Privacy policy

1. Information We Collect

We collect the following categories of data:

• Personal information you provide: name, business email, phone number, company and role, submitted through our contact, incident, or engagement-scoping forms.
• Usage data: IP address, browser and device type, referring pages and pages visited, collected to keep the site secure and to improve it.
• Cookies and similar technologies: essential cookies to operate the site and, where you consent, analytics cookies to understand how it is used.

2. How We Use Your Information

• To respond to enquiries, scope engagements, and deliver the security and compliance services you request.
• To operate, secure, and improve our website and protect it against fraud and abuse.
• To send service updates or security advisories where you have opted in.
• To meet legal, audit, and contractual obligations.

3. Legal Bases for Processing

Where the GDPR or UK GDPR applies, we process personal data on the basis of your consent, the performance of a contract with you, our legitimate interests in operating and securing our business, and compliance with legal obligations. Where India's DPDP Act applies, we process personal data on the basis of your consent or other lawful grounds permitted by the Act.

4. Sharing Your Information

We do not sell or rent your personal information. We share it only with trusted providers acting on our behalf, where it is needed to deliver a service you have requested, or where required by law.

Service providers such as cloud hosting, email delivery, and analytics are bound by contract to protect your data and use it only for the purposes we specify. Where engagement deliverables contain client data, that data is handled under the confidentiality and data-processing terms of the relevant engagement agreement.

5. International Transfers

We operate across the UK, USA, EU and India, so your data may be processed in countries other than your own. Where we transfer personal data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms recognised under applicable law.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes described in this Policy, to meet legal, regulatory and contractual requirements, and to resolve disputes. When data is no longer needed, we securely delete or anonymise it.

7. Your Rights

Depending on where you live, you may have rights under the GDPR, the UK GDPR, India's DPDP Act, and other applicable laws. You can exercise these rights by contacting us at contact@intelligencex.org. Your rights may include the ability to:

• Access a copy of the personal data we hold about you.
• Request correction or deletion of your personal data.
• Restrict or object to processing, including direct marketing.
• Withdraw consent at any time, and lodge a complaint with your local data protection authority.

8. Data Security

As a security firm, protecting data is core to what we do. We apply encryption in transit, access controls, network segmentation, logging, and regular security testing to safeguard personal data against unauthorised access, disclosure, or misuse. No method of transmission or storage is completely secure, but we work continuously to reduce risk.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised effective date, and material changes will be highlighted where appropriate. Please review this page periodically to stay informed.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at contact@intelligencex.org.

If you are reporting a confirmed or suspected security incident, please use our 24/7 incident response line at saas@intelligencex.org.