Privacy Policy

1. Who we are

Velocor Security is a cybersecurity consultancy. This policy explains what personal data we collect when you visit this website or contact us, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR).

2. What data we collect

We collect the information you submit and technical information needed to operate and protect the website. The website does not include marketing analytics scripts or advertising pixels.

• Contact form: Name, company name, work email address, optional website, enquiry category, and message contents when you submit the enquiry form. Do not submit passwords or sensitive client records.
• Email correspondence: Any information you share when emailing us directly at info@velocorsecurity.com.
• Server logs: Standard web server logs (IP address, browser type, page requested, timestamp) retained for up to 30 days for security monitoring purposes.

3. How we use your data

• To respond to your security enquiry and discuss an appropriate next step.
• To provide a quote or scoping document for security services.
• To fulfil any contracted security engagement.
• To comply with legal obligations.

We do not send marketing emails, newsletters, or unsolicited communications. We do not sell, rent, or share your data with third parties for commercial purposes.

4. Legal basis for processing

• Legitimate interests - responding to business enquiries and preventing fraud.
• Contract performance - processing data necessary to deliver agreed security services.
• Legal obligation - where required by applicable law.

5. Data retention

Contact form enquiries that do not result in an engagement are retained for 12 months then securely deleted. Data relating to active or completed engagements is retained for 6 years in line with standard professional service obligations.

6. Cookies and local storage

The website does not set an advertising or analytics preference cookie. When the online enquiry form is enabled, Cloudflare Turnstile processes technical browser and request information to help prevent abuse. Security services may use information necessary to operate their checks; this is separate from advertising tracking.

7. Data hosting

This website is hosted on Cloudflare. When the protected contact form is enabled, Cloudflare Pages Functions processes your enquiry, Cloudflare Turnstile verifies the submission, and Resend processes the message for delivery to our business mailbox. Your name, contact details, and message are included in the enquiry email. Form contents and security tokens are not intentionally logged by the form handler.

These providers may process information internationally. See Cloudflare's privacy policy and Resend's privacy policy. Links to Google Forms, WhatsApp, and social platforms take you to separate services governed by their own privacy notices. Community registration is optional and separate from a client enquiry.

8. Your rights under UK GDPR

You have the following rights regarding your personal data:

• Right of access - request a copy of the data we hold about you.
• Right to rectification - request correction of inaccurate data.
• Right to erasure - request deletion of your data where there is no overriding legal basis to retain it.
• Right to restriction - request we limit how we process your data.
• Right to data portability - receive your data in a structured, machine-readable format.
• Right to object - object to processing based on legitimate interests.

To exercise any of these rights, email info@velocorsecurity.com. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

9. Changes to this policy

We may update this policy periodically. Material changes will be reflected in the "Last updated" date above. Continued use of the site after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or data requests: info@velocorsecurity.com