Privacy Policy
Who we are
ChangTech Ltd ("ChangTech", "we", "us", "our") is a company registered in England and Wales (company number 14749127) with its registered office at 128 City Road, London, EC1V 2NX. We provide fractional vCISO and security engineering services to businesses.
You can contact us at: hello@changtech.net
What information we collect
We collect information you provide directly to us, including:
- Name and contact details (email address, phone number, company name)
- Business information necessary to deliver our services
- Communication preferences
- Information provided in consultation enquiries
We do not collect special category data (e.g., health information) through this website.
How we use your information
We use your information to:
- Respond to enquiries and provide consultation services
- Communicate about our services and updates
- Comply with legal obligations
- Improve our website and services
We do not sell or rent your personal information to third parties.
Legal basis for processing (UK GDPR)
We process personal data under the following legal bases:
- Contract: Processing necessary to perform our contract with you
- Legitimate interests: Improving services, direct marketing (you can opt out)
- Consent: Where you have given clear consent
- Legal obligation: Where required by applicable law
Data retention
We retain personal data for no longer than necessary for the purposes for which it was collected. Client data is retained for the duration of our engagement plus 7 years for legal compliance purposes. Enquiry data is retained for 2 years from the date of last contact.
Your rights (UK GDPR)
You have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data (where applicable)
- Restrict processing
- Data portability
- Object to processing
- Lodge a complaint with the ICO (www.ico.org.uk)
To exercise any of these rights, contact us at hello@changtech.net.
Cookies
Our website uses minimal cookies. We use essential cookies for site functionality and analytics cookies (via Plausible) to understand visitor traffic. You can control cookie preferences through your browser settings.
Third-party services
We use the following third-party services:
- Formspree: Form submissions are processed under Formspree's privacy policy
- Calendly: Booking widgets are governed by Calendly's privacy policy
- Plausible Analytics: Privacy-first analytics with no personal data collection
Data security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. All data is stored on secure systems within the UK or EEA.
Changes to this policy
We may update this privacy policy from time to time. The updated version will be indicated by a revised "Last updated" date. We encourage you to review this policy periodically.