Skip to content
Sovereign SecureSovereign Secure

Legal

Sovereign Secure Privacy Policy

Last updated: 13 October 2026

This Sovereign Secure privacy policy explains how Sovereign Secure Limited collects, uses, shares and protects your personal information when you use this website or our services, and the rights you have under UK data protection law. Sovereign Secure Limited is the controller of the personal information described here. Your use of this website is also governed by our terms and conditions.

Our contact details

Sovereign Secure Limited (company number 08334453), registered with the ICO
16 Whalley Road, Accrington
Lancashire, BB5 1AA
+44 161 523 5276
[email protected]

The type of personal information we collect

We currently collect and process the following information:

  • Personal identifiers, contacts and characteristics (for example, name and contact details).
  • What you tell us when you send an enquiry: your name, job title, company, email address, phone number and message. On our Cyber Essentials scoping questionnaire and penetration testing quote forms, this also includes details about your organisation and the scope of the work, such as employee and device counts. The quote form asks for counts only, never IP addresses or target URLs.
  • Technical information that our hosting and security provider processes to deliver and protect this website, such as your IP address and browser type.
  • Information in cookies on our websites. This website does not set analytics, advertising or tracking cookies (see our Cookie Policy).
  • We may also collect other information as part of the services we deliver. This will be specifically covered under contracts and proposals with our clients.

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

  • Information about you that you provide directly to us by filling in your details on our contact form, scoping questionnaire or quote form.
  • Information that we need in order to deliver services that you have asked us to deliver.
  • Contact details to provide you with marketing, information about our activities and services.
  • Any other information relating to you which you may provide to us.

How we use your information

We use the information that you have given us in order to:

  • Ensure that the content in our websites is presented in the most effective manner.
  • Carry out our obligations arising from any contracts entered between you and Sovereign Secure Limited.
  • Provide you with information or services that you request from Sovereign Secure Limited or which we feel may interest you, where we are legally entitled to do so.
  • Notify you about changes to our service.
  • Enable us to comply with any legal or regulatory requirements.

Sharing information

We may share this information with:

  • Technology providers: as part of the service we provide you, Sovereign Secure Limited may disclose personal data as necessary, including to the providers that host and protect this website and deliver our email, which process it on our behalf.
  • Card brands: as part of the service we provide you, Sovereign Secure Limited may disclose personal data as necessary.
  • Legal and regulatory bodies, where we are under an obligation to disclose your personal data.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for holding your information are:

  • Your consent. You can remove your consent at any time. You can do this by contacting us by email: [email protected]
  • We have a contractual obligation. In doing business with us we will need to hold personal data to fulfil our contractual obligations and will keep you updated on our services.
  • We have a legitimate interest. Where you have contacted us or given us your information in order to receive information, feedback or perform some tasks for you (for example, made an enquiry or raised a complaint). This need to process your personal information for our legitimate interests will only be valid where our legitimate interests are not overridden by your data protection interests or fundamental rights and freedoms.

How we store your personal information

Your information is securely stored.

We will store information about you in our data systems only for as long as we need it and only for the purpose for which we collected it, which is as follows:

  • If you have used our services, we will retain and process information about you. Should you wish for us to delete your data, you have the option to ask us to do so. We will either stop sending you emails, or delete your data as requested.
  • We will hold details for a primary contact for any ongoing services or contracts for as long as there is a legitimate interest for us to do so.
  • Personal data gathered as part of the delivery of professional or managed services about you, or employees or customers will be maintained for at least the minimum documented period as defined by regulation and/or legislation.
  • Data gathered by consent will be held until that consent is removed or revoked.
  • Personal data linked to the processing of insurance claims, subject access requests, disputes, disciplinary or police matters will only be kept for as long as it is necessary for those purposes, as each is applicable.

Your data protection rights

Under data protection law, you have rights including:

  • Your right of access: you have the right to ask us for copies of your personal information.
  • Your right to rectification: you have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
  • Your right to erasure: you have the right to ask us to erase your personal information in certain circumstances.
  • Your right to restriction of processing: you have the right to ask us to restrict the processing of your personal information in certain circumstances.
  • Your right to object to processing: you have the right to object to the processing of your personal information in certain circumstances.
  • Your right to data portability: you have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at [email protected] if you wish to make a request.

Changes to the Sovereign Secure privacy policy

We may update this policy from time to time as shown below. We will notify you of the changes where required by applicable law to do so.

Last modified on 13 October 2026 (ICO complaint details updated; enquiry form, website hosting and cookie details added).

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at [email protected].

You can also complain to the ICO (the Information Commission’s Office, which took over from the Information Commissioner’s Office on 30 September 2026) if you are unhappy with how we have used your data. The ICO moved its head office from Wilmslow to Manchester in September 2026, so use the current contact details on its website rather than older addresses.

How to complain to the ICO: ico.org.uk/make-a-complaint

ICO website: ico.org.uk