Our commitment to privacy
Firevault Limited exists to protect what matters most. That commitment applies not only to the data and digital assets you trust us with, but also to the personal information you share with us when you visit our website, use our assessment tools, create an account, or engage with our services. This Privacy Charter explains, in clear terms, what we collect, why we collect it, how it is used, and how it is protected.

Who we are
Firevault Limited (Company Number 16320803) is registered in England and Wales, with its registered office at 71–75 Shelton Street, London, WC2H 9JQ. We act as the data controller under the UK General Data Protection Regulation and the Data Protection Act 2018. Any questions about this Charter or your personal data can be directed to [email protected].

When this Charter applies
This Privacy Charter applies whenever you visit www.fire-vault.com, use the Firevault Data & Digital Asset Value & Risk Assessment, create an account or sign in (including via Google), contact us, book a session, request information, or otherwise engage with Firevault products or services.

Information you choose to share
When you interact with Firevault, you may choose to provide personal information such as your name, email address, company, role, and contact details. This typically happens when you complete enquiry forms, book a session, request information, or create an account. We also collect the content of any messages you send us so that we can respond properly and provide the support or information you request.

Information collected through the Assessment
If you use the Firevault Data & Digital Asset Value & Risk Assessment, we collect the responses you provide in order to generate your results. This may include the type of role you identify with, the categories of data you are responsible for, where that data is stored, your recovery and security confidence, and optional scale information such as income bands, asset bands, turnover bands, or data volume ranges. From these inputs, we generate a risk score, a risk profile, an indicative impact range, and a recommendation for Firevault Vault and/or Firevault Storage. You can complete the assessment using ranges and “prefer not to say” options. We do not require precise financial values.

Accounts and sign-in
Where you create an account or sign in, we process basic account and authentication information, such as your email address, login timestamps, and session data. This allows us to provide secure access and protect against unauthorised use. If you choose to use Google Sign-In, we receive limited information from Google, typically your email address, name, and profile image. We never receive your Google password and we do not have access to your Google services or content.

Technical information and cookies
Like most modern websites, we also collect limited technical information, such as IP address, device and browser type, and basic usage data. This helps us maintain security, understand how the site and assessment are used, and improve performance and reliability. Cookies and similar technologies are used to support essential functionality, maintain sessions, and, where permitted, analyse usage patterns.

How we use your data
We use your personal data to deliver the services you request, including running the Assessment, generating your risk and impact outputs, providing secure account access, responding to enquiries, and arranging consultations or follow-up discussions. We also use data to improve Firevault’s platform, strengthen security, and ensure that the Assessment remains clear, accurate, and relevant. Where marketing communications are sent, this is done lawfully and with clear opt-out options.

Legal basis for processing
The legal bases for processing your data include performance of a contract where you request services, our legitimate interests in operating and securing the Firevault platform, your consent where required, and compliance with legal obligations.

Automated scoring and profiling
The Assessment uses automated scoring and classification to produce risk bands, indicative cost ranges, and product recommendations. These outputs are intended to support understanding and decision-making. They do not constitute legal, financial, or regulatory advice, and they do not produce legal or contractual effects.

Who we share data with
We do not sell personal data. We share data only with trusted service providers who help us operate our systems, such as hosting, authentication, database, security, email, analytics, and booking platforms. Where Google Sign-In is used, Google acts as an identity provider. All such suppliers are required to protect your data and to process it only in accordance with our instructions and applicable data-protection law. We may also disclose information if required by law or to protect Firevault, our users, or the public from fraud, security threats, or unlawful activity.

International data transfers
Some of our service providers may process data outside the UK. Where this occurs, appropriate safeguards are applied in line with UK GDPR requirements.

How long we keep your data
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including providing assessment results, maintaining accounts, supporting follow-up, meeting legal obligations, and protecting the security of our services. You may request deletion of your data at any time, subject to legal and regulatory requirements.

How we protect your information
Security is fundamental to Firevault. We use appropriate technical and organisational measures, including encrypted connections, access controls, monitoring, and secure infrastructure, to protect personal data. While no system can guarantee absolute security, we design and operate our services with protection and resilience as core principles.

Your rights
You have rights under UK data-protection law, including the right to access your personal data, correct inaccuracies, request erasure, restrict or object to certain processing, receive a copy of your data, and withdraw consent where consent is the lawful basis. You may exercise these rights by contacting [email protected]. You also have the right to lodge a complaint with the UK Information Commissioner’s Office.

Changes to this Charter
We may update this Privacy Charter from time to time as our services, technology, or legal obligations change. The current version will always be published on www.fire-vault.com.

Contact details
Firevault Limited, Company Number 16320803, 71–75 Shelton Street, London, WC2H 9JQ.
Email: [email protected]