Privacy Policy

Last updated: [DATE] · Draft template — have it reviewed before publishing

1. Who we are

FourTwoCMD (“we”, “us”, “our”) is a DevSecOps consultancy operating this website at fourtwocmd.io. For the purposes of UK data protection law, we are the data controller for personal data collected through this site.

Registered address: [ADDRESS]. Company number: [NUMBER]. For any privacy question, contact us at hello@fourtwocmd.io.

2. What data we collect

Information you give us. When you complete the enquiry form or email us, we collect the details you provide — typically your name, work email address, company, and the content of your message.

Information collected automatically. Our hosting and form providers may record limited technical data, such as IP address, browser type, and timestamps, to deliver and secure the service. This site does not use advertising or tracking cookies. [If you add analytics such as Google Analytics or Plausible, describe it here.]

3. How we use your data and our legal basis

• To respond to your enquiry and take steps at your request before entering into a contract — legal basis: our legitimate interests and pre-contract steps.
• To provide and improve our services where you become a client — legal basis: performance of a contract and legitimate interests.
• To keep the website secure and prevent misuse — legal basis: our legitimate interests.

4. Who we share it with

We do not sell your personal data. We share it only with service providers who help us operate — for example our website host (Amazon Web Services), our form-handling provider [e.g. Formspree], and our email provider. These providers process data on our behalf under appropriate agreements.

Where a provider processes data outside the UK, we rely on appropriate safeguards such as UK-approved standard contractual clauses or adequacy decisions.

5. How long we keep it

We keep enquiry data for as long as needed to respond and, where relevant, to manage our working relationship, and then for a reasonable period to meet legal and business requirements. [Specify your retention period, e.g. 24 months after last contact.] After that we delete or anonymise it.

6. Your rights

Under UK data protection law you have the right to access, correct, delete, restrict, or object to our use of your personal data, and the right to data portability. Where we rely on consent, you can withdraw it at any time. To exercise any of these, email hello@fourtwocmd.io.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

7. Security

We take reasonable technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. No method of transmission over the internet is completely secure, but we work to protect your information and review our controls regularly.

8. Third-party links

This site links to third-party sites such as LinkedIn. We are not responsible for the content or privacy practices of those sites; please review their own policies.

9. Changes to this policy

We may update this policy from time to time. The latest version will always be posted on this page with a revised “last updated” date.

10. Contact

Questions about this policy or your data? Email hello@fourtwocmd.io.