PrivacyPolicy

Who we are

Pentesys provides penetration testing, continuous security testing and related cybersecurity services. Our registered office is 124 City Road, London, EC1V 2NX, United Kingdom. For any privacy question, contact sales@pentesys.com.

Information we collect

We only collect the information you choose to give us, plus limited technical data about your visit.

• Contact details you submit through our contact form or newsletter form, such as your name, email address, telephone number, company and message.
• Meeting details you provide when booking a call through our scheduling provider.
• Chat messages you send through the chat widget on our website.
• Technical and usage data such as pages viewed, referring page, approximate location, browser and device type.

How we use your information

We use personal data to:

• Respond to enquiries and provide the information or proposal you requested.
• Deliver and support the services you engage us for.
• Send updates you have subscribed to, which you can unsubscribe from at any time.
• Understand how the website is used so we can improve it.
• Meet our legal, regulatory and contractual obligations.

Lawful bases

Where UK GDPR applies, we rely on your consent (for example for marketing emails and non-essential cookies), performance of a contract (delivering services you have engaged us for), our legitimate interests (responding to business enquiries and improving our website) and legal obligation (record keeping).

Cookies and analytics

Essential cookies are needed for the website to work. Non-essential cookies, including Google Analytics and our chat widget, are only loaded after you accept them in the cookie banner. You can change your choice at any time by clearing this site's cookies and site data in your browser and making a new selection.

Sharing your information

We do not sell personal data. We share it only with service providers that help us operate the website and our business, such as our email, hosting, analytics, chat and scheduling providers, and with professional advisers or authorities where we are legally required to do so. Providers act on our instructions under appropriate contractual terms.

International transfers

Some of our providers operate outside the United Kingdom. Where personal data is transferred internationally, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses with the UK addendum.

Retention

We keep enquiry and marketing data for as long as needed for the purpose it was collected, and client engagement records for as long as required for contractual, legal and professional obligations. When data is no longer needed it is deleted or anonymised.

Security

We apply technical and organisational measures appropriate to the sensitivity of the information we handle, including access control, encryption in transit and staff confidentiality obligations. Testing deliverables and client evidence are treated as confidential.

Your rights

Subject to UK data protection law, you may request access to your personal data, correction, erasure, restriction or objection to processing, and data portability, and you may withdraw consent at any time. To exercise a right, email sales@pentesys.com. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Changes to this policy

We may update this policy from time to time. The date below shows when it was last reviewed.