1. Data Controller

The data controller responsible for this website and any information you submit through it is:

ECHO Pentest
Email: contact@echopentest.com

2. Information Collected

I may collect and process the following types of information:

• Contact details — such as your name, email address, company name and phone number when you use the contact or booking forms.
• Message content — information you choose to provide about your systems, environment or requirements.
• Technical data — basic information such as IP address, browser type, pages visited and time spent on the site, typically via analytics tools.

I do not intentionally collect sensitive personal data through this website. Please avoid sending confidential credentials or highly sensitive information in your first contact message.

3. How Your Information Is Used

I use the information you provide to:

• Respond to your enquiries and provide information about services
• Prepare proposals, scopes of work and engagement documentation
• Manage and deliver agreed services
• Maintain basic records for administration, accounting and legal compliance

Technical and analytics data is used to understand how the website is used and to improve content and usability.

4. Legal Basis for Processing

Depending on the context, personal data is processed on one or more of the following legal bases:

• Consent — for example, when you voluntarily submit a contact form.
• Legitimate interests — such as responding to business enquiries and improving the website.
• Contractual necessity — where processing is needed to prepare or perform a contract with you or your organisation.
• Legal obligations — where retention of certain records is required by law.

5. Data Retention

I keep personal data only for as long as necessary to fulfil the purposes described above, or as required by applicable laws and regulations. This typically means:

• Enquiry emails and project correspondence are kept while there is an active or potential client relationship.
• Engagement documentation and reports may be retained for a longer period where needed for legal or audit reasons.

6. Sharing of Information

I do not sell your data. Information may be shared with:

• Service providers used to host email, files and this website, under appropriate safeguards.
• Professional advisers (for example, legal or accounting), where reasonably necessary.
• Authorities or third parties where required to comply with legal obligations.

Any third parties handling data on my behalf are expected to protect it appropriately.

7. Cookies & Analytics

This website may use cookies and similar technologies to support basic functionality and anonymous usage statistics. Google Analytics or similar tools may be used to understand traffic patterns.

You can adjust your browser settings to control or block cookies if you prefer.

8. Your Rights

Depending on your location and applicable law, you may have rights such as:

• Access to the personal data held about you
• Correction of inaccurate or incomplete data
• Deletion of data in certain circumstances
• Restriction or objection to certain types of processing
• Data portability in some cases

To exercise these rights, you can contact: contact@echopentest.com.

9. Security

Reasonable technical and organisational measures are used to protect data from unauthorised access, alteration or loss. However, no internet-based service can be guaranteed to be completely secure. Please avoid sending highly sensitive information unless a secure channel has been agreed.

10. Changes to This Policy

This policy may be updated from time to time to reflect changes in law or how services are provided. The latest version will always be available on this page.

Contact

If you have any questions about this Privacy Policy, you can email contact@echopentest.com.