Privacy Policy
Last updated: 19 October 2026
1. Introduction
Regis Security Consulting respects your privacy and is committed to handling personal information responsibly.
Regis Security Consulting is operated by Regis Kindundu as a sole trader.
For the purposes of UK data protection law, Regis Kindundu, trading as Regis Security Consulting, is the data controller responsible for personal information collected through this website.
This Privacy Policy explains how personal information is collected, used and stored when you visit www.regissecurityconsulting.com or submit an enquiry through our website.
2. Information We Collect
When you submit our Contact form, we may collect:
- Your first and last name.
- Your email address.
- Your organisation or training provider, if supplied.
- Your enquiry type and selected training subject.
- Information you include in your training requirements or message.
Our website may also process technical information necessary for website operation, security and spam prevention.
3. How We Use Your Information
We use personal information to:
- Respond to training and business enquiries.
- Discuss training requirements, availability and potential services.
- Maintain relevant correspondence and enquiry records.
- Protect our website against spam, misuse and security threats.
We do not use Contact form submissions to send marketing emails without an appropriate lawful basis.
4. Lawful Basis for Processing
Under UK data protection law, we generally process enquiry information on the basis of legitimate interests in responding to enquiries and operating our business.
Where an enquiry relates to entering into a contract with an individual, processing may also be necessary to take steps before entering into that contract.
5. How Your Information Is Stored and Shared
Contact form submissions are recorded in our WordPress website using Fluent Forms.
Email notifications are sent using FluentSMTP through Google’s email service and delivered to our designated business contact inbox.
Personal information may therefore be processed by our website hosting provider and relevant technology service providers, including Google, where necessary to operate our website and respond to enquiries.
We do not sell personal information.
Spam and Bot Protection
Our Contact form uses Cloudflare Turnstile to help distinguish legitimate visitors from automated submissions and protect the website against spam and abuse.
Cloudflare may process technical information associated with visitors, including IP addresses, browser characteristics and interaction data, to perform security checks.
This information is processed in accordance with Cloudflare’s applicable privacy practices. Further information is available in the Cloudflare Privacy Policy.
6. International Data Transfers
Some technology providers may process information outside the United Kingdom.
Where UK data protection law requires safeguards for international transfers, we aim to rely on appropriate arrangements provided by the relevant service providers.
7. Data Retention
Regis Security Consulting retains personal information only for as long as necessary for the purposes for which it was collected.
Enquiries that do not lead to a contract: Personal information submitted through our Contact form, together with related email correspondence, will normally be retained for up to 12 months after the last communication. After this period, the information will be deleted unless there is a legitimate reason or legal obligation to retain it longer.
Enquiries that lead to a training engagement: Relevant personal information and business records may be retained for longer where necessary to deliver services, manage contractual relationships, maintain accounting records or comply with legal obligations.
Contact form submissions are stored in WordPress using Fluent Forms, while related email correspondence is stored in our designated Google email account.
We periodically review stored information and delete records that are no longer required.
8. Information Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.
However, no internet-based system can guarantee absolute security.
Please do not submit passwords, sensitive security information or confidential infrastructure details through our Contact form.
9. Your Data Protection Rights
Subject to applicable UK data protection law, you may have rights to:
- Request access to your personal information.
- Request correction of inaccurate information.
- Request deletion of information.
- Object to certain processing.
- Request restriction of processing.
- Request data portability where applicable.
You also have the right to complain to the UK Information Commissioner’s Office (ICO) at https://ico.org.uk/.
10. Cookies and Website Technologies
Our website uses WordPress and may use cookies or similar technologies necessary for website functionality, security and administration.
At the time of this Privacy Policy’s publication, we do not intentionally use advertising cookies or third-party analytics cookies.
Essential cookies may be used for functions such as WordPress administration and website security.
If we introduce analytics, advertising or other non-essential technologies in the future, we will update this Privacy Policy and implement appropriate consent mechanisms where required by law.
11. Changes to This Policy
We may update this Privacy Policy to reflect changes to our services, website technologies or legal requirements.
The latest version will be published on this page.
12. Contact Us
If you have questions about this Privacy Policy, how your personal information is processed, or wish to exercise your data protection rights, please contact:
Data Controller: Regis Kindundu, trading as Regis Security Consulting
Email: regis.kindundu@googlemail.com
Website: https://www.regissecurityconsulting.com
We will respond to data protection requests in accordance with applicable UK data protection law.