Privacy Policy
Last updated: 24 June 2026
Who we are
This website is operated by Secvura Ltd, registered in England and Wales, company number 17292680, registered office 167-169 Great Portland Street, Fifth Floor, London W1W 5PF. We are the data controller for the personal data described in this policy. You can contact us about your data at privacy@secvura.com.
What this policy covers
This policy explains how we handle personal data collected through this website, mainly the enquiry form. Personal data we process while delivering a security review for a client is governed separately by the engagement contract and data processing agreement we put in place with that client.
What we collect
When you submit the enquiry form we collect your first name, last name, job title, company name, email address, and anything you choose to add in the optional message field. Our hosting provider also processes limited technical information such as your IP address and request details as part of serving the website. See the cookies section below for analytics.
How we use it and our lawful basis
We use the details you provide to respond to your enquiry, arrange a scoping call, and follow up about the services you asked about. Our lawful basis is our legitimate interest in replying to and following up on business enquiries, and, where relevant, taking steps at your request before entering into a contract. We do not use enquiry details to send marketing without your separate consent.
How long we keep it
We keep enquiry details for up to 24 months from your last contact with us, after which we delete them, unless you become a client, in which case the relevant records are kept under our engagement terms and for as long as we are required to keep them for legal and accounting purposes.
Who we share it with
We do not sell your data. We share it only with the service providers that help us run this website and respond to you, acting on our instructions under a data processing agreement. These are Vercel (website hosting and delivery), Supabase (database storage of your enquiry), Resend (delivery of the enquiry email to us), and Google (Google Workspace, where we receive and store the email). We may also disclose data where we are legally required to.
Where your data is processed
Some of these providers are based outside the United Kingdom, including in the United States, so your data may be processed outside the UK. Where it is, we rely on appropriate safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement or the UK addendum to the standard contractual clauses.
How we protect it
We take appropriate technical and organisational measures to protect personal data, including access controls and encryption where appropriate. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to respond appropriately if a problem occurs.
Your rights
Under UK data protection law you have the right to access the personal data we hold about you, to ask us to correct it, to ask us to delete it, to restrict or object to our processing, and to data portability where it applies. To exercise any of these rights, email privacy@secvura.com.
Complaints
If you are unhappy with how we have handled your personal data, contact us at privacy@secvura.com and we will look into it and respond. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, although we would welcome the chance to address your concern first.
Cookies
This website uses only cookies that are strictly necessary for it to function. We do not use analytics or advertising cookies.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.
Contact
Questions about this policy or your data can be sent to privacy@secvura.com.