Privacy notice

Who we are

This site promotes penetration testing services delivered by Alex Adamovici and contracted by MD QMS LTD, a company registered in England and Wales (number 14499573), registered office 9 Upland Road, St Helens, England, WA10 3SQ. MD QMS LTD is the controller of personal data collected here. Contact: alex.adamovici@mdqms.co.uk.

What we collect and why

• Enquiries and scoping. Your name, work email, company and what you tell us about the application you want tested. We use it to respond, scope the work and prepare a proposal. Lawful basis: our legitimate interest in responding to business enquiries, or steps taken at your request before entering into a contract.
• Clients. Business contact details needed to run the engagement, plus the contractual records we must keep for legal and accounting purposes.
• Website operation. Our hosting provider processes technical data such as IP addresses in server logs to deliver and secure the site.

Testing data and findings

During an engagement we necessarily see data in the systems being tested, which may include personal data. That data is handled under the engagement contract and the rules of engagement: it is accessed only as far as needed to demonstrate a finding, never extracted beyond the minimum evidence required, never shared with anyone outside the engagement, and deleted once the report and retest are complete. Where testing could expose special category or clinical data, we agree in advance how evidence will be recorded and redacted.

Who we share it with

We use service providers who process data on our behalf: our CRM and forms provider (HubSpot, EU data centre), our booking and email provider, our website host, and Google Fonts (which receives your IP address when fonts load). We don't sell personal data. Where a provider transfers data outside the UK, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Addendum.

Cookies

This site sets no advertising or analytics cookies of its own. An embedded enquiry form may set cookies necessary for it to work. If we add analytics later, we will ask for consent first and update this notice.

How long we keep it

Enquiry records are kept only as long as needed and reviewed periodically. Engagement records, reports and the evidence behind them are retained as agreed in the engagement contract, and otherwise as legal and accounting obligations require.

Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time. Email alex.adamovici@mdqms.co.uk to exercise any of these. You can also complain to the Information Commissioner's Office (ico.org.uk), though we'd appreciate the chance to put things right first.