Privacy Policy

Information We Collect

When you contact us through our website, email, or phone, we collect basic contact information including your name, email address, company name, and phone number. During security engagements, we may access systems and data as defined in the scope of work — all such access is governed by a signed statement of work and, where applicable, a non-disclosure agreement.

How We Use Your Information

We use contact information solely to respond to enquiries, deliver contracted services, and maintain our client relationship. We do not sell, rent, or share your personal information with third parties for marketing purposes. Engagement data and findings are treated as strictly confidential and are only accessible to authorised members of your engagement team.

Data Security

We practice what we preach. All client data is encrypted in transit and at rest, stored in access-controlled environments, and purged according to our data retention policy. Engagement reports and evidence are retained for 12 months after delivery unless otherwise agreed, after which they are securely destroyed.

Cookies

This website uses only essential cookies required for basic functionality. We do not use analytics tracking, advertising cookies, or third-party scripts that collect personal data.

Your Rights

You may request access to, correction of, or deletion of any personal data we hold about you at any time by reaching out through our contact form.

Last updated: March 2026