This Security Overview describes the practical approach taken by TransComp, a product of Pay To Tech Ltd (company number 16050393), to protecting the website, software and customer information. It is an overview, not a guarantee that no security incident can occur.
1. Our Approach
We design and operate TransComp with security, privacy and appropriate access control in mind. We use proportionate technical and organisational measures intended to protect information from unauthorised access, loss, alteration, disclosure and destruction.
2. Account and Access Security
Access to TransComp is controlled through authenticated user accounts and role-based permissions. Customers are responsible for assigning appropriate access to their own users, keeping passwords and devices secure, and promptly removing access when a user no longer needs it.
3. Application and Transport Security
The public TransComp website is delivered over HTTPS. We use anti-forgery protection on public forms and maintain software dependencies and application code as part of normal development and maintenance.
No internet-connected service can be completely secure. We continue to assess and improve our safeguards as the Service develops.
4. Hosting, Suppliers and Notifications
We use managed hosting and technology suppliers to operate the Service. We assess suppliers in a proportionate way and use contractual or technical safeguards where appropriate.
The mobile application uses Firebase Cloud Messaging to deliver push notifications. We do not use Firebase Analytics in the application. For payment features, a customer may be directed to the relevant payment provider's secure checkout or mandate process; payment-provider terms and privacy information will apply to that interaction.
5. Data, Backups and Deletion
We limit access to customer data to what is needed to operate, support and protect the Service. Customers should keep their own copies of records needed for their legal, operational or regulatory duties.
Following cancellation, account owners have 15 days to export operational data. After that period, we may delete or irreversibly anonymise operational data, subject to applicable law, customer instructions and our backup-rotation process. Limited information may be retained where required or permitted for accounting, security, fraud-prevention, legal or dispute-resolution purposes.
6. Security Incidents
We investigate suspected security incidents and take proportionate steps to contain, assess and remediate them. Where an incident involves personal data processed for a customer, we will provide the assistance required under the applicable Data Processing Agreement and data-protection law.
7. Report a Security Concern
If you believe you have found a security vulnerability or have a security concern about TransComp, please contact us at info@transcomp.co. Please do not publicly disclose the issue before giving us a reasonable opportunity to investigate it. Do not access, alter or delete data that does not belong to you.
8. Contact
Pay To Tech Ltd
Trading name: TransComp
Company number: 16050393
Registered address: 407 Manchester Road, M43 6QF, United Kingdom
Email: info@transcomp.co
Telephone: +44 7463 836674
Last updated: 27 Sep 2026