We collect only what you send us through the contact form or by email. We use it to reply to you and, if we work together, to deliver and administer our services. We don't sell it, we don't use it for advertising, and this site doesn't use tracking or advertising cookies.
Who we are
ThreatInsights is a trading name of Smartsec Information Security Ltd, a company registered in England and Wales (company number 11886578), registered office Wakefield. West Yorkshire.. We are the controller of the personal data described in this policy.
For anything about your personal data, email privacy@threatinsights.net.
We are registered with the Information Commissioner's Office (ICO), registration number ZB008751.
What we collect and why
| What | Why | Lawful basis (UK GDPR) |
|---|---|---|
| Contact form: your name, email address, organisation and message | To reply to your enquiry | Legitimate interests in responding to people who contact us; or steps you have asked us to take before entering a contract |
| Emails you send us, including to privacy@threatinsights.net | To reply, and to handle data protection requests | Legitimate interests; legal obligation for data protection requests |
| Business contact details of clients and their staff | To deliver and administer services, and to invoice | Contract; legal obligation for financial records |
| Technical data such as IP address, browser type and the time of a request, held in our hosting provider's server logs | To keep the site secure and working | Legitimate interests in operating a secure website |
Please don't send sensitive information, such as details of a live security incident, health information or credentials, through the contact form. If you need to share something sensitive, say so and we will agree a secure channel.
We don't use your details for marketing unless you have asked us to, and we don't use automated decision-making or profiling.
Cookies
This site does not set tracking, analytics or advertising cookies. Our fonts are served by Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google when a page loads. Google's handling of that data is covered by its own privacy policy.
Who we share it with
We share personal data only with service providers who help us run the business, under contracts that require them to protect it and use it only on our instructions:
- Website hosting: Namecheap
- Contact form processing: form provider, or "our hosting provider"
- Email and document storage: Microsoft 365
- Professional adviserswhere needed
We may also disclose information if the law requires it, or to protect our rights or the safety of others. We never sell personal data.
International transfers
Some of our providers may process data outside the UK. Where they do, we rely on a UK adequacy regulation or on appropriate safeguards such as the UK International Data Transfer Agreement or Addendum, so your data stays protected to UK standards.
How long we keep it
- Enquiries that don't lead to work: up to 12 months after our last contact, then deleted.
- Client and contract records: for the length of the engagement plus 6 years, to meet legal, tax and contractual obligations.
- Server logs: as set by our hosting provider, normally no more than 90 days.
How we protect it
We are a security business and we apply the same standards to our own data: encrypted devices, multi-factor authentication, access limited to those who need it, and secure, reputable service providers. Smartsec Information Security Ltd is certified under Cyber Essentials.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you
- ask us to correct data that is wrong or incomplete
- ask us to delete your data
- ask us to restrict how we use it
- object to our use of it where we rely on legitimate interests
- ask us to transfer data you gave us to another organisation, where applicable
To use any of these rights, email privacy@threatinsights.net. We will respond within one month. There is normally no charge.
Complaints
If you are unhappy with how we have handled your data, please contact us first at privacy@threatinsights.net so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.
Changes to this policy
We will update this page if how we use personal data changes. The date at the top shows when it last changed.