Who we are
Pentesys Ltd, registered in England and Wales under company number 15041337, with its registered office at 8 Church Green East, Redditch, England, B98 8BP is the controller of personal information described in this policy. You can contact us at sales@pentesys.com.
Information we may collect
- Identity and contact details, including your name, work email address, telephone number and organisation.
- Professional information, such as your role, industry, company size and service interests.
- Information you choose to provide in an enquiry, assessment or other communication.
- Technical information ordinarily produced when a website is accessed, such as IP address, browser type, device information and basic security logs.
- Correspondence and records of our relationship with you.
How and why we use it
- To respond to enquiries, provide requested information and discuss our services.
- To take steps at your request before entering into a contract and to deliver any agreed services.
- To operate, secure, troubleshoot and improve the website and our communications.
- To meet legal, regulatory, accounting and security obligations.
- To send relevant business-to-business communications where permitted by law; you can opt out at any time.
Our lawful bases
Depending on the context, we rely on consent, steps taken before or performance of a contract, compliance with legal obligations, and our legitimate interests in operating and protecting our business, answering enquiries and communicating with business contacts. Where we rely on legitimate interests, we consider the effect on your rights and expectations.
Sharing and international transfers
We may share information with vetted service providers that support hosting, security, communications, customer relationship management and professional advice, and with authorities where the law requires it. We do not sell personal information. If information is transferred outside the UK, we use an approved safeguard where required, such as UK adequacy regulations or the UK International Data Transfer Agreement/Addendum.
How long we keep information
We keep personal information only for as long as it is reasonably needed for the purpose collected, including responding to enquiries, managing a commercial relationship, maintaining security records and meeting legal requirements. Retention periods vary by record and are reviewed periodically.
Your rights
- Ask for access to, correction of or deletion of your personal information.
- Ask us to restrict processing or object to certain processing.
- Request portability where the law provides it.
- Withdraw consent at any time where processing relies on consent.
- Complain to the UK Information Commissioner’s Office at ico.org.uk.
Contact and changes
Send privacy questions or rights requests to sales@pentesys.com. We may update this policy when our services, suppliers or legal obligations change; the date above shows the latest revision.