Privacy Policy

Auditify Security is the data controller for personal data described in this policy. For any question about it, contact us at info@auditifysecurity.com.

Information you give us. When you contact us or request a proposal, we collect your name, email address, company, and whatever you choose to include in your message.

Information collected automatically. We collect basic analytics about how this site is used — pages viewed, approximate region, and referring source. We use privacy-focused analytics that do not track you across other websites and do not build an advertising profile.

Engagement data. Data encountered during a security engagement is governed by the contract and non-disclosure agreement for that engagement, not by this policy.

To respond to your enquiry, to provide and administer services you engage us for, to meet legal and regulatory obligations, and to understand how this site is used so we can improve it. We do not sell personal data, and we do not share it for advertising.

Where the GDPR or UK GDPR applies, we rely on legitimate interests for responding to enquiries and operating this site, on contract performance for delivering engaged services, and on legal obligation where retention or disclosure is required by law.

Enquiries are retained for up to 24 months from last contact. Engagement records are retained for the period set out in the relevant contract, or as long as required for legal and professional obligations.

We use third-party providers for website hosting, email delivery, and analytics. Each is bound by a data processing agreement and may only process data on our instructions.

Some providers may process data outside your country. Where personal data is transferred out of the UK or EEA, we rely on an approved transfer mechanism such as Standard Contractual Clauses.

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to how we use it, and receive it in a portable format. To exercise any of these, email us. We respond within one month.

If you are in the UK or EEA and are unhappy with our response, you may complain to your local data protection authority.

We use only what is necessary to operate the site and to gather aggregate analytics. We do not use advertising or cross-site tracking cookies.

We update this policy when our practices change. The date at the top reflects the most recent revision.