Privacy Policy
How SecAI Solutions collects, uses and protects personal information submitted through this website.
Last updated:
Template — requires legal review before launch. This page is a structured starting point drafted for a consulting website that collects contact-form submissions and privacy-friendly analytics. It is not legal advice. Have it reviewed against the jurisdictions you operate in (for example UK/EU GDPR, PIPEDA in Canada, India’s DPDP Act) and complete every
[bracketed]item before publishing.
Who we are
[Add registered legal entity name] (“we”, “us”) operates the website at
secaisolutions.com.
Data controller contact: [Add business email]
Registered address: [Add registered address, if required in your jurisdiction]
Data protection contact / DPO: [Add contact, or state that no DPO is appointed]
What we collect
Information you give us. When you submit the contact form we collect your name, business email address, company name, country or region, area of interest and the content of your message. We also record the time of submission.
Information collected automatically. Our hosting provider records standard technical information such as IP address, user agent and requested URL for security, abuse prevention and reliability purposes. If website analytics are enabled, they are configured to be privacy-preserving and do not use cookies to track individuals across sites. See our Cookie Notice.
Information we do not collect. We do not run advertising trackers, we do not sell personal information, and we do not build marketing profiles from your visit.
Why we use it, and on what basis
| Purpose | Data used | Lawful basis (UK/EU GDPR) |
|---|---|---|
| Responding to your enquiry | Contact form submission | Legitimate interests / steps prior to entering a contract |
| Providing consulting services | Contact and engagement records | Contract performance |
| Protecting the site from spam and abuse | Technical data, anti-bot signals | Legitimate interests |
| Understanding aggregate site usage | Aggregated analytics | Legitimate interests |
| Meeting legal and accounting obligations | Engagement records | Legal obligation |
Anti-spam processing
Contact form submissions are checked with [Cloudflare Turnstile / your chosen service] to distinguish humans from automated traffic. This processing is
limited to abuse prevention.
Sharing
We share personal information only with service providers that operate this site and our business communications:
- Hosting and network security: Cloudflare
- Email delivery:
[Add email provider, e.g. Resend / Amazon SES / Google Workspace] - Analytics:
[Add analytics provider, or state "none"] - Scheduling:
[Add scheduling provider, or state "none"]
We do not sell or rent personal information. We may disclose information where required by law.
International transfers
Our providers may process data outside your country. Where required, transfers
rely on appropriate safeguards such as Standard Contractual Clauses.
[Confirm the specific mechanism with your legal adviser.]
Retention
Enquiry correspondence is retained for [Add retention period, e.g. 24 months]
from the last contact, unless a client relationship begins, in which case
engagement records are retained for [Add period] to meet contractual, tax and
professional obligations.
Your rights
Depending on where you live, you may have the right to access, correct, delete,
restrict or object to processing of your personal information, to data
portability, and to withdraw consent where processing relies on it. To exercise
any of these, contact [Add business email]. You also have the right to
complain to your local data protection authority.
Security
We apply the practices we recommend to clients: encryption in transit, least-privilege access to systems holding enquiry data, security headers and content security policy on this site, and validated, rate-limited form handling. No system is perfectly secure, and we make no guarantee of absolute security.
To report a security issue with this website, see our Responsible Disclosure policy.
Children
This site is intended for business audiences and is not directed at children.
Changes
We will update this page when our practices change and revise the date below.
Last updated: 14 August 2026