Privacy Policy — Tracknosis

Last updated: 20 October 2026

1. Who we are

Tracknosis Ltd ("Tracknosis", "we", "us") is the controller of the personal data described in this policy. We are a company registered in England and Wales, company number 17520046, with our registered office at Bartle House, 9 Oxford Court, Manchester, M2 3WQ, United Kingdom.

For any privacy question or request, email info@tracknosis.com.

This policy covers this website only. It does not cover the Tracknosis software, which runs on our customers' own systems under their control and is governed by the customer agreement.

2. What we collect

Information you give us

Contact form: your name, work email, phone number (optional), the topic you choose and your message.
Demo request form: your name, work email, industry and your message.
Product updates sign-up: your email address.
Resource downloads (such as the NIS2 & CIRCIA Incident Report Pack): your name and work email.
Emails you send us directly, and anything you include in them.

Information collected automatically

When you submit a form: your IP address is included in the message we receive. If a submission is blocked as spam or fails to send, we record the time, your IP address and your browser's user-agent in a security log.
When you visit any page: our hosting provider keeps standard server logs (such as IP address, pages requested, date and time, and browser type) to run and secure the website.
Fonts: our pages load fonts from Google Fonts, so your browser sends your IP address to Google when it fetches them.

We do not use analytics, advertising or tracking cookies. See our Cookie Policy.

3. How we use it, and our lawful basis

Purpose	Data	Lawful basis (UK GDPR)
Replying to your enquiry or demo request, and arranging a demo	Form and email details	Legitimate interests (responding to business enquiries), or steps you ask us to take before entering a contract
Sending product updates and whitepapers	Email address	Consent, which you can withdraw at any time
Emailing you a resource you request, such as the report pack	Name and email address	Steps you ask us to take; legitimate interests
Occasional related updates to people who downloaded a resource with a work email address	Name and email address	Legitimate interests (keeping business contacts informed about related resources and services). You can opt out at any time by replying to any email. If you used a personal email address, we only send updates with your consent.
Keeping the website and forms secure, and blocking spam	IP address, user-agent, server logs	Legitimate interests (security and fraud prevention)
Meeting legal obligations and defending legal claims	Any of the above, where relevant	Legal obligation; legitimate interests

We do not sell your personal data, and we do not use it for automated decision-making or profiling.

4. Who we share it with

We use trusted service providers who process data on our behalf and only on our instructions:

Hostinger: website hosting and server logs.
SiteGround: email hosting, which delivers form submissions to our inbox.
Google: Google Fonts, which receives your IP address when fonts load.

We may also share data with professional advisers, or where the law requires it, for example with regulators or law enforcement.

5. International transfers

Some of our providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or on safeguards approved under UK data protection law, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

6. How long we keep it

Enquiries and demo requests: up to 24 months after our last contact with you, unless you become a customer.
Product updates sign-up: until you unsubscribe, after which we keep only your email address on a suppression list so we do not contact you again.
Resource downloads: up to 24 months after our last contact with you, or until you opt out.
Form security logs: up to 12 months. To prevent misuse of the resource download form, we also keep a one-way scrambled (hashed) form of your IP address for one hour.
Server logs: as set by our hosting provider, typically a few weeks.

7. Your rights

Under UK data protection law you have the right to:

access the personal data we hold about you;
have inaccurate data corrected;
have your data erased;
restrict or object to how we use it, including objecting to direct marketing at any time;
receive your data in a portable format;
withdraw consent at any time, without affecting anything we did before you withdrew it.

To use any of these rights, email info@tracknosis.com. We will reply within one month. To stop product updates, use the unsubscribe link in any update or email us.

If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

8. Security

The website is served over HTTPS. Form submissions are sent to us by authenticated, encrypted email, and access to our inbox and hosting is restricted to authorised staff.

9. Children

This website is for businesses and is not aimed at children. We do not knowingly collect data from anyone under 16.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.