Baseline Cyber Security is a one-person sole trader (trading name) in London. This notice covers baselinecybersecurity.co.uk and the enquiry and chat channels on it.
What this site collects
The enquiry form takes your name, email, an optional company name, and your message. It is processed by Netlify, which hosts the site; I use it only to reply and to carry out any work we agree, and there is no mailing list. The live chat is a self-hosted Chatwoot instance; messages and any contact details you give it are stored on my server.
The free security checks run in your browser. The email checker sends the domain you enter to Cloudflare's public DNS; the password checker never sends your password, only an unreversible partial hash. Nothing from the tools reaches me.
Netlify keeps standard access logs, including IP addresses, and the site loads fonts from Google, which sees your IP address to serve them. There is no analytics, tracking, or advertising. The lawful basis is taking steps at your request before a contract, performing that contract, and my legitimate interest in running the business securely.
Keeping it and sharing it
Enquiries that don't lead to work are kept for up to 12 months; records of work I carry out are kept for 6 years for tax and legal reasons; chat transcripts for 12 months. I use Microsoft 365 for email, so correspondence is stored there. I don't sell personal data or share it for anyone else's marketing.
Your rights
You can ask me for a copy of what I hold about you, or to correct, delete, or restrict it, or object to how I use it; I will respond within a month. If you are unhappy with how I have handled it, you can complain to the Information Commissioner's Office at ico.org.uk.
Contact
Email privacy@baselinecybersecurity.co.uk, or use the enquiry form and say it is a privacy request.