Privacy Policy

ProtectifyAI Security Ltd ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information when you visit our website or contact us, and sets out your rights under UK GDPR and the Data Protection Act 2018.

We are registered in England and Wales. Our data controller contact is: support@protectifyai.com.

1. What data we collect

We collect personal data only when you voluntarily provide it to us. This includes:

• Contact and booking enquiries: your name, email address, and any message or context you provide when submitting a working session request via our website form.
• Email correspondence: any information you include when you contact us by email.
• Technical data: standard server logs may record your IP address, browser type, referring URL, and pages visited. This data is used for security monitoring and is not used to identify individual users.

2. How we use your data

We use the personal data you provide for the following purposes:

• To respond to your enquiry or booking request.
• To arrange and conduct a working session with you.
• To communicate with you about our services where you have requested this.
• To maintain records of our business communications.

We do not use your data for unsolicited marketing, and we will never sell or share your data with third parties for their own marketing purposes.

3. Legal basis for processing

We process your personal data on the following legal bases:

• Legitimate interests: responding to enquiries and managing business relationships.
• Contract: where processing is necessary to take steps prior to entering into a contract with you.
• Consent: where you have explicitly provided consent (e.g. subscribing to updates).

4. Third-party services

Our website uses the following third-party services which may process data:

• Google Fonts: fonts are loaded from Google's servers, which may log your IP address. See Google's Privacy Policy.
• Email (Gmail/Google Workspace): booking request notifications are transmitted via Gmail. Data is processed in accordance with Google's Privacy Policy.
• Google Analytics: if you accept analytics cookies via the consent banner, we use Google Analytics to understand aggregate site usage (pages visited, referring source, approximate location). It is not loaded, and no analytics cookie is set, unless you accept. See Google's Privacy Policy.

We do not use advertising trackers or remarketing pixels on this website.

5. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Enquiry data is typically retained for a period of 12 months from the date of last contact, unless a longer period is required for a business relationship or legal obligation.

6. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: you may request a copy of the personal data we hold about you.
• Right to rectification: you may ask us to correct inaccurate or incomplete data.
• Right to erasure: you may request that we delete your personal data in certain circumstances.
• Right to restrict processing: you may ask us to restrict how we use your data.
• Right to object: you may object to processing based on legitimate interests.
• Right to data portability: you may request your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at support@protectifyai.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

7. Data security

We take data security seriously and implement appropriate technical and organisational measures — including access controls, encryption in transit, and least-privilege data handling — to protect your personal data against unauthorised access, loss, or disclosure.

8. International transfers

Where personal data is processed by third-party services that operate outside the UK or EEA, we ensure appropriate safeguards are in place in accordance with UK GDPR, including Standard Contractual Clauses or adequacy decisions.

9. Cookies

On your first visit, a consent banner asks whether you accept analytics cookies. If you accept, Google Analytics is loaded and a small number of analytics cookies are set on your browser. If you reject, no analytics script or cookie is loaded, and the site, forms, checklist requests, and booking flow work identically either way. We do not use advertising or remarketing cookies. You can change your choice at any time using the "Cookie preferences" link in the footer of any page.

10. Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will be updated accordingly. We encourage you to review this page periodically.