Privacy Policy

Last updated: 29th June 2026

​

SecuraNova Limited, referred to in this Privacy Policy as “SecuraNova”, “we”, “us” or “our”, is committed to protecting your privacy and handling your personal information in a transparent, secure and responsible way.

​

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, request information about our services, engage with us as a customer, partner, supplier, consultant or prospective employee, or otherwise interact with SecuraNova.

​

1. Who we are

SecuraNova provides specialist security assurance, penetration testing, security validation, configuration review and related cyber security services to customers and channel partners.

For the purposes of applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018, SecuraNova is the controller of the personal information described in this Privacy Policy unless otherwise stated.

Company name: SecuraNova Limited
Company number: 15941545
Registered address: Springfield Caerleon Road, Ponthir, Newport, Wales, NP18 1GZ
Email: support@securanova.com
Website: https://www.securanova.com

If you have any questions about this Privacy Policy or how we use your personal information, please contact us using the details above.

​

2. Personal information we collect

The personal information we collect depends on how you interact with us. It may include:

Information you provide to us

We may collect personal information when you:

• submit an enquiry through our website;

• contact us by email, phone, social media or other communication channels;

• request a proposal, quote, meeting or service information;

• enter into a customer, partner, supplier or consultant relationship with us;

• apply to work with us or join our consultant network;

• attend a meeting, webinar or event involving SecuraNova;

• subscribe to updates, newsletters or marketing communications.

This information may include:

• name;

• job title;

• organisation;

• business email address;

• phone number;

• business address;

• details of your enquiry or request;

• communication history;

• commercial, contractual or billing information;

• professional experience, certifications, CV information or vetting-related information where relevant to consultant or recruitment activity.

​

Website and technical information

When you visit our website, we may automatically collect limited technical information, such as:

• IP address;

• browser type and version;

• device type;

• operating system;

• pages visited;

• referring website or source;

• date and time of visit;

• approximate location derived from technical data;

• information collected through cookies or similar technologies.

This information helps us understand how visitors use our website, improve user experience, maintain website security and measure the effectiveness of our content.

​

Information from third parties

We may receive personal information from third parties, such as:

• channel partners or distributors;

• customers or prospective customers;

• referral partners;

• event organisers;

• publicly available business sources, such as LinkedIn or company websites;

• professional service providers;

• recruitment platforms or background-check providers where applicable.

We only use third-party information where we have a lawful basis to do so.

​

3. How we use your personal information

We may use your personal information for the following purposes:

To respond to enquiries

We use your information to respond to requests submitted through our website or other channels, arrange meetings, provide information about our services and manage pre-sales conversations.

To provide our services

Where you are a customer, partner or supplier, we use personal information to manage our relationship with you, deliver services, coordinate projects, provide reports, manage support requests, and communicate about ongoing or completed work.

To manage commercial relationships

We use personal information to prepare proposals, statements of work, quotes, contracts, purchase orders, invoices and related commercial documentation.

To operate and secure our website

We use technical information to operate, monitor, maintain and secure our website, identify and resolve issues, prevent misuse, and improve website performance.

To improve our services

We may use information about enquiries, service delivery, feedback and website usage to improve our services, processes, customer experience and partner experience.

To send relevant business communications

Where permitted by law, we may use your business contact details to send you relevant updates about SecuraNova, our services, events, thought leadership or partner activity. You can opt out of marketing communications at any time.

To assess consultants, suppliers or job applicants

If you apply to work with us or join our consultant network, we may use your information to assess your suitability, verify experience, manage onboarding, conduct appropriate due diligence and communicate with you about opportunities.

To meet legal, regulatory and security obligations

We may process personal information where necessary to comply with legal obligations, maintain appropriate business records, respond to lawful requests, protect our rights, prevent fraud, or ensure the security and integrity of our operations.

​

4. Our lawful bases for processing

We only use personal information where we have a lawful basis to do so. Depending on the circumstances, our lawful bases may include:

Contract

We may process personal information where it is necessary to enter into or perform a contract with you or your organisation, including providing services, managing projects, issuing invoices and handling contractual communications.

Legitimate interests

We may process personal information where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include responding to business enquiries, developing customer and partner relationships, improving our services, maintaining website security, managing business administration, and sending relevant B2B communications.

Legal obligation

We may process personal information where necessary to comply with legal, tax, accounting, regulatory or reporting obligations.

Consent

Where required, we may rely on your consent, for example for certain cookies, optional marketing communications or other activities where consent is the appropriate lawful basis. You can withdraw consent at any time.

​

5. Marketing communications

We may contact business users with relevant information about SecuraNova, our services, events, insights or partner activity where permitted by law.

You can opt out of marketing communications at any time by using the unsubscribe link in our emails, replying to the message, or contacting us directly at support@securanova.com.

We will not sell your personal information to third parties.

​

6. Cookies and similar technologies

Our website may use cookies and similar technologies to operate effectively, understand website usage, improve performance and support relevant marketing or analytics activity.

Cookies are small text files placed on your device when you visit a website. Some cookies are necessary for the website to function. Others, such as analytics or marketing cookies, may require your consent.

The types of cookies we may use include:

• Strictly necessary cookies: required for core website functionality and security.

• Analytics cookies: help us understand how visitors use our website.

• Functionality cookies: remember preferences or improve user experience.

• Marketing cookies: support relevant communications or campaign measurement, where applicable.

You can manage cookie preferences through your browser settings and, where available, through our website cookie banner or cookie preference tool.

Cookie tools used: not currently applicable

For more information, please see our separate Cookie Policy if one is available.

​

7. Who we share personal information with

We may share personal information with trusted third parties where necessary for the purposes described in this Privacy Policy. These may include:

• IT, hosting, cloud and website service providers;

• CRM, email, marketing and business administration platforms;

• professional advisers, such as accountants, lawyers or insurers;

• payment, finance and accounting providers;

• channel partners, distributors or customers where relevant to a service enquiry or delivery arrangement;

• consultants or subcontractors engaged to support service delivery;

• certification, vetting or background-check providers where applicable;

• regulators, law enforcement agencies or public authorities where required by law.

Where we use third-party service providers, we take steps to ensure they handle personal information securely and only in accordance with our instructions or an appropriate lawful basis.

We do not sell personal information.

​

8. International transfers

Some of our service providers, systems, consultants or business contacts may be located outside the United Kingdom or the European Economic Area.

Where personal information is transferred internationally, we will take appropriate steps to protect it in accordance with applicable data protection laws. This may include using adequacy regulations, approved contractual safeguards, transfer risk assessments or other lawful transfer mechanisms.

​

9. How long we keep personal information

We only keep personal information for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, regulatory, contractual, security or reporting requirements.

Typical retention periods may include:

• website enquiries: retained for as long as needed to respond and manage the business relationship;

• customer, partner and supplier records: retained for the duration of the relationship and for a reasonable period afterwards;

• contractual, finance and invoice records: retained in line with legal, tax and accounting requirements;

• marketing records: retained until you unsubscribe or we determine the information is no longer relevant;

• recruitment or consultant application records: retained for a reasonable period after the recruitment or onboarding process, unless a longer period is required or agreed;

• security and audit logs: retained for a limited period appropriate to the security purpose.

We may anonymise information so that it can no longer identify an individual, in which case we may use it for analytics, reporting or service improvement without further notice.

​

10. How we protect personal information

We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include access controls, secure systems, encryption where appropriate, multi-factor authentication, supplier due diligence, staff and consultant controls, policies and procedures, and monitoring of our systems and processes.

No system can be guaranteed to be completely secure, but we take the protection of personal information seriously and continually review our security practices.

​

11. Your data protection rights

Depending on the circumstances and applicable law, you may have the following rights in relation to your personal information:

• the right to be informed about how your personal information is used;

• the right to access your personal information;

• the right to request correction of inaccurate or incomplete information;

• the right to request deletion of your personal information;

• the right to request restriction of processing;

• the right to object to processing;

• the right to data portability;

• the right to withdraw consent where processing is based on consent;

• the right to complain to a data protection regulator.

These rights are not absolute and may be subject to legal limitations or exemptions.

To exercise your rights, please contact us at support@securanova.com. We may need to verify your identity before responding to your request.

​

12. Complaints

If you have concerns about how we handle your personal information, please contact us first so we can try to resolve the matter.

You also have the right to complain to the UK Information Commissioner’s Office, which is the UK regulator for data protection.

Information Commissioner’s Office
Website: www.ico.org.uk
Telephone: 0303 123 1113

​

13. Links to other websites

Our website may contain links to third-party websites, platforms or resources. We are not responsible for the privacy practices, security or content of those third-party websites. You should review their privacy policies before providing any personal information.

​

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, services, legal obligations or data protection practices.

When we make changes, we will update the “Last updated” date at the top of this page. We encourage you to review this Privacy Policy periodically.

​

15. Contact us

If you have any questions about this Privacy Policy or how we handle personal information, please contact:

SecuraNova Limited
Email: support@securanova.com
Address: Springfield Caerleon Road, Ponthir, Newport, Wales, NP18 1GZ