Privacy Policy

1. Who we are

About us and how to contact us

UK Pen Testing is a service provided by LevelUp Networks Ltd ("we", "us", "our"). LevelUp Networks Ltd is the data controller for personal data collected through this website.

• Address: 30b Wilds Rents, London SE1 4QG
• Email: hello@levelupnetworks.com
• Phone: 020 3695 7554

If you have any questions about this policy or how we handle your data, please contact us using the details above.

2. What we collect

The personal data we collect

We only collect personal data that you choose to give us, or that is needed to run this website:

• Contact enquiries: your name, email address, phone number (if given), company and the content of your message when you use our contact form or email us.
• Guide downloads: your name, work email address, company, the guide you requested and your consent choice when you download a resource.
• Technical data: your IP address, browser type and device information, which our hosting provider records in server logs for security and to keep the site running.
• Cookie preferences: a record of the choices you make in our cookie banner.

We do not knowingly collect special category data, and this website is not intended for children.

3. How we use it

Why we use your data and our lawful basis

We do not sell your personal data, and we do not use it for automated decision-making or profiling that has legal or similarly significant effects on you.

4. Sharing

Who we share your data with

We only share personal data where it is necessary, and with organisations that are required to keep it secure:

• Our delivery partner, Rootshell Security: if you go ahead with a service, or ask us to arrange a scoping discussion, we share the contact and scoping details needed to deliver that work.
• Service providers: our website hosting provider and our business email and productivity provider (Microsoft 365), who process data on our behalf.
• Professional advisers and authorities: where required by law or to protect our legal rights.

5. International transfers

Data stored outside the UK

Some of our service providers may process data outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement or Addendum approved by the Information Commissioner.

6. Retention

How long we keep your data

• Enquiries that do not lead to a contract: up to 2 years from our last contact with you.
• Guide download records and marketing consent: until you withdraw consent or ask us to delete them, and reviewed at least every 2 years.
• Client and contract records: for the duration of the contract and up to 6 years afterwards, to meet legal and accounting requirements.
• Server logs: kept by our hosting provider for a short period for security purposes.

7. Your rights

Your data protection rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data;
• ask us to restrict how we use your data;
• object to our use of your data where we rely on legitimate interests, including for direct marketing;
• ask for your data in a portable format; and
• withdraw your consent at any time, without affecting anything we did before you withdrew it.

To use any of these rights, email hello@levelupnetworks.com. We will respond within one month. You will not normally be charged.

If you are unhappy with how we have handled your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

8. Cookies

Cookies and similar technologies

We use cookies that are strictly necessary for the website to work, such as remembering your cookie choices and keeping administrators signed in. These do not require consent.

Some pages load content from third parties, such as the Google map on our contact page and web fonts, which may set their own cookies or receive your IP address when they load. Where non-essential cookies are used, we ask for your consent through our cookie banner, and you can change your choice at any time using the cookie settings link on the site.

9. Security

How we protect your data

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls and multi-factor authentication on our systems. LevelUp Networks is certified to ISO 27001 and holds Cyber Essentials.

10. Changes

Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page, with the date it was last updated shown at the top.