1. Who we are
Dragon Defence Cyber Security Solutions Ltd is the data controller for the personal data described in this policy. For any data protection query, contact us at hello@dragondefence.io or 0300 124 7330.
[Placeholder: add registered company name, company number, registered office address and ICO registration number before publishing.]
2. What data we collect
- Enquiry data — name, work email, phone number, organisation and the content of your message, submitted through our contact or partner forms.
- Engagement data — information you provide when we scope or deliver services to you.
- Technical data — limited information such as IP address and browser type, collected automatically where strictly necessary for security and to operate the site.
3. How we use your data & our lawful basis
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry and providing a quotation | Legitimate interests / steps prior to entering a contract |
| Delivering and administering our services | Performance of a contract |
| Meeting legal, regulatory and accounting obligations | Legal obligation |
| Securing and improving our website | Legitimate interests |
| Sending marketing (only where you have opted in) | Consent |
4. How long we keep it
We keep enquiry data only as long as needed to respond and for a reasonable follow-up period, and engagement data for the duration of our relationship plus any period required by law or our professional and insurance obligations. Test evidence and reports are retained securely in line with our ISO 27001-aligned processes and then securely destroyed.
5. Who we share it with
We do not sell your data. We share it only with trusted service providers (for example secure hosting and email) acting under contract, and with authorities where required by law. Where data is processed outside the UK, we ensure appropriate safeguards are in place.
6. How we protect it
As a cyber security company, protecting data is our profession. We apply technical and organisational measures including encryption, access control, monitoring and staff training to keep personal data secure.
7. Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict or object to processing of your data, the right to data portability, and the right to withdraw consent. To exercise any right, email hello@dragondefence.io. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
8. Cookies
Our website uses only strictly necessary cookies by default. See our Cookie Notice for details.
9. Changes
We may update this policy from time to time. The "last updated" date above reflects the latest version.
This page is a template and does not constitute legal advice. Please have it reviewed by a qualified professional and complete the placeholder details before publishing.