This policy explains how Stenward collects, uses and protects personal information when you visit our website, enquire about our services, or work with us. We keep it deliberately plain — the same way we work.
Stenward is an information security consultancy providing senior-led ISO 27001 implementation and related services to technology companies. For the purposes of UK and EU data protection law, Stenward is the data controller for the personal information described in this policy.
Replace the bracketed details before going live: registered company name & number, registered address, and ICO registration reference.
We only collect what we need to respond to you and deliver our work:
We do not collect special category data through this website, and we ask that you do not send confidential security evidence by email.
We do not sell your information, and we do not use it for automated decision-making.
Under UK GDPR we rely on:
We share personal information only where necessary: with trusted service providers who help us operate (for example, email, scheduling and hosting), all bound by appropriate data protection terms; and where required by law. We never sell or rent your data.
We keep personal information only as long as needed for the purpose it was collected, then delete or anonymise it. Enquiry correspondence is typically held for up to 24 months; engagement records are held for the duration of the contract and for as long as we are legally required to retain them afterwards.
Some of our providers may process data outside the UK or EEA. Where that happens, we ensure an appropriate safeguard is in place — such as UK adequacy regulations or the International Data Transfer Agreement — so your information remains protected.
You have the right to access, correct, delete or restrict the use of your personal information, to object to certain processing, and to data portability. To exercise any of these, email us at the address below. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
We use a small number of essential cookies to make the site work, and — only with your consent — privacy-respecting analytics to understand how it is used. You can control or clear cookies through your browser settings at any time.
We may update this policy from time to time. When we do, we will revise the date at the top of this page and, where changes are material, make it clear on the site.
For any privacy question or to exercise your rights, contact us at info@stenward.com. We aim to respond within 30 days.
