Privacy Policy
This policy explains what personal data Aspis Technology Ltd (trading as Spartan Security) collects, why, and what your rights are. The short version: this website collects nothing about you automatically — no cookies, no analytics, no tracking. The only personal data we hold is what you choose to send us by email.
Who we are
Aspis Technology Ltd is a company registered in England and Wales (company number 17236509), trading as Spartan Security. For the purposes of UK data protection law, Aspis Technology Ltd is the data controller for any personal data described in this policy.
You can contact us about anything in this policy — including any request to access or delete your data — at [email protected].
What this website collects
Nothing automatically. This site is a set of static pages. It does not use cookies, advertising trackers, or analytics software, and it does not build a profile of you or your visit.
Like virtually all websites, the infrastructure that serves these pages (our hosting provider) may process limited technical information such as your IP address as part of delivering the site and protecting it from abuse. We do not have access to this as an identifiable record of you, and we do not use it for marketing or profiling.
Data you send us by email
If you email us — for a scoping call, a consulting enquiry, or a security disclosure — we receive and store whatever you choose to include: typically your name, email address, and the details of what you're asking about.
We use that information only to respond to you and, if it leads to an engagement, to carry out and administer that work. Our lawful basis is our legitimate interest in responding to enquiries and, where applicable, the performance of a contract with you.
Email is handled through Microsoft 365. Microsoft processes this data on our behalf as a data processor under its own data protection commitments.
How long we keep it
We keep enquiry emails only as long as there's a reason to — to continue a conversation, deliver a piece of work, or meet a legal or accounting obligation. Correspondence that doesn't lead anywhere is deleted in the normal course of clearing down our mailbox. Records tied to paid work are kept for as long as UK tax and accounting rules require.
Who we share it with
We don't sell your data and we don't share it for marketing. The only third parties involved are the service providers that make the business run — for example Microsoft (email) and our website host — who process data on our behalf, and our accountant and HMRC where required for tax. We'll only disclose data beyond this where the law requires it.
Your rights
Under UK GDPR you have the right to ask us what data we hold about you, to have it corrected or deleted, to object to or restrict how we use it, and to receive a copy of it. To exercise any of these, email [email protected] and we'll respond within one month.
If you're not happy with how we've handled your data, you can complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk. We'd appreciate the chance to put things right first.
Changes to this policy
If our data practices change — for example if we add a contact form or analytics to this site — we'll update this policy and the date below before that change takes effect.
Last updated: June 2026.