Speak Up Policy

1. Introduction

Infinity Cloud System LIMITED ("we," "us," or "our") is committed to conducting business with honesty, integrity, and in compliance with all applicable laws and regulations. This Speak Up Policy (also known as a Whistleblowing Policy) provides a framework for employees, contractors, suppliers, and other stakeholders to raise concerns about wrongdoing.

We encourage everyone to speak up if they become aware of any conduct that may violate our policies, values, or the law. We are committed to protecting those who raise genuine concerns from retaliation.

2. Legal Framework

This policy is designed to comply with:

• Employment Rights Act 1996 (Part IVA) - Protection for whistleblowers
• Public Interest Disclosure Act 1998 - Whistleblowing protections
• Enterprise and Regulatory Reform Act 2013 - Enhanced whistleblowing protections
• Bribery Act 2010 - Reporting corruption
• Modern Slavery Act 2015 - Reporting modern slavery
• UK GDPR and Data Protection Act 2018 - Data protection in investigations

3. Who Can Use This Policy

This policy applies to:

• Employees (permanent, temporary, part-time, fixed-term)
• Contractors and consultants
• Agency workers
• Suppliers and business partners
• Former employees (for matters that occurred during employment)
• Job applicants (for matters discovered during recruitment)

4. What to Report

4.1 Qualifying Disclosures

You should report concerns about:

• Criminal Offences: Any criminal activity or suspected criminal activity
• Legal Violations: Breach of legal obligations or regulations
• Health and Safety: Dangers to health and safety of individuals
• Environmental Damage: Damage or risk of damage to the environment
• Miscarriage of Justice: Past, present, or likely miscarriage of justice
• Cover-ups: Deliberate concealment of any of the above

4.2 Specific Examples

Examples of matters you should report include:

• Fraud, theft, or financial irregularities
• Bribery, corruption, or conflicts of interest
• Modern slavery or human trafficking
• Discrimination, harassment, or bullying
• Data breaches or privacy violations
• Unsafe working conditions
• Environmental violations
• Regulatory non-compliance
• Misuse of company assets or resources
• Falsification of records or reports

4.3 What Not to Report Here

This policy is not for:

• Personal grievances (use HR procedures instead)
• Employment disputes (use grievance procedures)
• Minor policy violations (raise with your manager)
• Matters already adequately covered by other procedures

If you're unsure whether to use this policy, you can seek guidance confidentially.

5. How to Raise a Concern

5.1 Internal Reporting Channels

You can report concerns through the following channels:

5.2 What to Include

When making a report, please provide:

• Description of the concern and why you believe it is serious
• Names of individuals involved (if known)
• Dates, times, and locations of incidents
• Any evidence or documentation you have
• Names of potential witnesses
• Whether you have reported this elsewhere
• Your contact information (if you wish to be contacted)

5.3 Anonymous Reports

You may report concerns anonymously, although this may limit our ability to:

• Seek additional information from you
• Keep you informed of the investigation
• Provide you with protection from retaliation

We encourage you to provide your identity, which will be kept confidential to the extent possible.

6. External Reporting

6.1 Prescribed Persons and Bodies

If you believe we have not addressed your concern appropriately, or if you prefer not to report internally, you may report to relevant external bodies:

6.2 Legal Advice

You may wish to seek independent legal advice before making an external disclosure. Organizations that can provide free, confidential advice include:

• Protect (formerly Public Concern at Work): 020 3117 2520
• Citizens Advice: 0800 144 8848
• ACAS: 0300 123 1100

7. Protection from Retaliation

7.1 Our Commitment

We will not tolerate any retaliation, victimization, or detrimental treatment against anyone who:

• Raises a genuine concern in good faith
• Cooperates with an investigation
• Provides evidence or testimony
• Refuses to participate in wrongdoing

7.2 Legal Protection

Under UK law, workers who make a "qualifying disclosure" are protected from:

• Dismissal
• Disciplinary action
• Demotion or denial of promotion
• Harassment or bullying
• Any other detrimental treatment

7.3 What Constitutes Retaliation

Retaliation includes:

• Termination or threats of termination
• Demotion or denial of opportunities
• Reduction in pay or benefits
• Exclusion from meetings or activities
• Negative performance reviews without justification
• Verbal or physical harassment
• Spreading rumors or damaging reputation

7.4 Reporting Retaliation

If you believe you have experienced retaliation:

• Report it immediately using the same channels as for raising concerns
• We will investigate promptly and take appropriate action
• Retaliation is a serious disciplinary offence that may result in dismissal

8. Confidentiality

We are committed to protecting your confidentiality:

• Your identity will be kept confidential to the extent possible
• Information will only be shared on a need-to-know basis
• We will not disclose your identity without your consent, except where legally required
• Investigation materials will be stored securely

However, please note:

• In some cases, your identity may be inferred from the nature of the concern
• We may be required to disclose information by law or court order
• You may need to provide evidence or testimony if the matter proceeds to legal action

9. Investigation Process

9.1 Initial Assessment

Upon receiving a report, we will:

• Acknowledge receipt (if you provided contact information)
• Assess the seriousness and credibility of the concern
• Determine the appropriate course of action
• Decide whether a formal investigation is warranted

9.2 Investigation

If an investigation is conducted, we will:

• Appoint an appropriate investigator (may be internal or external)
• Gather evidence and interview relevant parties
• Maintain confidentiality throughout the process
• Complete the investigation in a timely manner
• Document findings and recommendations

9.3 Timelines

We aim to:

• Acknowledge reports within 5 business days
• Complete initial assessment within 10 business days
• Complete investigations within 60 days (complex cases may take longer)
• Keep you informed of progress (if you provided contact information)

9.4 Outcomes

Possible outcomes include:

• Concern substantiated - corrective action taken
• Concern partially substantiated - some action taken
• Concern not substantiated - no action required
• Insufficient evidence - unable to reach conclusion
• Referral to external authorities

10. Feedback and Communication

If you provided your contact information:

• We will acknowledge your report
• We will provide updates on the investigation progress
• We will inform you of the outcome (subject to confidentiality constraints)
• We may contact you for additional information

Due to confidentiality and legal constraints, we may not be able to share all details of the investigation or actions taken.

11. Good Faith Requirement

To be protected under this policy, you must:

• Have a reasonable belief that the information is true
• Act in good faith (not for personal gain or malicious reasons)
• Believe the disclosure is in the public interest

You do not need to have proof - a reasonable suspicion is sufficient. However:

• Deliberately false or malicious allegations may result in disciplinary action
• Protection does not extend to disclosures made for personal gain
• You may still be protected even if the concern turns out to be unfounded

12. Data Protection

We process personal data in accordance with UK GDPR and our Privacy Policy:

• Data is processed lawfully for the purpose of investigating concerns
• Information is kept confidential and secure
• Data is retained only as long as necessary
• Access is restricted to those involved in the investigation
• Your rights under GDPR are respected (subject to investigation requirements)

13. Record Keeping

We maintain records of:

• All reports received
• Investigation processes and findings
• Actions taken
• Communications with reporters

Records are stored securely and retained in accordance with legal requirements and our data retention policies.

14. Policy Review

This policy is reviewed annually and updated as necessary to reflect:

• Changes in legislation
• Best practice developments
• Lessons learned from investigations
• Feedback from stakeholders

15. Contact Information

To raise a concern or ask questions about this policy: