Privacy Notice

JAG Secure Ltd is the data controller for personal data collected through this website, jagsecure.com. This notice explains what we collect, why we collect it, who we share it with and what rights you have. It was last reviewed on 22 October 2026.

Who we are

JAG Secure Ltd is a penetration testing consultancy registered in England and Wales. Our ICO registration number is ZB760352. You can contact us about anything in this notice by email at info@jagsecure.com, by telephone on 0131 605 6703 or 020 3051 8897, or in writing to our registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.

What we collect and why

Enquiries. When you use the contact form, email us or call us, we collect your name, work email address, company name, the service you are interested in and anything you tell us about your requirements. We use this to respond to you and, if you go ahead, to scope and deliver the work. We rely on taking steps at your request before entering a contract. Otherwise we rely on our legitimate interest in responding to people who contact us.

Clients. If you become a client we hold the contact details, scoping information and correspondence needed to deliver the engagement and to meet our legal and accounting obligations. We rely on performance of the contract and on our legal obligations.

Website security. Our site records IP addresses, request details and blocked activity to protect it from attack. We rely on our legitimate interest in keeping the site secure.

Analytics. Our analytics run on our own server. They record page views and a random identifier in your browser. They do not send data to any third party and do not track you across other websites.

Marketing. If we send you marketing email, you can stop it at any time using the unsubscribe link in the message or by emailing us.

Cookies

Our cookie policy explains the cookies this site uses. The consent banner lets you choose which categories you accept. You can change or withdraw that choice at any time from the banner.

Who we share it with

We use a small number of service providers to run this website and our business: our hosting provider, our email delivery provider for contact form notifications and our business email platform. Fonts and the certification badge on this site are loaded from third party servers, which receive your IP address when a page loads. We do not sell personal data and we do not share it with anyone for their own marketing.

Where a provider processes data outside the UK, the transfer is covered by UK adequacy regulations or the standard contractual safeguards required by UK data protection law.

How long we keep it

Enquiries that do not lead to work are deleted after 24 months. Client records are kept for the length of the engagement and for six years afterwards to meet our legal and accounting obligations. Website security logs are kept for 24 months. Analytics data is held in aggregate and is not linked to you.

Your rights

You have the right to ask for a copy of the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format and to withdraw any consent you have given. To use any of these rights, contact us by any of the routes above. We will acknowledge your request on receipt and act on it without undue delay, in any case within one month. We will confirm to you in writing when it is done.

Withdrawing consent

You can withdraw consent at any time by email to info@jagsecure.com, through the contact form on this website, by telephone on the numbers above, or in writing to our registered office at the address above. Cookie consent can be withdrawn from the consent banner on any page. Consent to marketing email can be withdrawn using the unsubscribe link in any message we send. Withdrawing consent does not affect any processing that took place before you withdrew it.

Complaints

If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Changes to this notice

We will update this notice when our processing changes. The date at the top shows when it was last reviewed.