Privacy Policy

This policy explains how SecurityBakedIn Ltd (“SecurityBakedIn”, “we”, “us”) collects, uses, and protects your personal data when you visit securitybakedin.com or get in touch with us. We are committed to handling your data lawfully and transparently in line with UK data protection law (the UK GDPR and the Data Protection Act 2018).

Who we are

SecurityBakedIn is the trading name of SecurityBakedIn Ltd, a company registered in England & Wales (company number 17308631). Our registered office is 8 Milliners House, 173 Bermondsey Street, London, United Kingdom, SE1 3UW. For any privacy matter you can reach us at contact@securitybakedin.com. We are the “data controller” for the personal data described in this policy.

What data we collect

• Enquiry details - when you use our contact form or email us, we collect your name, email address, and the contents of your message.
• Correspondence - any further emails or communications you send us.
• Technical data - our hosting provider processes basic technical information (such as your IP address and request data) to deliver the site securely and to produce aggregate, privacy-friendly usage analytics. We do not use tracking or advertising cookies.

How and why we use your data

We use your personal data to:

• respond to your enquiry and provide the information or services you ask for;
• communicate with you about a potential or existing engagement;
• keep our website secure and functioning correctly.

Our lawful bases are legitimate interests (to respond to enquiries and run our business) and, where you are asking us to provide services, steps taken at your request prior to entering a contract. We do not send marketing emails or sell your data.

Who we share it with

We do not sell your personal data. We use a small number of trusted service providers (“processors”) who handle data on our behalf:

• Web3Forms - delivers our contact-form submissions to us by email.
• Microsoft 365 - our email service, used to receive and respond to your messages.
• Cloudflare - hosts and secures this website, and provides privacy-friendly, cookieless usage analytics.

We may also disclose data where required by law. Some of these providers may process data outside the UK; where that happens, appropriate safeguards (such as the UK International Data Transfer Agreement/Addendum or equivalent) are relied upon to protect your data.

How long we keep it

We keep enquiry and correspondence data only as long as necessary for the purpose it was collected - typically for the duration of our discussions and a reasonable period afterwards for our records and legal obligations - after which it is securely deleted.

Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to our processing of your data;
• data portability, where applicable.

To exercise any of these rights, email us at contact@securitybakedin.com. You also have the right to complain to the UK supervisory authority, the Information Commissioner’s Office (ICO), at ico.org.uk, though we’d appreciate the chance to address your concern first.

Cookies

This website does not use tracking or advertising cookies, so no cookie banner is required. We use Cloudflare Web Analytics to understand aggregate site usage (such as page views and referrers). It is privacy-first and cookieless: it does not use client-side state, does not fingerprint or track individual visitors, and is not used for cross-site tracking or advertising.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised “last updated” date.