Last updated: 7 October 2026
1. Who we are
Vindex Security is an independent cybersecurity consultancy. This policy explains how personal information is handled in connection with this website, enquiries and our services.
[Registered business details, if applicable]
[Confirm the legal entity responsible for processing personal information and the jurisdictions in which it operates.]
2. Information we collect
Depending on how you interact with us, information may include contact details you provide, your organisation and role, and information contained in enquiries or service correspondence.
[Confirm the categories of information actually collected, including any technical website data, cookies, analytics, service-related records and information received from third parties.]
3. How we use your information
Personal information may be used to respond to enquiries, communicate with you, provide agreed services, administer business relationships and meet applicable legal obligations.
[Confirm the actual purposes of processing, including whether information is used for website analytics or marketing. Remove any purposes that do not apply.]
4. Legal bases for processing
Where applicable data protection law requires a legal basis, processing may rely on taking steps at your request before entering into a contract, performing a contract, complying with legal obligations, legitimate interests or consent. The appropriate basis depends on the purpose and circumstances.
[Confirm the legal basis for each processing purpose and identify any legitimate interests relied upon.]
5. How we share information
[Confirm whether information is shared with hosting providers, professional advisers, service delivery partners or other recipients, and describe their roles.]
Where sharing is necessary, disclosures should be limited to the relevant purpose and subject to appropriate contractual or legal safeguards. Information may also need to be disclosed where required by applicable law.
[Confirm whether any information is sold or shared for advertising purposes.]
6. Data retention
Retention periods depend on the purpose for which information is collected and any applicable legal or contractual requirements.
[Specify the actual retention periods or criteria for enquiries, customer records, service-related information and website data, together with deletion or anonymisation practices.]
7. International data transfers
[Confirm whether personal information is transferred or accessed outside the country in which it was collected, including through hosting or service providers.]
If international transfers take place, describe the destinations and applicable safeguards, such as adequacy decisions or approved contractual protections where required by law.
[Insert the actual transfer arrangements and how further information can be requested.]
8. Your data protection rights
Depending on the law that applies and the circumstances, you may have rights to access, correct or erase your personal information; restrict or object to processing; and receive certain information in a portable format. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing. These rights are subject to applicable conditions and exemptions.
To make a request, contact [Business email address]. You may also have the right to complain to a competent data protection authority.
[Identify the relevant supervisory authority after confirming the applicable jurisdiction.]
9. Security
Protecting personal information requires appropriate technical and organisational measures proportionate to the risks. No online system or transmission method can be guaranteed completely secure.
[Confirm and describe the safeguards actually implemented without disclosing sensitive operational details.]
10. Third-party links
This website may contain links to third-party websites. Their privacy practices are governed by their own policies. Review the relevant privacy policy before providing personal information to a third party.
11. Changes to this privacy policy
This policy may be updated to reflect changes in business practices or applicable requirements. An updated version will show a revised “Last updated” date.
[Confirm how significant changes will be communicated where notice is required.]
12. Contact us
For questions about this policy or to exercise your data protection rights, contact:
Vindex Security
[Business email address]
[Registered business details, if applicable]