Business Continuity and Disaster Recovery Policy

Click & Kind Co. Ltd

Last updated: February 2026
Policy owner: Director, Click & Kind Co. Ltd

1. Purpose

This policy defines the measures Click & Kind Co. Ltd takes to ensure continuity of services and recovery of systems and data in the event of disruption, incident, or failure.

The objective is to minimise service interruption, protect client data, and ensure safe and orderly recovery of services.

2. Scope

This policy applies to:

  • All client projects and systems accessed by Click & Kind Co. Ltd

  • All devices used to deliver services

  • All migration, development, and technical consultancy work

3. Business Continuity Approach

Click & Kind Co. Ltd operates a secure, remote-first working model designed to minimise disruption.

Key continuity controls include:

  • Secure remote access capability from multiple locations if required

  • Use of reliable, maintained computing equipment

  • Secure password management and multi-factor authentication where available

  • Ability to resume work rapidly in the event of hardware failure using replacement equipment

Client systems remain hosted within client-controlled infrastructure unless otherwise agreed.

4. Disaster Recovery – Migration and Technical Services

For migration and infrastructure work, the following recovery controls are applied:

Pre-migration backup

Before any production changes are made:

  • Full system file backups are created

  • Full database backups are created

These backups are stored securely and used for recovery if required.

Rollback capability

Where migration work is performed, the existing production environment is retained until:

  • Migration is complete

  • Testing is complete

  • Client approval is obtained

This allows rapid rollback if necessary.

Recovery process

If a migration or system change causes disruption:

  1. Client is notified promptly

  2. Rollback procedure is initiated if required

  3. Systems are restored to last known working state

  4. Root cause is identified

  5. Corrective actions implemented

5. Incident Response

If a security or operational incident occurs:

  • Immediate steps are taken to contain the issue

  • Client is notified without undue delay

  • Corrective action is implemented

  • Lessons learned are applied to prevent recurrence

6. Client Infrastructure Responsibility

Where services are delivered within client-managed infrastructure (as with Coventry University):

  • Infrastructure backup and disaster recovery remain the responsibility of the client organisation

  • Click & Kind Co. Ltd supports recovery activities related to migration or application configuration as required

7. Recovery Time Objective

Click & Kind Co. Ltd aims to:

  • Resume technical work within 1 business day following disruption affecting internal equipment

  • Support client system recovery as agreed per project scope

8. Policy Review

This policy is reviewed:

  • Annually, or

  • Following significant operational or security changes