Privacy Policy
1. Who we are
FirewallForGen Ltd is a cybersecurity consultancy registered in England and Wales, trading as FirewallForGen. Our registered office is at 108 Cottingham Road, Hull, HU6 7RZ, United Kingdom. We are the data controller for personal information collected through this website and through the delivery of our services.
Questions about this policy or your personal data can be directed to: [email protected].
2. What personal data we collect
We collect personal data in the following circumstances:
Contact enquiries. When you use our contact form or email us directly, we collect your name, email address, and any information you choose to include in your message. If you provide a phone number or indicate the service you are enquiring about, we collect that too.
Website analytics. If you accept analytics cookies, we collect anonymised data about how pages are accessed, including browser type, approximate location (country level), pages visited, and time spent on pages. This data does not identify you individually.
Service delivery. When we begin working with a client, we may collect additional business contact information, details about your IT environment, and information necessary to conduct a security assessment. This is governed by a separate service agreement.
3. Legal basis for processing
We process your personal data on the following legal bases under UK GDPR:
Legitimate interests (Article 6(1)(f)): Responding to enquiries and communicating with prospective clients about our services represents a legitimate interest that does not override your rights.
Contract performance (Article 6(1)(b)): Where we have agreed to provide services to you, processing your data is necessary to fulfil that contract.
Consent (Article 6(1)(a)): We rely on your consent for non-essential cookies. You can withdraw this consent at any time via the cookie banner on this site.
Legal obligation (Article 6(1)(c)): We may be required to retain certain records for tax or regulatory compliance purposes.
4. How we use your data
We use the data we collect to respond to your enquiries, assess whether and how we can help with your cybersecurity needs, deliver agreed consultancy services, improve this website based on aggregated analytics, and comply with legal and regulatory obligations. We do not use your data for automated decision-making or profiling.
5. Who we share your data with
We do not sell your personal data. We do not share it with third parties for their marketing purposes. We may share data with:
Service providers who help us operate our business — for example, email hosting and website infrastructure providers. These providers process data only on our instructions and are bound by data processing agreements.
Professional advisers such as accountants or solicitors, where required, under obligations of confidentiality.
Regulatory authorities or law enforcement where we are legally required to do so.
6. International transfers
Where any of our service providers are based outside the UK, we ensure that transfers are subject to appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA) or adequacy decisions recognised by the UK Information Commissioner's Office (ICO).
7. Retention
We keep enquiry and contact data for up to 24 months from last contact, unless you have become a client, in which case we retain relevant records for 6 years in line with standard UK business record-keeping requirements. Analytics data is retained in aggregated, anonymised form and not subject to a deletion timeline.
8. Your rights
Under UK GDPR, you have the right to access the personal data we hold about you, request correction of inaccurate data, request erasure of data we no longer need, object to processing based on legitimate interests, request restriction of processing while a dispute is resolved, and receive a portable copy of data you have provided to us.
To exercise any of these rights, email us at [email protected]. We will respond within one month.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
9. Cookies
We use a small number of cookies. Essential cookies are required for the site to function and are set automatically. Analytics cookies are set only with your consent. For full details, see our Cookie Policy.
10. Security
Given the nature of our work, we take data security seriously. Personal data in transit is protected by TLS encryption. Access to contact records is restricted to staff who need it to respond to enquiries or deliver services. We review our data handling practices regularly.
11. Changes to this policy
We may update this policy from time to time. The effective date at the top of this page will be updated when we do. For significant changes, we will note them visibly on this page for 30 days.
12. Contact
FirewallForGen Ltd
108 Cottingham Road
Hull, HU6 7RZ
United Kingdom
[email protected]
+44 1482 449354