Last Updated: 25/10/2026

This Privacy Policy explains how Firevault Limited collects, uses, stores and protects personal data. It is the formal notice required by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our Privacy Charter sets out the same commitments in plainer language; if anything here is unclear, the Charter is the place to start, and you can always ask us directly.

Who We Are

Firevault Limited (Company Number 16320803, VAT Number 490 8551 64) is registered in England and Wales. Our registered office is at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. We are the data controller for the personal data described in this policy. You can reach us about any privacy matter at privacy@fire-vault.com.

The Personal Data We Collect

We collect personal data in four ways:

• Information you give us: your name, email address, company, role and message content when you complete an enquiry form, book a session, request information or contact us.
• Account information: your email address, sign-in timestamps and session data when you create an account or sign in. If you sign in with Google, we receive your email address, name and profile image from Google; we never receive your Google password.
• Assessment responses: the answers you give in the Firevault Data and Digital Asset Value and Risk Assessment, including role, data categories, storage locations, confidence ratings and optional scale bands. These generate your risk score and recommendation. You can answer with ranges and prefer not to say options throughout.
• Technical information: IP address, device and browser type, and basic usage data, collected automatically when you visit the site. Cookies and similar technologies support essential functionality and, with your consent, usage analysis. See our Cookie Policy for detail.

How We Use Personal Data and Our Lawful Bases

We use personal data only where the law gives us a basis to do so:

• To provide what you asked for (performing a contract or taking steps towards one): responding to enquiries, delivering assessment results, providing accounts and supplying our products and services.
• To run and improve the site (legitimate interests): keeping the site secure, understanding how it is used, and improving performance and reliability. We balance these interests against your rights and expect them not to override them.
• With your consent: non-essential cookies and any optional marketing communication. You can withdraw consent at any time.
• To meet legal obligations: records we must keep for tax, accounting or regulatory reasons.

Who We Share It With

We do not sell personal data. We share it only with the service providers who help us operate: website hosting, email delivery, customer relationship management, payment processing and analytics, each under a contract that limits them to our instructions. We may also share data with professional advisers, or with authorities where the law requires it. If Firevault is ever involved in a merger or sale, personal data would transfer only under the same protections described here.

International Transfers

Some of our service providers process data outside the United Kingdom. Where that happens, we rely on an adequacy regulation or on contractual safeguards approved under UK GDPR, such as the International Data Transfer Agreement or the UK addendum to EU standard contractual clauses.

How Long We Keep It

We keep personal data only for as long as we need it for the purpose it was collected. Enquiry and correspondence records are kept while the relationship is active and for a reasonable period afterwards. Account data is kept while the account remains open. Records we must keep by law, such as invoices, are retained for the statutory period. When data is no longer needed, it is deleted or anonymised.

How We Protect It

Firevault exists because we believe data that is not connected cannot be reached. The same principle governs our own systems: access to personal data is limited to the people who need it, protected in transit and at rest, and monitored for unauthorised use. No method of transmission or storage is perfectly secure, but we design for the worst case rather than the average one.

Your Rights

Under UK GDPR you have the right to:

• be told how your data is used, and to access a copy of it;
• have inaccurate data corrected;
• have your data erased, in certain circumstances;
• restrict or object to our use of your data;
• receive your data in a portable format, in certain circumstances;
• withdraw consent where consent is the basis we rely on.

To exercise any of these rights, email privacy@fire-vault.com. We will respond within one month. We will not charge a fee unless a request is manifestly unfounded or excessive.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes to This Policy

We may update this policy from time to time. The latest version will always be on this page, with the date at the top. If a change is significant, we will flag it more prominently.

Contact

Firevault Limited

Registered Office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ

Email: privacy@fire-vault.com

Website: www.fire-vault.com