Legal
Privacy Policy
How we collect, use and protect personal data in the course of running Avertory Limited and working with channel partners.
1. Who we are
Data controller
Avertory Limited is the data controller for personal data collected through this website and our partner engagements.
Avertory Limited, company number 16542620, registered office 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE.
For any privacy questions, contact us at [email protected].
2. What we collect
Personal data we collect
We collect only the personal data we need to respond to partner enquiries and deliver our services.
- Business contact details: name, work email, organisation, role and telephone number if voluntarily provided.
- Opportunity information: platform interest, partner type, engagement model preference and a summary of the delivery opportunity.
- Technical and usage data: IP address, browser type and pages visited, collected through standard server logs and analytics.
- Service delivery data: access credentials, contact lists and configuration details required to perform agreed professional services.
3. How we use it
How we use personal data
We use personal data to operate our business, respond to partner enquiries and deliver contracted services.
- To respond to partner desk enquiries and arrange delivery briefings.
- To scope, plan and execute professional services engagements.
- To communicate project status, risks and handover materials to the authorised partner contact.
- To maintain our records, meet legal obligations and improve our website and service offering.
- We do not use partner or end-user contact data for unsolicited marketing, and we do not sell personal data.
4. Legal basis
Legal basis for processing
Under UK data protection law, we process personal data on the following bases.
- Contractual necessity: processing needed to perform our professional services agreement with you.
- Legitimate interests: managing our business, responding to enquiries and maintaining partner relationships.
- Legal obligation: compliance with company, tax, employment and regulatory requirements.
- Consent: where you have expressly agreed, for example by subscribing to updates.
5. Sharing
Who we share data with
We share personal data only where necessary and never for unrelated commercial purposes.
- With the partner who introduced us, to coordinate delivery and report progress.
- With platform vendors such as SentinelOne, Orca Security and Qualys, only where required for support, licensing validation or service delivery.
- With trusted service providers who host our systems, manage email or provide analytics, under strict confidentiality and security obligations.
- With regulators, law enforcement or courts where required by law.
6. Security
How we protect data
We apply appropriate technical and organisational measures to keep personal data secure.
- Access to systems and customer environments is least-privilege and time-bound.
- We use encryption in transit and at rest where the platform supports it.
- We maintain logs of access and changes to production environments.
- We train our team on confidentiality and data handling obligations.
7. Retention
How long we keep data
We retain personal data only for as long as necessary for the purposes for which it was collected.
- Partner contact and opportunity data: retained while the relationship is active and for up to six years after the last interaction, for legal and tax record-keeping.
- Service delivery records: retained in line with the engagement agreement and any applicable regulatory requirement.
- Website analytics data: retained for up to 26 months, then aggregated or deleted.
- When data is no longer needed, we securely delete or anonymise it.
8. Your rights
Your data protection rights
You have rights over your personal data under UK data protection law.
- The right to access the personal data we hold about you.
- The right to request correction of inaccurate or incomplete data.
- The right to request erasure in certain circumstances.
- The right to object to or restrict processing.
- The right to data portability where processing is based on consent or contract.
- The right to complain to the Information Commissioner's Office (ICO).
To exercise any of these rights, contact us at [email protected]. We will respond within one calendar month.
9. Cookies
Cookies and analytics
Our website uses minimal cookies and standard analytics to understand how visitors use the site.
We do not use cookies for behavioural advertising or cross-site tracking. You can control cookies through your browser settings.
10. Updates
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our business or the law.
The version published on this page is the version currently in effect. We encourage you to review it periodically.
Last updated: 29 August 2026.