Privacy notice – Ask the CISO
Who we are
Sentinel42 Ltd (Company No. 17286468, registered office 66 Paul Street, London EC2A 4NA) is the controller for the personal data you submit through this page. Contact our Data Protection Officer at hello@sentinel42.com.
What we collect and why
Your name, work email, organisation (if given), topic and the question you send. We use them to answer your question and, where useful, to follow up about it. Our lawful basis is legitimate interests (UK GDPR Art 6(1)(f)) – responding to an enquiry you have chosen to send us.
If you tick the optional box, we will also send you occasional Sentinel42 security insights by email, based on your consent (UK GDPR Art 6(1)(a); PECR reg 22). You can withdraw consent at any time using the unsubscribe link or by emailing us.
Please do not send special category data, passwords, keys or details of live vulnerabilities.
Who we share it with
Submissions are delivered to us through our form provider, Web3Forms, and held in our Microsoft 365 email environment. These providers act as our processors under written terms. Where a provider processes data outside the UK, we rely on an appropriate transfer safeguard under UK GDPR Chapter V. We do not sell your data.
How long we keep it
We keep enquiries for up to 24 months after our last contact with you, then delete them, unless you become a client, in which case our client records retention applies.
Your rights
You can ask for access to, correction or deletion of your data, object to our use of it, or restrict it. Email hello@sentinel42.com. If you are unhappy with how we handle your data, please tell us first; you can also complain to the Information Commissioner's Office at ico.org.uk.
Advice disclaimer
Answers are general guidance based on the information you provide and are not legal advice. They do not create a client relationship unless agreed in writing.