Privacy Policy

This policy explains how IT Opsec collects and uses personal data when you visit itopsec.com or make an enquiry with us, and sets out your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

IT Opsec (“IT Opsec”, “we”, “us”, “our”) is the data controller for personal data collected through this website.
Company registration number: [COMPANY REGISTRATION NUMBER]
Registered office: [REGISTERED OFFICE ADDRESS]
Contact: info@itopsec.com · +44 7805 646 725

What information we collect

This website does not sell anything online and has no shopping cart or online payment facility. We collect personal data only when you choose to give it to us, mainly when you submit one of our enquiry forms. This can include your name, email address, phone number, employer or organisation, job title, and the details of your enquiry (for example which course or consultancy service you are interested in).

We do not currently operate an email newsletter or marketing mailing list. If that changes, we will update this policy and ask for your consent before adding you to any list.

How we use your information

• To respond to your enquiry and discuss course bookings or consultancy work — our legitimate interest in running our business, and to take steps you request before entering into a contract with us.
• To administer a course booking or consultancy engagement you have asked for, including invoicing — necessary to perform that contract.
• To keep records of enquiries and bookings for accounting and legal purposes — necessary to comply with our legal obligations.
• To maintain the security of this website, for example through our Wordfence security plugin, which processes limited technical data such as IP address to detect and block malicious activity — our legitimate interest in keeping the site secure.

We do not use your information for automated decision-making or profiling, and we do not sell or rent your personal data to any third party.

Who we share it with

We share personal data only with the service providers who help us run this website and respond to enquiries (for example our website hosting provider, [HOSTING PROVIDER], and the providers of the form and security software listed below), and with professional advisers or authorities where we are required to by law. Each of these acts under our instructions and is required to keep your information secure.

Do we use cookies?

A logged-out visit to this website does not set any cookies. We do not use Google Analytics, advertising cookies or any other tracking technology. The only cookies this website can ever set are listed in our Cookie Policy, and they are only ever set for site administrators, during a form submission, or as part of security protection — never to track visitors for advertising or analytics purposes.

International transfers

We aim to keep personal data within the UK and the European Economic Area (EEA). [DETAIL OF ANY SERVICE PROVIDER LOCATED OUTSIDE THE UK/EEA, AND THE SAFEGUARD USED, IF APPLICABLE].

How long we keep your information

We keep enquiry and booking records for [ENQUIRY/BOOKING DATA RETENTION PERIOD], and accounting records for as long as we are required to by UK tax law, before securely deleting them.

Your rights

Under UK GDPR you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data, or restrict how we use it, in certain circumstances;
• object to our use of your data where we rely on legitimate interests;
• ask for your data to be provided to you, or transferred to another organisation, in a portable format; and
• withdraw consent at any time, where we rely on consent.

To exercise any of these rights, contact us at info@itopsec.com.

How to complain

If you are unhappy with how we have handled your personal data, you can complain to us directly at info@itopsec.com and we will look into it. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

Children

This website is intended for business use and is not directed at children. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. Changes will be posted on this page.
This policy was last updated on 2 November 2026.