Introduction
Prism Security ("we", "us", or "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you visit our website or use our services.
We are based in the United Kingdom and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Information We Collect
Information you provide
When you contact us through our website, we collect:
- Your name
- Email address
- Company name (if provided)
- Phone number (if provided)
- The contents of your message
Information collected automatically
We use privacy-respecting analytics that do not use cookies or track you across websites. We may collect:
- Pages you visit on our website
- How you arrived at our website (referrer)
- Your general geographic location (country level)
- Device type and browser
This data is aggregated and cannot be used to identify you personally.
How We Use Your Information
We use the information we collect to:
- Respond to your enquiries and provide requested information
- Deliver the services you have engaged us for
- Send you relevant updates about our services (with your consent)
- Improve our website and services
- Comply with legal obligations
Legal Basis for Processing
We process your personal data based on:
- Consent: When you submit a contact form or subscribe to communications
- Contract: When necessary to deliver services you have engaged us for
- Legitimate interests: To improve our website and understand how visitors use it, provided this doesn't override your rights
- Legal obligation: When required by law
Data Sharing
We do not sell your personal information. We may share your data with:
- Service providers: We use Web3Forms to process contact form submissions. They act as a data processor on our behalf.
- Professional advisers: Such as lawyers or accountants when necessary
- Legal authorities: When required by law or to protect our rights
We do not transfer your data outside the UK or European Economic Area unless appropriate safeguards are in place.
Data Retention
We retain your personal information for as long as necessary to:
- Fulfil the purposes for which it was collected
- Comply with legal, accounting, or reporting requirements
- Resolve disputes and enforce our agreements
Contact form submissions are typically retained for up to 2 years unless you become a client, in which case data is retained for the duration of our relationship plus 6 years for legal compliance.
Your Rights
Under UK GDPR, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your data in certain circumstances
- Restriction: Request we limit how we use your data
- Portability: Request transfer of your data to another service
- Object: Object to processing based on legitimate interests
- Withdraw consent: Where processing is based on consent, withdraw it at any time
To exercise any of these rights, please contact us using the details below.
Cookies
Our website uses minimal cookies necessary for basic functionality. We do not use tracking cookies or third-party advertising cookies.
If we use analytics, we use privacy-respecting solutions that do not require cookie consent under UK GDPR.
Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security reviews.
However, no method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read the privacy policies of any website you visit.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.
We encourage you to review this policy periodically to stay informed about how we protect your information.
Contact Us
If you have any questions about this privacy policy or our data practices, please contact us:
- Email: hello@prismsecurity.co.uk
- Website: prismsecurity.co.uk/contact
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. Visit ico.org.uk for more information.