Privacy Policy

Last updated: 5 September 2026

1. Who we are

FourTwoCMD (“we”, “us”, “our”) is a DevSecOps consultancy operating this website at fourtwocmd.io. For the purposes of UK data protection law, we are the data controller for personal data collected through this site.

For any question about this policy or your personal data, contact us at hello@fourtwocmd.io.

2. What data we collect

Information you give us. When you email us or otherwise get in touch, we collect the details you provide — typically your name, work email address, company, and the content of your message.

Information collected automatically. Our hosting and form providers may record limited technical data, such as IP address, browser type, and timestamps, to deliver and secure the service. This site does not use advertising or tracking cookies.

3. How we use your data and our legal basis

• To respond to your enquiry and take steps at your request before entering into a contract — legal basis: our legitimate interests and pre-contract steps.
• To provide and improve our services where you become a client — legal basis: performance of a contract and legitimate interests.
• To keep the website secure and prevent misuse — legal basis: our legitimate interests.

4. Who we share it with

We do not sell your personal data. We share it only with service providers who help us operate — for example our website host (Amazon Web Services) and our email provider. These providers process data on our behalf under appropriate agreements.

Where a provider processes data outside the UK, we rely on appropriate safeguards such as UK-approved standard contractual clauses or adequacy decisions.

5. How long we keep it

We keep enquiry data for up to 24 months after our last contact, unless we need to keep it longer to meet legal or business requirements, after which we delete or anonymise it.

6. Your rights

Under UK data protection law you have the right to access, correct, delete, restrict, or object to our use of your personal data, and the right to data portability. Where we rely on consent, you can withdraw it at any time. To exercise any of these, email hello@fourtwocmd.io.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

7. Security

We take reasonable technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. No method of transmission over the internet is completely secure, but we work to protect your information and review our controls regularly.

8. Third-party links

This site links to third-party sites such as LinkedIn. We are not responsible for the content or privacy practices of those sites; please review their own policies.

9. Changes to this policy

We may update this policy from time to time. The latest version will always be posted on this page with a revised “last updated” date.

10. Contact

Questions about this policy or your data? Email hello@fourtwocmd.io.