Your details.
Used for one
purpose.

Who we are

Defensecrypt (“we”, “us”) provides vulnerability research and penetration testing. We are the controller of the personal data described in this notice. You can contact us about anything in it at contact@defensecrypt.co.uk.

What we collect

When you use the enquiry form

• Your name and email address
• Your company name, if you give it
• The service and plan you are interested in
• The message you write

When you email us directly

Your email address, any details in your signature, and the content of your message.

Technical data

To protect the form from automated abuse, Cloudflare Turnstile checks technical information from your browser and your IP address. We also use your IP address briefly to limit how often the form can be submitted. Your IP address is not stored with your enquiry.

This website has no analytics or advertising trackers, and it does not set cookies for those purposes.

How we use it

We use your details to:

• Reply to your enquiry and discuss a possible engagement. The lawful basis is taking steps at your request before entering into a contract, and our legitimate interest in responding to people who contact us.
• Keep the form secure by preventing spam and automated abuse. The lawful basis is our legitimate interest in protecting our website and the people who use it.

We will not add you to a mailing list or send you marketing.

Who processes it

We use a small number of service providers, who process data on our behalf:

• Cloudflare hosts this website, stores enquiries in its D1 database and runs the Turnstile security check.
• Google provides our email through Google Workspace.

These providers may process data outside the UK. Where they do, they rely on legally recognised safeguards for international transfers, such as the UK International Data Transfer Addendum or the UK Extension to the EU–US Data Privacy Framework.

We do not sell your personal data or share it with anyone else, unless the law requires us to.

How long we keep it

We keep enquiries and related correspondence for up to 24 months after our last contact with you, then delete them. If your enquiry leads to an engagement, the details become part of our records for that engagement and are kept under its terms.

Your rights

Under UK data protection law, you have the right to:

• Ask for a copy of the personal data we hold about you
• Ask us to correct data that is wrong or incomplete
• Ask us to delete your data
• Ask us to restrict how we use your data, or object to us using it
• Ask for your data in a portable format

To make a request, email contact@defensecrypt.co.uk. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113. We would appreciate the chance to resolve your concern first.

Changes to this notice

If we change how we handle personal data, we will update this page and the date at the top.