DeputySec

Privacy Policy

Last updated: 2026-07-24

This Privacy Policy explains how DeputySec ("DeputySec", "we", "us", or "our") collects, uses, and protects your personal information when you use our website and services (the "Service"). We are committed to protecting your privacy and handling your data in line with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

This policy is provided for general information and is not legal advice.

1. Who we are

DeputySec is the data controller responsible for the personal data processed through the Service. If you have any questions about this policy or how we handle your data, you can contact us at info@deputysec.com.

2. Information we collect

We collect the following categories of personal data:

  • Account information — such as your name, email address, organisation, and password when you create an account.
  • Assessment and content data — information you enter into the Service, such as assessments, responses, risks, tasks, and related notes.
  • Lead information — if you complete a publicly shared assessment, we collect the name, email address, and company you provide in order to send you your results.
  • Usage and technical data — such as your IP address, browser type, device information, and how you interact with the Service, collected through logs and cookies.
  • Communications — records of correspondence when you contact us for support.

3. How we use your information

We use your personal data to:

  • Provide, operate, and maintain the Service;
  • Create and manage your account and authenticate you;
  • Deliver assessment results and respond to your requests;
  • Improve, secure, and troubleshoot the Service;
  • Send service-related and, where permitted, marketing communications;
  • Comply with our legal obligations.

4. Legal bases for processing

Under the GDPR, we rely on the following legal bases:

  • Contract — to provide the Service you have requested;
  • Legitimate interests — to operate, secure, and improve the Service, provided your rights do not override those interests;
  • Consent — for example, for certain marketing communications or non-essential cookies (you may withdraw consent at any time);
  • Legal obligation — where we are required to process data by law.

5. Sharing your information

We do not sell your personal data. We may share it with:

  • Service providers (processors) who host our infrastructure, send emails, or provide analytics, acting on our instructions;
  • Professional advisers and authorities where required by law or to protect our rights;
  • A successor entity in the event of a merger, acquisition, or sale of assets.

6. International transfers

Where personal data is transferred outside the European Economic Area, we ensure an appropriate safeguard is in place, such as the European Commission's Standard Contractual Clauses.

7. Data retention

We keep personal data only for as long as necessary to provide the Service and for legitimate business or legal purposes. When data is no longer needed, we delete or anonymise it.

8. Your rights

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you;
  • Rectify inaccurate or incomplete data;
  • Erase your data ("right to be forgotten");
  • Restrict or object to certain processing;
  • Data portability — receive your data in a portable format;
  • Withdraw consent where processing is based on consent;
  • Lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, contact us at info@deputysec.com.

9. Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. You can control non-essential cookies through your browser settings or any cookie banner we provide.

10. Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, but we work to protect your information and review our safeguards regularly.

11. Children

The Service is not intended for children under 16, and we do not knowingly collect their personal data.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above.

13. Contact

If you have questions or requests regarding this Privacy Policy, contact us at info@deputysec.com.