Privacy notice.
How Kovart Security collects, uses and protects personal information, and the rights you have over it. Last updated 19 September 2026.
Who we are
Kovart Security ("we", "us") is a cyber security business based in Poole, England, United Kingdom. We are the data controller for the personal information described in this notice. You can contact us about anything in it at contact@kovartsecurity.com.
What we collect and why
When you contact us
If you use the contact form, email us or book a call, we collect your name, your firm's name, your work email address, the size of your firm, what prompted your enquiry and anything else you choose to tell us. We use this to reply to you, arrange a scoping call and prepare a quote. Our lawful basis is our legitimate interest in responding to enquiries about our services, and, once you engage us, the performance of our contract with you.
When you become a client
During an engagement we hold contact details for the people we work with at your firm, the information needed to carry out the agreed testing, and the findings and reports we produce. We use this only to deliver the services you have asked for. Our lawful basis is the performance of our contract with you. How we handle access to your systems is set out on our home page.
When you visit this website
We do not run analytics or advertising trackers on this site and we do not set cookies of our own. Our hosting provider records standard server logs, including IP addresses, for security and to keep the site running. Some pages load content from third parties, which is described below.
Third parties we use
We share personal information only with the service providers below, and only as far as needed to run the site and respond to you.
- Hostinger hosts this website and our email.
- Google Fonts supplies the Montserrat typeface, which means your browser sends a request (including your IP address) to Google when a page loads.
- Calendly handles the booking calendar on our contact page. If you book a call, Calendly processes the details you enter under its own privacy policy.
Some of these providers process data in the United States. Where that happens, transfers are covered by the safeguards required under UK data protection law, such as the UK International Data Transfer Agreement or the UK Extension to the EU-US Data Privacy Framework. We do not sell personal information and we do not share it with anyone for marketing.
How long we keep it
Enquiries that do not lead to an engagement are deleted after twelve months. Client records are kept for the length of the engagement and for six years afterwards, to meet our legal and accounting obligations, after which they are deleted. Test data gathered from your systems during an engagement is deleted at closure.
Your rights
Under UK data protection law you can ask us to confirm what personal information we hold about you, give you a copy of it, correct it, delete it, restrict how we use it, or transfer it to someone else. You can also object to our use of it where we rely on legitimate interests. To exercise any of these rights, email contact@kovartsecurity.com. We will respond within one month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
We may update this notice from time to time. The date of the current version is shown at the top of this page.