Privacy notice

Who we are

IT Consultancy ("we", "us") provides web and office security services. Our registered address is [registered address] and our company number is [company number]. For privacy questions, contact info@itconsultancy.org.

What we collect

• Check details: the domain or public IP you submit.
• Contact details: your email address, and optionally your name and company.
• Report data: the findings, score and technical evidence produced by the check.
• Consent and audit data: the date and time you consented, your IP address, browser user agent and, for active IP checks, confirmation that you were authorised.
• Technical data: standard web server logs, including IP address, requested URL, timestamp and user agent, for security and troubleshooting.

Why we use it

• To run the security check you requested and send you the report (contract/request).
• To follow up about our services where you have consented or where we have a legitimate interest in responding to your enquiry.
• To enforce the daily limits, prevent abuse and keep the service secure (legitimate interest).
• To keep records of consent and authorisation for active scans (legal obligation and legitimate interest).

Cookies

We use essential cookies to keep forms secure and remember your cookie choices. Analytics and marketing cookies are only used if you opt in. See the cookie policy for details.

Who we share it with

• Our email delivery provider, SMTP2GO, to send the report and internal lead notification.
• Our hosting provider, which stores the application and database.
• Optional security intelligence and blocklist providers, where enabled, to check public IP reputation.
• Professional advisers or authorities where required by law.

We do not sell your personal data. Some providers may process data outside the UK. Where that happens, we rely on an adequacy decision or appropriate safeguards such as the UK International Data Transfer Addendum.

How long we keep it

• Leads and reports: up to 12 months from the date of the check.
• Rate-limit records: up to 7 days after the daily window closes.
• Cookie consent records: up to 24 months.
• Server logs: up to 30 days unless needed to investigate an incident.

Your rights

You have the right to access, correct, delete or restrict the use of your personal data, to object to processing based on legitimate interests, and to data portability. Where we rely on consent, you can withdraw it at any time. To exercise a right, email info@itconsultancy.org.

You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to resolve your concern first.

Security checks and third parties

Only submit domains and IP addresses that you own or are authorised to assess. Active port checks only run after you confirm authorisation. The results are indicative and do not constitute a penetration test or a guarantee that a system is secure.

Changes

We may update this notice from time to time. The date at the top shows the latest version. Material changes will be highlighted on this page.