Privacy policy
This policy explains what personal data SecureBridge collects when you visit this website or get in touch, why we use it, and the rights you have. We keep it short and collect as little as we can.
Who we are
SecureBridge Solutions LLC ("SecureBridge", "we", "us") is the controller of the personal data described in this policy. For anything related to privacy or your data, email us at hello@sirasec.io.
What we collect
When you contact us. If you email us or use the contact form, we receive your name, email address, company name if you give it, and whatever you choose to write in your message. The contact form doesn't send data to us directly. It opens your own email app, and nothing is stored by this website.
When you become a client. We keep the business contact details of the people we work with, along with contracts, invoices and correspondence about the engagement.
When you visit the website. Like any website, our hosting provider automatically records basic technical information in server logs, such as your IP address, browser type, the page requested and the time of the request. We use this only to keep the site secure and working.
No cookies or tracking. This website doesn't use cookies, analytics, advertising tags or social media trackers. Our fonts are served from our own server, so visiting the site doesn't share your details with third-party font providers.
Why we use it and our legal basis
| Purpose | Legal basis under the GDPR |
|---|---|
| Replying to your enquiry and discussing how we might work together | Taking steps at your request before entering a contract (Art. 6(1)(b)), or our legitimate interest in responding to business enquiries (Art. 6(1)(f)) |
| Delivering services to clients and managing the relationship | Performance of a contract (Art. 6(1)(b)) |
| Invoicing, accounting and tax records | Compliance with a legal obligation (Art. 6(1)(c)) |
| Keeping the website secure and working through server logs | Our legitimate interest in protecting our website and visitors (Art. 6(1)(f)) |
We don't sell your personal data, use it for automated decision-making or profiling, or send marketing emails unless you've asked us to.
Who we share it with
We only share personal data where we need to, and only with:
- service providers who help us run the business, such as our email, hosting and accounting providers, who may only use it to provide their service to us;
- professional advisers such as accountants and lawyers, where needed;
- public authorities, where the law requires it.
International transfers
Some of our service providers may process data outside the European Economic Area or the UK. When that happens, we make sure the transfer is protected, for example by an adequacy decision (including the EU-U.S. Data Privacy Framework) or the European Commission's Standard Contractual Clauses.
How long we keep it
- Enquiries that don't lead to work together: up to 12 months after our last contact, then deleted.
- Client records: for the length of the engagement, then for as long as tax and accounting law requires.
- Server logs: no longer than 30 days, unless we need them to investigate a security incident.
How we protect it
Security is our business, and we apply the same standards to our own data that we recommend to clients. That includes encrypted connections, multi-factor authentication, least-privilege access and keeping only what we need.
Data we handle for clients
During an engagement we may see personal data held in a client's systems. In that case we act on the client's behalf and under their instructions, as set out in our engagement agreement and a data processing agreement where one is required. That processing is covered by those agreements, not by this policy.
Your rights
Under the GDPR and the UK GDPR you can ask us to:
- give you a copy of the personal data we hold about you;
- correct data that is inaccurate or incomplete;
- delete your data;
- restrict how we use your data, or object to our use of it based on legitimate interests;
- send your data to you or another organisation in a portable format;
- stop using your data where you previously gave consent, at any time.
To use any of these rights, email hello@sirasec.io. We'll reply within one month and won't charge you. If you're unhappy with how we've handled your data, you can complain to the data protection authority in the country where you live or work. We'd appreciate the chance to put things right first.
Children
Our website and services are for businesses and aren't directed at children. We don't knowingly collect data from anyone under 16.
Changes to this policy
If we change how we use personal data, we'll update this page and the date at the top.