Privacy Policy

Last updated: 22 July 2026

Safi InfoSec ("we", "us") is committed to protecting your personal data. This notice explains what we collect, why, and your rights. We practise what we sell: we collect the minimum data needed and we don't use advertising trackers.

Who we are

Safi InfoSec is the trading name of Shofiqul Islam, a UK-based cybersecurity professional. Contact: hello@safiinfosec.co.uk. ICO registration: [PENDING].

What we collect and why

• Email address — when you request the free Starter Pack, so we can send it and occasional practical security tips. Lawful basis: consent. Unsubscribe any time via the link in every email.
• Order details — name, email and payment confirmation when you buy a pack, so we can deliver it and issue a receipt. Lawful basis: contract. Card details are processed by our payment provider and never touch our systems.
• Correspondence — emails you send us, so we can reply and keep a record of the engagement. Lawful basis: legitimate interests.
• Review documents — if you buy a Readiness Review, the completed documents you send us, solely to carry out the review. Deleted within 90 days of the review completing unless you ask us to keep them.

What we don't do

• No advertising trackers or third-party marketing cookies.
• No selling or sharing of your data for marketing.
• No profiling or automated decision-making.

Who we share data with

Only service providers needed to run the business: our payment processor (for purchases), our email delivery provider (for the Starter Pack and updates), and our website host. Each acts under contract as a processor.

How long we keep data

Mailing list data until you unsubscribe; order records for 6 years (HMRC requirement); correspondence for up to 2 years; review documents within 90 days as above.

Your rights

Under UK GDPR you can ask for access to, correction of, or deletion of your personal data, object to or restrict processing, and withdraw consent at any time. Email hello@safiinfosec.co.uk and we'll respond within one month.

Complaints

If you're unhappy with how we've handled your data, contact us first and we'll do our best to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.