Privacy policy
How we collect, use and protect your personal data.
Last updated: 25 October 2026
1. Who we are
This policy explains how Wire Guard Forensic Consulting Ltd ("we", "us") collects and uses personal data, in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
We are the controller of the personal data described here.
- Wire Guard Forensic Consulting Ltd, 124 City Road, London EC1V 2NX, United Kingdom
- Annex: Bullingerstrasse 73, 8004 Zürich, Switzerland
- Company number 16044389, registered in England and Wales
- Information Commissioner's Office (ICO) registration ZC096094
- Data protection contact: support@wireguardforensic.com, +44 20 8068 9332
2. The personal data we collect
Information you give us
- Enquiries and consultations: your name, email address, phone number, country, organisation and the details of your enquiry, whether sent through our website, by email, phone or Telegram.
- Chat assistant: the email address you give before chatting, the questions you type into the automated chat assistant on our website, and its answers. We ask for your email so our team can follow up on your question, and we ask you not to share passwords or bank details. We keep your email with the questions and answers, with other contact details and long numbers removed from them, for up to 90 days so we can follow up and improve the assistant's answers.
- Bookings: your name, email address, the time you book and any notes you add when you book a consultation.
- Evidence you upload: your contact details, your description of what happened and the files you send us. Files can contain personal data about you and about other people, and may include sensitive information (see section 4).
- Data protection requests: the information you give us when you exercise your rights, including your postal address if you provide it.
- Clients: contact, contract, billing and payment details, and the information needed to deliver the services we have agreed.
Information collected automatically
- Security and technical data: when you visit our website, our hosting and network providers process your IP address, browser type, the pages requested and the time of the request, to deliver the site and protect it against attacks. Our forms record the IP address and browser of each submission to help us detect abuse.
- Cookies and similar technologies: we only use what is needed to run the site and the features you ask for. We do not use advertising or analytics cookies. See our cookie policy.
3. How we use your data and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Replying to enquiries and consultation requests | Steps you ask us to take before entering a contract; otherwise our legitimate interest in responding to people who contact us |
| Managing bookings | Steps you ask us to take before entering a contract |
| Assessing and investigating the evidence you send | Steps before a contract, or performance of our contract with you; our legitimate interest in assessing matters brought to us (see section 4 for sensitive data) |
| Delivering our services, invoicing and taking payment | Performance of a contract; legal obligation (for example tax and accounting records) |
| Handling data protection requests | Legal obligation |
| Keeping our website and systems secure, and preventing abuse of our forms | Our legitimate interest in protecting our systems, our clients and visitors |
| Answering your questions in the website chat assistant, following up on them by email, and reviewing questions to improve its answers | Our legitimate interest in answering questions about our services quickly; or steps you ask us to take before entering a contract |
| Sending news or updates about our services | Your consent, or the "soft opt-in" for existing clients, with an easy way to opt out every time |
| Establishing, exercising or defending legal claims | Our legitimate interests |
Where we rely on legitimate interests, we have balanced them against your rights and you can object at any time (see section 8). We do not make decisions about you based solely on automated processing.
4. Sensitive information and criminal offence data
Because of the nature of our work, evidence and case details can include special category data (for example health information) or information about criminal offences, about you or about others. We only process this where it is necessary, and:
- for special category data, where it is needed to establish, exercise or defend legal claims (Article 9(2)(f) UK GDPR), or with your explicit consent;
- for criminal offence data, under the conditions in Schedule 1 of the Data Protection Act 2018, in particular where it is necessary for legal claims, obtaining legal advice or establishing, exercising or defending legal rights.
Please only send us information that is relevant to your matter. If you send us data about other people, make sure you are entitled to share it.
5. Who we share data with
We do not sell, rent or trade personal data. We share it only with the service providers that help us run our business, who act on our instructions under contract, and where the law requires it:
| Provider | What they do | Location |
|---|---|---|
| Our website hosting provider | Website hosting, including form handling and storage of evidence uploads (stored encrypted, see section 6) | Outside the UK (see section 6) |
| BunnyCDN and Cloudflare | Delivering the website quickly and protecting it from attacks | EU / global network |
| Mailgun | Sending the notification emails generated by our website forms | EU region |
| Google (Gmail) and ImprovMX | Our email mailbox and email forwarding | United States / global |
| Cloudflare (Workers AI) | Generates the chat assistant's answers. Cloudflare processes the conversation on our behalf, does not keep it and does not use it to train AI models | Global network |
| Telegram | Sends our team a notification of each new chat assistant question and its answer, with the email address you gave (other contact details and long numbers are removed) | Global network |
| tawk.to | Live chat with our team: once you start the chat assistant, receives the email address you gave and the pages you visit on our website, so a member of our team can join the conversation | Global network |
| Cal.com | Consultation bookings, when you choose to book online | United States / global |
If you contact us through Telegram, Telegram also processes your messages under its own privacy policy.
We may also share personal data with professional advisers, insurers, or with law enforcement, regulators or courts where the law requires it or where you have asked us to (for example when we report to your bank, insurer or solicitor on your instructions). If our business is ever sold or merged, data may transfer to the new owner under the same protections.
6. International transfers
Website hosting outside the UK. Our website is hosted on servers outside the UK, in a country that does not have UK adequacy regulations. To protect you, our website does not keep copies of enquiries or data protection requests on that server: they are passed straight to our email. Evidence you upload is encrypted the moment it arrives, using a key that only Wire Guard Forensic holds and that never exists on the server, so the hosting provider cannot read your files, your description or your contact details. We have assessed this arrangement and consider the remaining risk to be low. For security reasons we do not publish the name or location of our hosting provider, but we will give these details to you on request.
Some of the providers above store or access data outside the UK, including in the United States. Where a country does not have UK adequacy regulations, we protect transfers with appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or rely on the UK-US data bridge for certified US companies. You can ask us for details of the safeguards in place by contacting support@wireguardforensic.com.
7. How long we keep data
| Type of data | How long |
|---|---|
| Enquiries and bookings that do not lead to an engagement | 3 years from our last contact |
| Chat assistant email addresses, questions and answers (other contact details and long numbers removed) | 90 days |
| Evidence uploaded for a matter we do not take on | Deleted within 90 days of telling you we cannot help |
| Client records, case files and evidence | For the engagement, then 7 years |
| Data protection request records | 3 years after the request is completed |
| Website security logs and form-abuse records | Normally up to 90 days, longer only if needed to investigate an incident |
| Marketing preferences | Until you opt out, after which we keep a record so we don't contact you again |
We may keep data for longer where we need it to establish, exercise or defend legal claims, or where the law requires it.
8. Your rights
You have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict how we use your data;
- receive your data in a portable format;
- object to processing based on legitimate interests, and to direct marketing at any time;
- withdraw consent at any time, where we rely on it, without affecting what we did before.
To use any of these rights, use our data subject request form or email support@wireguardforensic.com. It is free, and we will respond within one month (or tell you if we need longer for a complex request, as the law allows). We may ask you to confirm your identity first.
9. How we protect your data
- All connections to our website are encrypted (HTTPS), with strict security headers.
- Uploaded evidence is encrypted on arrival with modern public-key encryption (libsodium), stored in a private area of our server that cannot be reached from the web, and can only be decrypted by our team. A SHA-256 fingerprint is recorded for each file so its integrity can be checked.
- Our admin area requires a password and an authenticator code, and decryption happens only on our own devices.
- Access to systems is limited to the people who need it and protected with strong authentication.
- We manage our information security in line with ISO 27001 best practice, keep systems updated and review our security regularly.
If a personal data breach is likely to result in a risk to your rights, we will report it to the ICO within 72 hours of becoming aware of it, and tell you without undue delay if the risk is high.
10. Children
Our website and services are not aimed at children under 16, and we do not knowingly collect their data. Where an investigation involves a child's information, we handle it with extra care and only as necessary.
11. Links to other websites
Our website links to other sites, such as official registers and news sources. We are not responsible for their privacy practices.
12. Complaints
If you are unhappy with how we have handled your data, please contact us first at support@wireguardforensic.com so we can try to put it right. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
13. Changes to this policy
We will update this policy when our practices change and revise the date at the top. Significant changes will be highlighted on our website.
Wire Guard Forensic Consulting Ltd is not a law firm and is not regulated by the Solicitors Regulation Authority. We do not provide legal advice or legal representation.