Privacy Policy
How SecuriCentrix handles personal information.
This Privacy Policy explains how we collect and use personal information when you visit our website, contact us, or enquire about our services.
Last updated: 7 October 2026
1. Who we are
SecuriCentrix Ltd, registered in Ireland under company number 484787, owns SecuriCentrix (Pty) Limited in South Africa. Together, they are referred to in this policy as "SecuriCentrix", "we", "us" and "our".
SecuriCentrix Ltd is the data controller for all website enquiry processing activities.
Registered address: SecuriCentrix Ltd, 5 Merrion Row, Dublin, D02 E797, Ireland.
For questions about this policy, or to exercise your data protection rights, contact our Data Protection Officer at [email protected]. For general service enquiries, contact [email protected].
This policy covers our website and enquiry handling. Where we process personal information during a client engagement, separate privacy information or contractual data processing terms may apply.
2. Information we collect
Information you provide
When you submit an enquiry or contact us, we may collect:
- Your name and work email address.
- Your company or organisation.
- The service or subscription you are interested in.
- Your message and any other information you choose to include.
- Telephone or other contact details you provide in later correspondence.
- Records of our communications with you.
Please do not submit passwords, payment-card details, special category or other sensitive personal information, or confidential incident evidence through the enquiry form. Contact us first to arrange a suitable method of sharing sensitive material.
Information collected when you use the website
Our website is hosted on Cloudflare Pages, and our enquiry form is provided by HubSpot. When you visit the website or load the form, these providers may process technical information such as your IP address, browser and device details, request logs, and online identifiers. If you consent to analytics cookies, HubSpot's tracking code records the pages you visit on our website and can link that activity to an enquiry you submit. If you consent to marketing cookies, the LinkedIn Insight Tag lets LinkedIn measure our LinkedIn advertising and give us aggregated reports about visitors, such as industry and job function. See our Cookie Policy.
3. How we use your information
| Purpose | Lawful basis under the GDPR |
|---|---|
| Responding to enquiries, providing requested information, and arranging consultations | Our legitimate interests in responding to business enquiries; or steps you request before entering into a contract |
| Communicating with representatives of prospective and existing clients | Our legitimate interests in managing business relationships |
| Delivering services under a contract with you | Performance of a contract |
| Protecting the website, preventing misuse, and maintaining security | Our legitimate interests in keeping our services secure and reliable |
| Analytics (HubSpot tracking) and marketing measurement (LinkedIn Insight Tag) | Your consent, which you may withdraw at any time through Cookie settings |
| Recording your cookie choices so we can show that consent was given | Legal obligation |
| Meeting legal and regulatory obligations | Legal obligation |
| Sending optional marketing communications, where we do so | Your consent where required by law, which you may withdraw at any time |
Where we rely on legitimate interests, we balance those interests against your rights and reasonable expectations. Providing enquiry information is voluntary, but we need enough contact details and information about your request to respond.
We do not use enquiry information to make decisions based solely on automated processing that produce legal or similarly significant effects for you.
4. Who we share information with
- SecuriCentrix staff who handle enquiries or deliver the requested services.
- HubSpot, which provides our enquiry form and customer relationship management system.
- Cloudflare, which hosts and delivers our website.
- Usercentrics (Cookiebot), which records your cookie choices.
- LinkedIn Ireland Unlimited Company, only if you consent to marketing cookies. We and LinkedIn are joint controllers only for collecting this data on our website and sending it to LinkedIn. LinkedIn alone is responsible for what it does with the data afterwards, as described in its EU privacy notice. You can exercise your rights with us or with LinkedIn.
- Other service providers that support our business, such as email, file storage, IT support and accounting providers.
- Professional advisers, regulators, courts or public authorities, where disclosure is necessary and lawful.
Service providers that process personal information on our behalf are bound by contractual obligations to protect it and to use it only on our instructions.
5. International transfers
Website enquiry information is held by SecuriCentrix Ltd in Ireland and is not sent to SecuriCentrix (Pty) Limited in South Africa. Our service providers may process it outside the European Economic Area, including in the United States.
Where we transfer personal information outside the European Economic Area, we use a recognised legal mechanism, such as an adequacy decision or the European Commission's Standard Contractual Clauses, together with any necessary supplementary measures.
| Recipient | Where data is processed | Safeguard |
|---|---|---|
| HubSpot | Our HubSpot account is hosted in HubSpot's EU data centre in Germany. HubSpot, Inc. in the United States and its sub-processors may access data to provide the service. | EU-U.S. Data Privacy Framework, with Standard Contractual Clauses in HubSpot's data processing agreement |
| Cloudflare | Cloudflare's global network, including the United States | EU-U.S. Data Privacy Framework, with Standard Contractual Clauses in Cloudflare's data processing addendum |
| Usercentrics (Cookiebot) | European Union and European Economic Area | No transfer outside the EEA |
| LinkedIn Ireland Unlimited Company, which may transfer data to LinkedIn Corporation in the United States | Safeguards put in place by LinkedIn, as described in its privacy notice |
The Standard Contractual Clauses used by HubSpot and Cloudflare are published in their data processing agreements: HubSpot data processing agreement and Cloudflare Standard Contractual Clauses. To request a copy of any of these safeguards, email our Data Protection Officer at [email protected].
Where SecuriCentrix (Pty) Limited shares personal information with us in Ireland, it does so in line with section 72 of South Africa's Protection of Personal Information Act (POPIA).
6. How long we keep information
We keep personal information only for as long as needed for the purpose it was collected, taking account of any ongoing relationship, our legal obligations, and the establishment, exercise or defence of legal claims.
| Information | Retention period |
|---|---|
| Enquiries that do not lead to an engagement | 2 years after our last contact with you |
| Client contact and correspondence records | For the duration of the relationship and 6 years after it ends, to meet legal, tax and contractual obligations and to deal with any claims |
| Marketing records, where applicable | Until you unsubscribe or object, or 2 years after you last engage with our communications. If you opt out, we keep your email address on a suppression list so that we do not contact you again |
| Cookie consent records held by Cookiebot | 12 months, then deleted by Cookiebot |
| Website and security logs | Cloudflare and HubSpot keep limited request and security logs under their own retention schedules. Logs we keep to investigate a security incident are kept for up to 12 months after the investigation closes |
These periods apply to copies held in HubSpot, email inboxes, other systems and backups.
7. How we protect information
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure, selected according to the information and risks involved. No method of internet transmission or storage can be guaranteed to be completely secure.
8. Your rights
Depending on the applicable law and your circumstances, you may have the right to:
- Access the personal information we hold about you.
- Have inaccurate information corrected.
- Have information deleted.
- Restrict our processing.
- Receive a portable copy of information you provided to us.
- Object to processing based on legitimate interests, and to object at any time to direct marketing.
- Withdraw consent, where processing relies on consent, without affecting processing carried out before withdrawal.
To make a request, email [email protected]. We may ask for information to verify your identity. We will respond within the period required by applicable law.
9. Complaints
If you have concerns, please contact our Data Protection Officer first so we can try to resolve them. You also have the right to complain to a supervisory authority:
- Ireland: Data Protection Commission
- South Africa: Information Regulator, where POPIA applies
- Another competent supervisory authority in the country where you live or work, where applicable
10. Cookies and external websites
For information about cookies and similar technologies, see our Cookie Policy. Our website links to external websites, including social networks. Those websites have their own privacy policies, and we are not responsible for their content or practices.
11. Changes to this policy
We may update this policy when our services, processing or legal obligations change. The current version will always be published on this page with its revision date.