Skip to content

Privacy notice

Operated by Needsec Limited T/A AI Pentest, company number 13795201, 86-90 Paul Street, London, England, United Kingdom, EC2A 4NE. Contact: hello@ai-pentest.co.uk

What we collect

Your name, organisation, work email, optional job title and phone number, details of the website or application you want assessed, verification records and your declarations.

Why we use it

To assess your application, verify website ownership, agree scope and authorisation, deliver the assessment and keep a record of permission. Our lawful bases are taking steps at your request before entering into an agreement, and our legitimate interests in operating safely and lawfully. Marketing emails are sent only if you opt in.

Who we share it with

Our hosting and email providers, acting on our instructions. We don’t sell personal data.

How long we keep it

We keep application records for as long as needed to evidence authorisation and handle follow-up, in line with the retention periods configured by the operator, after which they’re deleted.

Your rights

Under UK GDPR you can ask for access, correction, deletion, restriction or a copy of your data, and object to processing. You can also complain to the Information Commissioner’s Office (ico.org.uk).