Legal

Privacy policy

Short version: we collect what we need to answer you and do business with you, we do not sell it, and this site runs no advertising or analytics trackers.

Last updated 1 October 2026

What this site collects

This website uses no advertising cookies, analytics trackers or third-party embeds. Our hosting provider records standard server logs (IP address, requested page, browser type, timestamp) for security and capacity purposes, retained for a limited period and not used to profile visitors. Fonts are loaded from a third-party font service, which may receive your IP address as part of serving the font files.

What you send us

When you contact us through the form or by email, we keep your name, organization, email address and the content of your message so that we can respond and, if you become a client, supplier or employee, so that we can do business with you. Job applications are retained for twelve months unless you ask us to delete them sooner. Vulnerability reports are retained as part of our security records.

How we use it

  • To respond to inquiries and proposals
  • To perform contracts with clients and suppliers
  • To evaluate job applications
  • To meet legal, contractual and security-record obligations

We do not sell personal information. We share it only with service providers who process it on our behalf (for example email hosting), or where required by law.

Client data

Data we access while performing an engagement is governed by that engagement's agreement, not by this policy. We do not copy client data to our own systems except where the agreement expressly provides for it.

Security

Personal and business data is held on managed systems with hardware-key MFA, role-based access and encrypted offsite backup, operated by our systems engineering function and covered by our SOC 2 Type II report.

Your choices

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Email [email protected] with "Privacy request" in the subject line.

Changes

We will post any changes to this policy on this page with an updated date.