Security & Compliance

Security, privacy and compliance are built into every aspect of the Campaignmaster platforms. From secure UK-based hosting and encrypted communications to robust access controls and industry-recognised security standards, we’re committed to helping organisations protect their data and meet their compliance obligations with confidence.

A quick overview of the measures we take to protect your data and help your organisation meet its security and compliance requirements.

Protecting personal data is central to the way Campaignmaster is designed and operated. Our platforms are built to help organisations manage customer data securely while supporting their data protection and compliance obligations. Campaignmaster processes personal data in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Your organisation remains the data controller and retains ownership of its data at all times. Campaignmaster acts as the data processor, processing personal data only to deliver the services we provide on your behalf.

You remain in control of your customer data throughout its lifecycle, with the ability to import, export, update and permanently delete records whenever required. Your organisation determines what personal data is stored within the platform based on your own business requirements.

We support organisations in meeting their UK GDPR obligations through secure data handling, consent management, unsubscribe functionality and other built-in compliance features. Where consent is collected through Campaignmaster subscriber forms, consent records are date and time stamped to help organisations demonstrate proof of consent. Our platform supports unsubscribe functionality and, where configured, subscriber preference management to help organisations send relevant communications.

Customer data can be corrected, exported or permanently removed to support data retention policies and applicable data protection requirements, including the right to erasure where appropriate.

Our platforms have been designed with security built in at every level. From encrypted communications and secure authentication to industry best practices, we help protect your data both in transit and at rest.

All Campaignmaster platforms are delivered over secure HTTPS connections using SSL/TLS encryption to help protect data transmitted between users and our platforms.

We support Opportunistic TLS as standard for SMTP, encrypting email communications whenever the receiving mail server supports it. For organisations with stricter security requirements, Forced TLS can also be configured where appropriate.

Every user has their own unique account credentials, helping to ensure secure access and clear user accountability across your organisation.

Security is built into every stage of all our platforms’ designs, development and ongoing maintenance, helping protect against emerging threats and evolving security risks.

Our infrastructure is designed to provide a secure, reliable and resilient environment for your data. From UK-based hosting and secure data centres to regular security testing and disaster recovery planning, we take a proactive approach to protecting the services we provide.

Campaignmaster maintains recognised security certifications that demonstrate our commitment to protecting customer data, maintaining secure systems and continually improving our services.

Our certifications include:

• Cyber Essentials – Government-backed certification demonstrating our commitment to cyber security and protection against common online threats.
  
  
• ISO 27001 – Internationally recognised certification for information security management, helping ensure appropriate controls are in place to protect customer data.
  
  
• ISO 9001 – Internationally recognised certification for quality management, demonstrating our commitment to delivering consistently high standards of service and continual improvement.
  
  
• Information Commissioner’s Office (ICO) – Campaignmaster is registered with the Information Commissioner’s Office, reflecting our commitment to responsible data protection and compliance.

Campaignmaster is a UK-based company, with our platforms and customer data stored and processed securely within UK data centres. Keeping data within the UK helps organisations meet data residency requirements while providing fast, reliable access to our services.

Our hosting infrastructure is designed with physical and network security measures to help protect customer data and maintain service availability.

Our infrastructure includes disaster recovery and business continuity measures designed to minimise disruption and support the ongoing availability of our services.

We regularly carry out independent penetration testing to identify and address potential security vulnerabilities, helping ensure our platforms remain secure against evolving cyber threats.

One of the advantages of working with Campaignmaster is knowing exactly who develops, maintains and supports your platforms. We believe keeping development in-house allows us to maintain consistently high standards of security, quality and customer support.

Our platforms are designed, developed and maintained entirely by our own team. We do not outsource software development, allowing us to retain complete control of our products and respond quickly to customer feedback and security updates.

Campaignmaster does not use third-party sub-processors to deliver its core platform services. This helps us maintain greater control over customer data and provides customers with greater transparency over how their information is handled.

Keeping your account secure starts with controlling who can access it. Campaignmaster provides a range of features to help organisations manage user access securely while maintaining flexibility for teams of all sizes.

For organisations requiring additional account security, two-factor authentication (2FA) provides an extra layer of protection by requiring users to verify their identity before accessing the platform.

Administrators can restrict platform access to approved IP addresses, helping ensure that only users connecting from authorised locations can sign in.

Each user has their own unique login credentials, allowing organisations to manage access securely while maintaining accountability across their teams.

Administrators can assign user permissions based on individual roles and responsibilities, ensuring users only have access to the areas and functionality they need.

Your data belongs to you. Campaignmaster provides the tools you need to securely manage customer information throughout its lifecycle, from importing new records to updating, exporting and permanently deleting data when required.

Import customer data securely using CSV files, APIs or SFTP, giving you the flexibility to manage data in the way that best suits your organisation.

Update, edit and maintain your customer records at any time, ensuring your data remains accurate and relevant across your campaigns and communications.

Your data remains under your control. Export customer data whenever required to support reporting, business continuity or integration with your wider systems.

Records can be permanently deleted or suppressed where appropriate, helping organisations manage data retention policies and support data protection requirements, including the right to erasure where applicable.