Privacy Statement

Last updated: Review and set before launch

PhoenoSec is a cybersecurity consultancy. We treat the information this website collects the way we would advise a client to treat theirs: collect as little as possible, keep it only as long as it is needed, and be specific about what it is used for.

Information you give us

If you submit the contact form, we receive the information you enter: your name, business email address, company name, optional phone number, company size, the service you are interested in, and the description you provide.

We use that information solely to respond to your enquiry and to discuss a possible engagement. We do not sell it, rent it, trade it, or share it with third parties for their marketing. Submitting the form does not subscribe you to anything.

Information collected automatically

Our hosting and content delivery infrastructure records standard request information — IP address, timestamp, requested URL, user agent — for the purposes of delivering the site, preventing abuse, and diagnosing faults. This is ordinary server logging, retained for a limited period.

When a contact form is submitted, the originating IP address is recorded with the submission for abuse prevention and rate limiting.

Cookies and analytics

This website does not use advertising cookies, cross-site tracking, or third-party marketing pixels. Where analytics are used, they are configured to be privacy-conscious: aggregate measurement without individual profiling.

If bot protection is enabled on the contact form, the provider may set a short-lived token strictly for the purpose of distinguishing automated traffic from human visitors.

Please do not send sensitive information

Do not submit passwords, credentials, API keys, specific vulnerability details, network diagrams, or confidential infrastructure information through this website. A public web form is not an appropriate channel for that material. Where an engagement requires it, we will establish a secure channel first.

Retention

• Enquiries that do not lead to an engagement are retained for a limited period for business-record purposes and then deleted.
• Enquiries that lead to an engagement are retained under the terms of that engagement's agreement.
• Server and security logs are retained for a limited operational period.

Your choices

You may ask us what information we hold about you, ask for it to be corrected, or ask for it to be deleted. Contact us using the details on this website and we will respond. Depending on where you are located, you may have additional statutory rights; we will honour applicable requests.

Service providers

This website relies on infrastructure providers for hosting, content delivery, and email delivery. These providers process data on our behalf and are not permitted to use it for their own purposes.

Changes

If this statement changes materially, the revision date above will be updated. Continued use of the website after a change indicates acceptance of the revised statement.

Contact

Questions about this statement can be directed to PhoenoSec using the contact details published on this website.

Note for the site owner: this statement is a starting point written to be accurate about how this implementation behaves. Have it reviewed by qualified counsel before launch, and complete it with your jurisdiction, retention periods, and the specific processors you use.