Privacy Notice

Who we are

Ronin-Pentest is an independent penetration testing and cybersecurity consultancy run by Ben Brown. For the purposes of UK data protection law, Ronin-Pentest is the data controller for the personal information described in this notice. You can contact us by email or onWhatsApp.

What this notice covers

This notice explains what personal information we collect, why we collect it, how we use it and the rights you have over it. It applies to this website and to enquiries you send us by email or WhatsApp.

Website analytics

This website has no contact form, no advertising or tracking cookies and no social or embedded third-party widgets. It does useAhrefs Web Analyticsto understand aggregate traffic — page views, referring sites and general device and browser types.

Ahrefs Web Analytics is cookieless: it does not set cookies and, according to Ahrefs, does not collect personal data or build profiles of individual visitors. We only see aggregate figures, never information about a single person. Ahrefs processes this data on our behalf under their own privacy terms. The fonts this site uses are served from the same place as the site itself, so they are not requested from a third party.

We do not sell data to anyone, and we do not use analytics data for advertising.

When you contact us

If you email us or send us a WhatsApp message, we receive the details you choose to send — typically your name, your contact details, your organisation and the content of your message. We ask that you do not send passwords, credentials or other sensitive information in an initial message.

How we use your information

We use the details you send only to respond to your enquiry and, if we go on to work together, to deliver and support the engagement. Our lawful basis for this is ourlegitimate interests in responding to you and running our business, and — where an engagement is agreed — taking steps toward and performing a contract with you.

Email and WhatsApp

Messages you send through WhatsApp are also processed by WhatsApp (Meta) under their own privacy terms, and email is handled by your email provider and ours. We choose reputable providers, but we do not control how those third parties process data.

How long we keep it

We keep enquiry details only for as long as we need them to deal with your enquiry. If we work together, we keep client information only for as long as necessary to deliver and support the engagement and to meet our legal and accounting obligations. After that, we delete it.

Who we share it with

We do not sell your information and we do not share it for marketing. Our service providers — such as our analytics provider — process limited technical data on our behalf under contract. We only share information where it is necessary to deliver the work (for example with a trusted specialist under confidentiality), where you have asked us to, or where the law requires it.

International transfers

Some of the services we use (such as WhatsApp and our analytics provider) may process information outside the UK. Where that happens, we rely on the safeguards those providers put in place for international transfers.

Your rights

Under UK data protection law you have the right to access the personal information we hold about you, to have it corrected if it is wrong, and — in certain circumstances — to have it erased, to restrict or object to how we use it, to receive it in a portable format, and to withdraw any consent you have given. To exercise any of these rights, contact us byemail.

If you are unhappy with how we have handled your information, you have the right to complain to the UK Information Commissioner's Office (ICO) atico.org.uk. We would appreciate the chance to put things right first.

Security

We take reasonable steps to keep any information you share secure, and we keep the amount we hold to a minimum. Because we ask you not to send sensitive material by email or WhatsApp, we will agree a secure method for anything that needs it.

Changes to this notice

We may update this notice from time to time. When we do, we will change the "last updated" date at the top of this page.