Who is the data controller for SecuMap personal data?

SecuMap Ltd. (SecuMap) is the data controller for personal data collected through this website, the SecuMap customer portal, and our marketing communications, as described in this Privacy Notice.

How can I contact SecuMap about privacy?

Email privacy@secumap.co.uk. SecuMap responds to privacy enquiries in line with UK data protection requirements.

Privacy Notice

Last updated 6 November 2026.

This Privacy Notice explains how SecuMap Ltd. ("SecuMap", "we", "us") uses your personal data when you use our public website, create or manage an account in the SecuMap customer portal, contact us, or receive marketing from us. For the purposes of UK data protection law, SecuMap acts as the data controller.

SecuMap provides the Detection System of Record platform and this public website. Visitors can learn about detection governance, request briefings or guided demos, open support requests, and sign up for a SecuMap account at portal.secumap.co.uk. Data is used only as described in the sections below; SecuMap does not sell personal data.

Who we are

SecuMap Ltd.
1 Dornoch Way
Blantyre
G72 0GR
Scotland, United Kingdom
Company No. SC875008
ICO Registration No. ZC217784

You can contact us about privacy at privacy@secumap.co.uk.

What data we collect

Depending on how you interact with SecuMap, we may collect:

Customer portal account data — when you register or manage an account at portal.secumap.co.uk, including your name, email address, organisation details, subscription choices, contact information, and billing contact details you provide with your consent.
Support and enquiry data — when you use our support form, request an executive briefing or guided demo, email us, or submit a licence upgrade request through the portal, including your email address, name, organisation details where you provide them, message or form content, and any attachments you choose to send. Support requests are logged in our Atlassian service desk so we can respond and follow up with you.
Sales and relationship data — when you enquire about SecuMap, register for a portal account, accept our End User Licence Agreement, or ask about a licence upgrade, we may record your contact details, organisation name, role, and the context of your request so we can qualify enquiries, manage our relationship with your organisation, and follow up appropriately.
Marketing contact data — your email address and related contact details where you have opted in to receive product updates, security content, or other marketing from SecuMap.
Website usage metrics — aggregate information about public pages viewed, referring sites, browser and device type, and page performance, collected through Cloudflare Web Analytics. Where you consent, Google Analytics also receives pages viewed, referring site, browser and device type, approximate location, and a cookie identifier, as described under Cookies and tracking.
Consent choices — whether you accept or refuse each optional purpose, stored by Cloudflare Zaraz so we can remember your decision.

How we use your data

We use personal data to:

create and manage customer portal accounts and subscriptions;
maintain contact and billing contact records for your organisation;
respond to support requests, briefing and guided-demo enquiries, licence upgrade requests, and other messages you send us — including contacting you about open support tickets;
manage sales enquiries and customer relationships, including recording briefing and guided-demo requests, portal sign-ups, and licence-related requests;
send product updates, service notices, and security-related content where you have agreed to receive them;
operate, secure, and improve our website and customer-facing services, including understanding aggregate use of the public site and remembering the cookie choices you make; and
measure how the public website is used with Google Analytics, where you have consented.

Legal basis

Our legal bases under the UK GDPR depend on the activity:

Consent — when you sign up for a portal account, opt in to marketing, allow Google Analytics, or otherwise agree to a specific use of your data. You can withdraw marketing consent from the unsubscribe link in those emails. You can withdraw Google Analytics consent at any time from Cookie settings in the footer of this website, or by contacting us.
Contract — where processing is necessary to provide your SecuMap subscription, manage your account, or fulfil our agreement with you.
Legitimate interests — where we need to respond to enquiries, operate support, protect our services, or keep business records, provided your rights are not overridden.

Service providers

We use trusted processors to run SecuMap services:

Cloudflare — hosts and delivers this website and the SecuMap customer portal infrastructure, including security and bot protection, and provides cookieless Web Analytics for the public website. Cloudflare Zaraz provides the consent modal and stores your consent choice. Cloudflare processes personal data on our behalf to provide hosting, security, Web Analytics, consent management, and related platform services. Cloudflare may process data outside the UK; we rely on appropriate safeguards where required.
Google — provides Google Analytics for this website. Where you consent, Google receives usage data about your visit so we can understand how the public site is used. Google Analytics is loaded through Zaraz and does not run unless you allow that purpose. Google may process data outside the UK; we rely on appropriate safeguards where required.
Atlassian — our support and service desk provider. Atlassian processes contact details and support request content on our behalf so we can triage issues, respond to you, and maintain a record of support conversations. Atlassian may process data outside the UK; we rely on appropriate safeguards where required.
Brevo — our email and contact management provider for customer communications and marketing. Brevo processes data on our behalf to send emails and manage contact lists. Brevo’s servers may be located outside the UK; we rely on appropriate safeguards (such as standard contractual clauses) to protect your data.
HubSpot — our customer relationship management provider. HubSpot processes contact and organisation details on our behalf when you request a briefing or guided demo, register for a portal account, accept our End User Licence Agreement, or ask about a licence upgrade, so we can manage enquiries and our relationship with you. HubSpot may process data outside the UK; we rely on appropriate safeguards where required.

We name processors here because they receive personal data on our behalf. We do not publish internal system designs, security controls, or integration details on this page.

How long we keep your data

We retain portal account, subscription, and billing contact data for as long as your account is active and for a reasonable period afterwards to meet legal, accounting, and support obligations. Support records held in Atlassian are kept for as long as needed to resolve your request and maintain an appropriate support history. Sales and relationship records held in HubSpot are kept while relevant to an active enquiry or customer relationship, and for a reasonable period afterwards for business and legal purposes. Marketing contact data is kept while you remain subscribed or until you withdraw consent. Consent choices stored by Zaraz are kept until that cookie expires, you delete it, or you change your choice. Where you have consented to Google Analytics, Google retains the analytics data it receives for the period configured in our Google Analytics property. If you ask us to delete your data, we will do so unless we must retain certain records for legal or contractual reasons.

Your rights

Under the UK GDPR you have rights to access, correct, erase and restrict how we use your personal data, as well as the right to object to certain uses and to data portability in some cases. To exercise any of these rights, contact us at privacy@secumap.co.uk. You can withdraw consent for Google Analytics at any time from Cookie settings in the footer of this website. Withdrawing that consent stops further Google Analytics collection.

You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk if you are unhappy with how we handle your data.

Cookies and tracking

This website does not use advertising cookies.

We use Cloudflare Zaraz to ask for your consent and to remember what you choose. Zaraz stores that choice in a first-party cookie named cf_consent. The cookie records whether you accepted or refused each purpose. It is strictly necessary so we can honour that choice and keep optional tools from running when you have refused them.

We use Cloudflare Web Analytics on the public site so we can see, in aggregate, which pages are viewed, roughly where visits come from, what browsers and devices are used, and whether pages load well. It runs as a small script in the page. It does not set cookies, does not use local storage, and is not used to identify you, build a marketing profile, or show advertising. Cloudflare processes these metrics on our behalf. Web Analytics does not use the consent modal.

Where you consent, we use Google Analytics, loaded through Zaraz, to measure how the public website is used. Google Analytics then stores a first-party cookie, such as _ga, on your device and receives pages viewed, the referring site, browser and device type, approximate location, and an identifier in that cookie. If you refuse that purpose, Zaraz does not load Google Analytics.

We may record anonymous, aggregate blog-read events, such as whether a blog page was viewed for long enough or scrolled far enough to count as a qualified read. These events do not use cookies and are not used to identify individual visitors. We may use strictly necessary cookies or similar technologies where required for security — for example, bot protection on forms that submit data to us (including support, briefing requests, and portal sign-up). The customer portal may use cookies needed to keep you signed in and operate your account. You can change or withdraw your Google Analytics consent at any time from Cookie settings in the footer, or by emailing privacy@secumap.co.uk. You can also delete cookies in your browser.