Privacy

Summary

We set no cookies and use no analytics scripts, advertising, or tracking technology. Our hosting provider may set strictly necessary security cookies to protect the site from automated abuse, which Cloudflare describes as not used for tracking (Cloudflare cookies). The site has no forms. We collect what is needed to deliver the site and to answer email you choose to send, and nothing else.

What we collect

Request data. When you visit, our hosting provider processes request data such as your IP address and browser type to deliver the site and protect it from abuse. Cloudflare also receives the error reports your browser may send it when a page fails to load.

Email you send. If you email us, we keep the message as business correspondence so we can reply and keep a record of our dealings with you. We do not add you to a mailing list. We do not use it to train AI models.

Service providers

Our hosting provider and our email provider process this information on our behalf, under their data protection terms. A current list of our service providers is available on request, and we keep it current. Before a provider in a new role handles your information, we add that role here.

Sensitive information

Please keep client confidences, passwords or other credentials, and details of a security incident out of a first email. If you do send them, we treat them as confidential and, if no engagement follows, delete them within the 24-month period set out below, unless law, a legal hold, or an agreement with you requires otherwise.

How long we keep it

Correspondence that does not lead to an engagement is deleted within 24 months of our last contact, unless law, a legal hold, or an agreement with you requires otherwise. Records of an engagement are kept as its engagement terms set out.

Your choices and rights

Wherever you live, you can ask us for access to the information we hold about you, for a copy of it, to correct it, or to delete it. Email hello@securityrealitycheck.com. We may ask you to confirm the request is yours. We respond within 45 days, and if we need longer we tell you why and extend once, by up to 45 more days. We delete on request unless law, a legal hold, or an agreement with you requires otherwise, and if so we tell you what we kept and why. Asking never affects how we treat you.

We do not sell or share personal information, and we do not use it for targeted advertising.

Client engagement material

Information handled during a paid engagement is governed by the mutual non-disclosure agreement and engagement terms signed for that work, not by this page. Client material is never published. Any use of artificial intelligence to process client material, and the providers involved, are set out in those engagement terms before work begins.

Security and incidents

We protect the information we hold with reasonable administrative and technical safeguards. If a breach affects your information, we notify you as required by law and by any agreement we have with you.

Where information is processed

Information is processed in the United States and in other regions where our service providers operate.

Children

This site is not directed at children under 13, and we do not knowingly collect their information.

Changes

A material change to this policy applies only to information collected after the date of the change. Every revision is dated and listed below.

• 12 September 2026. First version.
• 23 September 2026. Described our service providers by role, with a current list available on request; disclosed the hosting provider's security cookies and browser error reports; committed not to use email to train AI models; set a retention period; said where information is processed, including outside the United States; asked that sensitive information not be sent in a first email; and extended access, copy, correction, and deletion rights to everyone.
• 7 October 2026. Clarified the hosting-provider description with an explicit subject. No changes to data-handling practices or privacy rights.

Contact

If you have a question about this policy or your information, email hello@securityrealitycheck.com.