Privacy policy — HaloITSM

Cited by

Facts read from this source

• Controller entity Report an error

  “Controller: Halo Service Solutions Limited (“HALO”, “we”, “us”, “our”), Cartref, Bonar Bridge, Ardgay, Scotland, IV24 3AR, United Kingdom.”

• Hosted role Report an error

  “For data you store in our hosted platform we act as data processor and you are the controller”

• Google API policy Report an error

  “Our use of Google APIs follows Google’s API Services User Data Policy (including “Limited Use”).”

• AI features Report an error

  “Optional AI functions (triage, summarisation, knowledge discovery) route data to OpenAI as a subprocessor.”

• Openai AI Report an error

  “Data sent to OpenAI is not used to train its models.”

• Aws Report an error

  “Example: Amazon Web Services (data centres in the US, UK, Canada, South Africa, Australia, Bahrain, Germany).”

• Subprocessor list Report an error

  “A current list of subprocessors is available on request.”

• CCPA sale optout Report an error

  “You can opt out at any time by emailing compliance@imaginehalo.com.”

• International transfers Report an error

  “we rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) and the UK International Data Transfer Agreement/Addendum (IDTA).”

• Analytics cookies Report an error

  “Analytics cookies – Google Analytics, Usermaven”

• Advertising cookies Report an error

  “Advertising/retargeting cookies – Google Ads”

• Certifications Report an error

  “HALO is certified to ISO/IEC 27001 and SOC 2 Type II.”

• Retention leads marketing Report an error

  “Leads / marketing records: 7 years”

• Retention support logs Report an error

  “Support logs/tickets: 7 years”

• Retention hosted logs Report an error

  “Hosted log data after contract termination: up to 4 weeks (unless otherwise agreed)”

• Security csrf Report an error

  “The web application uses ASP.NET Core anti-forgery cookies with a secret form token in a double-submit pattern to block CSRF.”

• Security token pairing Report an error

  “Our API middleware verifies both the access token and the identity cookie and ensures they are correctly paired before allowing any request.”

• Selfhosted option Report an error

  “It does not cover data held solely within your selfhosted (“NonHosted”) HALO environment.”

• Payment pci Report an error

  “Billing & payment data (handled through PCIcompliant processors)”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Change & Configuration Manager Service desk, incidents & requests
• The Change & Configuration Manager European sovereignty
• The MSP Owner Service desk, incidents & requests
• The MSP Owner Deployment, integrations & multi-client operation
• The MSP Owner European sovereignty
• The Municipal IT Lead Service desk, incidents & requests
• The Municipal IT Lead Deployment, integrations & multi-client operation
• The Municipal IT Lead European sovereignty
• The Service Desk Lead Service desk, incidents & requests
• The Service Desk Lead Deployment, integrations & multi-client operation
• The Service Desk Lead European sovereignty
• The Skeptic Service desk, incidents & requests
• The Skeptic Deployment, integrations & multi-client operation
• The Skeptic European sovereignty
• The Solo IT Admin European sovereignty