Trust
Quality, security and data protection
This page describes our delivery approach. It does not claim certified management systems, Cyber Essentials, ISO accreditation or government approval unless independently verified and authorised.
Quality
Practices we aim to follow and evidence on engagements. Labelled as our delivery approach rather than a certified quality-management system.
- Requirements traceability where appropriate
- Peer review and testing appropriate to the project
- Defect tracking and release checks
- Documentation and handover
- Continuous improvement based on delivery feedback
Information security
Security controls are agreed and evidenced for each project. The items below are design objectives and engagement practices—not a claim that every control is already implemented company-wide.
- Least-privilege access as a design objective
- MFA where supported and required
- Secure credential handling
- Environment separation where appropriate
- Logging and access review appropriate to the engagement
- Secure development and dependency management
- Incident escalation and client notification according to contract
Cyber Essentials
OCCASIONFUN LTD does not display a Cyber Essentials badge and does not claim Cyber Essentials or Cyber Essentials Plus certification at this stage. The company has chosen not to pursue Cyber Essentials at initial website launch.
Some procurements may require Cyber Essentials, Cyber Essentials Plus or equivalent controls. The company must assess each tender's exact requirements and only bid where it can meet them. We do not suggest that all tenders can be bid without such controls.
Data protection
Personal data is handled only where necessary and under documented roles and instructions.
Where DGV or another overseas partner may access personal data from outside the UK, the parties must assess whether this constitutes a restricted international transfer and implement the applicable UK GDPR transfer mechanism and risk assessment where required.
We do not claim that an IDTA, UK Addendum, Transfer Risk Assessment, DPA or other legal document is already signed unless confirmed. Data locations, access, retention, deletion and subprocessors are agreed contractually for each engagement.
Need supplier assurance information?
Request available policies or discuss security and data-protection requirements for a specific engagement.