Who we are
This website is run by Security Ninja Ltd, a company registered in England and Wales (company number 15689079). Our registered office address is on our Companies House record.
We are the controller for the personal data described in this notice. If you have a question about it, or want to exercise any of your rights, email us at [email protected].
We are registered with the Information Commissioner’s Office (ICO) under registration number ZB771188.
What we collect, why, and our lawful basis
When you request a guide from our Ebooks page
We collect the guide you choose, your full name, your email address, your answers to the two consent boxes, the website address the request came from, and the date and time.
- To give you the guide and send related operational updates. Lawful basis: your consent, which you give by ticking the first box.
- To send our newsletter and future security resources, only if you tick the second box. Lawful basis: your consent. You can withdraw it at any time.
When you request a guide, we receive an email notification with these details so we know a request has come in.
When you email us
The “Email us” links on this site open your own email app, addressed to us. We receive whatever you choose to send, including your email address and name. Lawful basis: our legitimate interest in replying to enquiries, or taking steps at your request before entering into a contract.
When you book a call
The “Book a call” links take you to Microsoft Bookings, which we use as part of Microsoft 365. The booking page asks for contact details such as your name and email address, and anything else you choose to add. We use this to arrange and hold the call. Lawful basis: taking steps at your request before entering into a contract, or our legitimate interest in responding to your request.
The AI quick check
Your answers to the AI quick check stay in your browser. They are not sent to us or stored by us.
The Security Ninja Dojo
The Dojo saves your progress and the settings you choose in your browser’s local storage, on your own device. This is not sent to us. You can clear it at any time through your browser settings.
When you visit any page
Like any website, our hosting provider processes technical information when you visit, such as your IP address, the page requested, and your browser details, so that it can deliver the site and protect it from attacks. Lawful basis: our legitimate interest in running a secure website. We count how many times each blog post is viewed; this is a simple total and does not identify you.
We do not sell your personal data, and we do not use it for automated decisions about you.
Who processes it for us
- Cloudflare hosts this website, stores the details from guide requests in its database service, and protects the site.
- Resend sends the email notifications we receive when someone requests a guide. These contain the details you submitted.
- Microsoft provides our email and Microsoft Bookings, as part of Microsoft 365.
- Google provides the fonts used on the Security Ninja Dojo pages. When you open those pages, your browser requests the fonts from Google, which receives your IP address.
- Blockmark Registry provides the Cyber Essentials certificate badge shown on our homepage. When the badge loads, it is fetched from Blockmark’s site, which receives your IP address and browser details.
Links to other sites, such as LinkedIn, take you to services with their own privacy notices. We are not responsible for how they handle your data.
International transfers
Some of these providers may process data outside the UK, including in the United States. Where they do, we rely on the safeguards recognised under UK data protection law, such as the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework.
How long we keep it
We keep personal data only for as long as we need it for the purpose we collected it for, and then delete it.
- Guide requests: until we no longer need them, or until you ask us to delete them.
- Newsletter: until you withdraw your consent. We then stop sending it and take you off our mailing list.
- Emails and enquiries: for as long as we need them to deal with your enquiry and any work that follows.
- Technical data: kept by our hosting provider for a limited period under its own policies.
Your rights
Under UK data protection law, you have the right to:
- ask for a copy of the personal data we hold about you
- ask us to correct data that is wrong or incomplete
- ask us to delete your data
- ask us to restrict how we use it
- object to us using it where we rely on legitimate interests
- ask for data you gave us in a portable format
- withdraw your consent at any time, including to the newsletter, without affecting what we did before
To use any of these rights, email [email protected]. We will reply within one month, and may ask you to confirm your identity first.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or by phone on 0303 123 1113.
Cookies and browser storage
- Our own pages do not set cookies for visitors, and we do not use advertising cookies.
- Our hosting provider, Cloudflare, may set a strictly necessary security cookie to help protect the site from automated traffic.
- The Cyber Essentials badge on our homepage is loaded from Blockmark’s site, which may set its own cookies under its own policy.
- Our private admin area sets a sign-in cookie for our own staff only. It is strictly necessary and lasts up to 12 hours.
- The Security Ninja Dojo uses your browser’s local storage, as described above, only to make the feature you are using work.
Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections to this website and access to stored data limited to the people who need it. Security Ninja Ltd is a Cyber Essentials certified business.
Changes to this notice
We will update this page if how we use personal data changes, and change the date at the top. If a change is significant, we will tell people we hold contact details for.