Privacy Policy

1. Who we are

Phantom Security Consulting Ltd ("Phantom Security", "we", "us", or "our") is a company registered in England and Wales, Company No. 17465050. This policy explains what personal data we collect through this website (https://phantomsecurity.io), why we collect it, how we use it, and the rights you have over it. We are the data controller for the personal data described in this policy.

2. Data we collect

We only collect personal data that you provide to us directly, through two forms on this site:

• Contact form: your name, company name, email address, the service you're enquiring about, and any details you include about your engagement.
• Newsletter signup: your email address only.

We do not use cookies, analytics, or any other tracking technology on this website, and we do not collect personal data automatically as you browse.

3. How we use your data

We use the data you submit only to:

• respond to your enquiry and discuss a potential engagement;
• send you research updates and disclosures, if you've subscribed to our newsletter; and
• maintain records of business communications and enquiries.

We never sell your data, and we never share it with third parties for their own marketing purposes.

4. Our legal basis for processing

Where you submit the contact form, we process your data on the basis of our legitimate interest in responding to business enquiries, and to take steps towards a contract at your request. Where you subscribe to our newsletter, we process your email address on the basis of your consent, which you can withdraw at any time.

5. Sharing your data

We use Resend as our email delivery provider to send and receive form submissions. Resend processes this data on our behalf and may store it on infrastructure located outside the UK, including in the United States. Where this happens, we rely on appropriate safeguards, such as Standard Contractual Clauses, to ensure your data remains protected. We do not use any other third-party processors, and we do not share your data with any other organization.

6. How long we keep your data

We keep contact form submissions for as long as necessary to respond to your enquiry and maintain a record of the engagement, typically no more than 24 months. If you subscribe to our newsletter, we keep your email address until you unsubscribe or ask us to remove it, whichever comes first.

7. Your rights

Under UK data protection law, you have the right to:

• ask us what personal data we hold about you, and get a copy of it;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data;
• ask us to restrict how we use your data;
• object to us processing your data;
• ask us to transfer your data to another organization; and
• withdraw consent at any time, where we're relying on consent (for example, by unsubscribing from our newsletter using the link in any email we send).

To exercise any of these rights, email us at info@phantomsecurity.io. If you're unhappy with how we've handled your data, you also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Data security

Form submissions are transmitted over encrypted (HTTPS) connections. Access to submitted data is limited to the people at Phantom Security who need it to respond to your enquiry or manage the newsletter.

9. Children's privacy

This website is intended for businesses and professionals. It is not directed at, and we do not knowingly collect personal data from, children under 16.

10. Changes to this policy

We may update this policy from time to time, for example if we start using a new tool or service. We'll update the "last updated" date above when we do. If changes are significant, we'll make that clear on this page.

11. Contact us

If you have any questions about this policy or how we handle your data, email us at info@phantomsecurity.io.