Privacy Policy
Last updated: 10 June 2026. This policy explains how SydSec handles personal information submitted through this website.
Who We Are
SydSec operates this website and the Syd AI security assistant pages. For privacy questions, contact info@sydsec.co.uk.
If you are a business customer, project-specific data handling can also be covered in a separate statement of work, NDA, or data processing agreement.
Information We Collect
Contact and enquiry forms may collect your name, email address, phone number, subject, and message.
Mailing-list registration may collect your name, email address, country, and optional phone number.
Checkout may collect your name, email address, phone number, billing or delivery address, product tier, order reference, payment status, and order notes.
Server logs and security controls may record IP address, browser details, timestamps, requested URLs, rate-limit events, CSRF failures, and reCAPTCHA verification results.
How We Use It
We use your information to respond to enquiries, provide Cyber Essentials and security consulting services, fulfil Syd AI orders, send order or support emails, prevent spam and abuse, protect the site, and keep basic business records.
Our lawful bases may include contract, legitimate interests, legal obligation, and consent where you choose to join a mailing list or ask for updates.
Processors and Third Parties
We may use hosting providers, email providers, Stripe for payment processing, Google reCAPTCHA for spam prevention, Google Fonts, YouTube embeds, and public code-hosting links such as GitHub or GitLab.
Stripe handles card details directly. This website does not store your card number, CVC, or full payment-card data.
Cookies and Embedded Services
This site does not use analytics tracking. Forms use necessary security/session cookies for CSRF protection and flash messages.
reCAPTCHA, Google Fonts, and YouTube embeds contact Google services and may use cookies or similar technologies. If you prefer not to use the web forms, email us directly.
Retention
We keep enquiry records only as long as needed to respond and maintain business records. Order records are retained for fulfilment, accounting, and legal reasons.
Security logs are kept for a limited period unless needed to investigate abuse, fraud, operational issues, or legal claims.
Your Rights
You can ask to access, correct, delete, restrict, or receive a copy of your personal information. You can also object to some processing or withdraw consent where consent is the lawful basis.
To exercise these rights, email info@sydsec.co.uk. You can also complain to the UK Information Commissioner's Office at ico.org.uk.
Security
We use HTTPS, CSRF protection, rate limiting, reCAPTCHA on public forms, access controls for admin pages, and security headers. No web system is risk-free, so please do not submit passwords, vulnerability exploit details, or sensitive client data through the public forms unless we have agreed a secure transfer method.