Privacy notice | SentryIQ

Last updated: 22 September 2026

Who we are

Sentry IQ provides network security consultancy, assessments and security tooling. For the personal information described in this notice, Sentry IQ is the data controller. You can contact us about privacy or exercise your data protection rights by emailing [email protected].

What this notice covers

This notice covers the public SentryIQ website and business enquiries sent to us by email. It does not describe a customer portal, hosted assessment workspace or a public firewall-configuration upload service, because the website does not provide those facilities.

Information we collect

We may process the following limited categories of personal information:

Enquiry information: your name, work contact details, organisation, role and the content of emails you send to us.
Business relationship information: relevant correspondence, meeting notes, proposals and records needed to respond to an enquiry or deliver agreed work.
Basic technical information: IP address, request time, requested page, browser or device information and security events recorded by our hosting and security provider to deliver and protect the website.

Please do not send firewall exports, credentials, logs, packet captures, client identifiers or other sensitive operational content through a website enquiry. Where assessment evidence is needed, we will agree an appropriate offline handling process with you.

How and why we use information

To respond to enquiries and discuss services or products. We rely on legitimate interests to communicate with prospective customers and partners, or on steps requested before entering a contract.
To manage customer and supplier relationships. We rely on contract where processing is necessary to provide agreed services, and legitimate interests for routine business administration and relationship management.
To operate, secure and troubleshoot the website. We rely on legitimate interests in maintaining a reliable website, preventing abuse and investigating security incidents.
To meet legal, regulatory and accounting obligations. We rely on legal obligation where applicable.

Our legitimate interests are to operate and protect our business, answer relevant enquiries, develop professional relationships and improve our services. We consider these uses proportionate and do not use them to make solely automated decisions about you.

Website analytics and cookies

The current website does not use marketing analytics, advertising pixels or non-essential cookies. It does not create customer accounts or take payments. Our hosting and security provider may process basic request and security data needed to serve and protect the site. If we introduce optional analytics, advertising or other non-essential technologies, we will update this notice and provide any consent controls required by law before using them.

Who we share information with

We share personal information only where necessary with:

Cloudflare, which hosts and protects the public website;
Google Workspace, which provides our business email service;
professional advisers, insurers, auditors or public authorities where reasonably necessary or legally required; and
service providers supporting an agreed customer engagement, where appropriate safeguards and instructions are in place.

We do not sell personal information.

International transfers

Some technology providers may process information outside the UK. Where this happens, we use providers that apply an approved transfer mechanism or other safeguards recognised under UK data protection law. You can ask us for more information about the safeguards relevant to your information.

How long we keep information

We keep personal information only for as long as it is needed for the purpose for which it was collected. Enquiry correspondence is normally reviewed and deleted when it is no longer needed for an active or reasonably anticipated business relationship. Records connected with a contract, transaction, dispute or legal obligation may be retained for the applicable limitation, tax or regulatory period. Technical logs are retained for the shortest operational period reasonably required for security, troubleshooting and abuse prevention, subject to our provider's configured retention periods.

Security

We use proportionate technical and organisational measures to protect personal information against unauthorised access, loss, alteration or disclosure. No internet or email system is completely secure, so please use the agreed secure channel when information is commercially sensitive or operationally sensitive.

Your rights

Depending on the circumstances, UK data protection law may give you rights to access, correct, erase or restrict the use of your personal information, to receive certain information in a portable format, and to object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time without affecting earlier lawful processing.

You have the right to object to processing based on our legitimate interests. To make a request, email [email protected]. We may need to verify your identity before completing a request.

Complaints

Please contact us first so we can try to resolve your concern. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority. Visit ico.org.uk/make-a-complaint or call 0303 123 1113.

Children

The website and our services are intended for business users and are not directed at children. We do not knowingly collect children's personal information through the website.

Changes to this notice

We will update this page when our processing changes or when clarification is needed. Material changes will be highlighted here and the date at the top of the notice will be revised.