Privacy notice

What this site collects

This website sets no cookies and runs no advertising or third-party tracking scripts. Fonts, stylesheets, scripts and images are all served from batterysec.com. There is no cookie banner because there is nothing to consent to.

The counters we do keep

We count four things so we know whether the site is working: how often the main call-to-action is clicked, how often an email link is clicked, how often someone starts the contact form, and how often one is submitted.

Those counts are sent to our own server, not to any analytics company. What gets stored is a single number per day, per event, per page — and nothing else. No IP address, no identifier, no session, no ordering, no device or browser information. Two visits by the same person are indistinguishable from visits by two different people, because the data has no field that could tell them apart. It is not possible to reconstruct any individual's behaviour from it, and there is nothing in it we could hand over about you if asked.

If your browser sends Do Not Track or Global Privacy Control, we do not send the counts at all. Neither signal legally requires that for data this coarse; we honour it because a security company's privacy claims should hold up when someone checks them.

Separately, Cloudflare records ordinary server-side traffic statistics for the domain, as it does for any site on its network. That happens at the network layer and needs no code in this page.

There is one exception, and it is worth stating plainly. The contact page loads Cloudflare Turnstile from challenges.cloudflare.com to check that a submission is not automated. It is the only third-party request this site makes. Turnstile is configured not to issue a clearance cookie, and we have verified in-browser that it sets no cookie and writes nothing to local or session storage. It does not track you across other websites. If you would rather not load it at all, email us instead — the address is below and it reaches the same person.

If you use the contact form

We store what you type — your name, work email, organisation, the system type you select and your message — together with the page you submitted from, the referring website's hostname, any UTM campaign parameters in the URL, your browser's user-agent string, the country Cloudflare reports for your connection, and a timestamp.

We also store a truncated one-way hash of your IP address, used solely to rate-limit submissions. We do not store the address itself. The hash is a pseudonymous identifier rather than anonymous data — the IPv4 space is small enough that a determined party with the hash could work back to an address — so we treat it as personal data and delete it on the same schedule as the rest of your enquiry.

This information is used to answer your enquiry. It is not sold, not shared with third parties for their own purposes, and not added to any marketing list. We do not send newsletters.

Where it is stored

Submissions are stored in a Cloudflare D1 database provisioned in Cloudflare's Western Europe region, and the site is served from Cloudflare's network. Cloudflare processes this data on our behalf as a service provider.

How long we keep it

Enquiries are kept for 24 months so that we can pick up a conversation where it left off, then deleted. If an enquiry becomes an engagement, the related records are governed by that engagement's contract instead.

Your rights

You can ask us what we hold about you, ask for it to be corrected, or ask for it to be deleted. Email contact@batterysec.com or use the contact form, quoting the reference shown when you submitted or describing the enquiry. We will action deletion requests within 30 days.

Please do not send sensitive material here

The contact form is for describing the shape of a problem. Do not send network diagrams, credentials, vulnerability details, incident specifics or any other sensitive technical material through it. We will arrange an appropriate secure channel before any of that is exchanged.

Changes

If this notice changes materially we will update the date above. We do not maintain a mailing list, so there is no notification to send.