including:

  • Website and application hosting providers

  • E-learning and learning-management providers

  • Payment processors

  • Email and communication providers

  • Technical support and security providers

  • Analytics providers, where enabled

  • Professional advisers

  • Regulators, courts or law-enforcement bodies where legally required

We do not sell personal information.

Three Clocks’ locally stored clocks, exercises, settings and images are not routinely available to Avsec Resilience Ltd.

11. International transfers

Some service providers may process information outside the United Kingdom.

Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place, such as contractual protections or recognised data-transfer mechanisms.

12. Cookies and similar technologies

Our website may use cookies and similar technologies to:

  • Keep services secure

  • Remember preferences

  • Support e-learning functions

  • Maintain login sessions where applicable

  • Understand website performance

  • Improve user experience

  • Support analytics where enabled

Further information is provided in our Cookie Policy.

13. Security

We take reasonable technical and organisational measures to protect personal information from loss, misuse, unauthorised access, disclosure or alteration.

However, no website, application or online service can be guaranteed to be completely secure.

14. Data retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

Retention periods depend on the type of information and may include:

  • Enquiries and support requests: normally up to two years

  • Customer and financial records: normally up to seven years

  • Training and certificate records: as required for verification, compliance or legal purposes

  • Marketing records: until you unsubscribe or request removal

  • Technical and security records: for as long as reasonably necessary to maintain service security

  • Locally stored Three Clocks data: until removed by the user or deleted through the device or browser

We may retain limited information where necessary to comply with legal obligations, resolve disputes, prevent fraud or maintain accurate records.

15. Your rights

Under UK data-protection law, you may have the right to:

  • Request access to personal information we hold about you

  • Request correction of inaccurate information

  • Request deletion of personal information

  • Request restriction of processing

  • Object to certain processing

  • Request data portability

  • Withdraw consent where processing is based on consent

To exercise your rights, contact us using the details below. You also have the right to complain to the Information Commissioner’s Office.

16. Children

Our website, training, consultancy services and digital tools are intended primarily for adults and professional users.

We do not knowingly collect personal information from children.

17. Third-party websites and services

Our website and applications may contain links to third-party websites, platforms, tools or services.

We are not responsible for their content, security, availability or privacy practices. You should review the privacy policy of any third-party service you use.

18. Changes to this Policy

We may update this Privacy Policy to reflect changes in our services, technology, legal requirements or business practices.

The latest version will be published on this page, together with the effective date and last-updated date.

19. Contact us

For privacy questions, support requests or data-rights enquiries:

Avsec Resilience Ltd
Email: info@avsec-resilience.com
Website: www.avsec-resilience.com
Three Clocks support: https://avsec-resilience.com/three-clocks-support/

You may also contact the Information Commissioner’s Office if you are unhappy with how your personal information has been handled.

Contact us