Privacy Policy
Last updated: October 2, 2026
This Privacy Policy explains how BestPentesting UK, a service operated by BugFoe Private Limited ("we", "us", "our"), a company registered in India, collects, uses, shares and protects personal data when you visit bestpentestingcompanies.uk (the "Site") or contact us. It is written with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR) in mind. Questions: sales@bugfoe.com.
1. Who is responsible for your data
BugFoe Private Limited is the controller for personal data collected through the Site. We are established in India and offer our services to organisations in the United Kingdom.
2. Data we collect
- Information you provide: name, work email, company, phone number, service interest, compliance needs, timeline, company size and any message you submit through our forms or by email.
- Technical data: IP address, browser type, device information, pages visited and timestamps, used for security, spam prevention and rate limiting.
- Cookies and similar technologies: described in our Cookie Policy.
We do not intend to collect special category data through the Site. Please don't include confidential system details, credentials or other people's personal data in form submissions.
3. How we use your data and our lawful bases (UK GDPR Article 6)
| Purpose | Lawful basis |
|---|---|
| Responding to quote and contact requests, preparing proposals | Legitimate interests in responding to business enquiries; steps prior to entering a contract |
| Delivering and managing services you buy | Performance of a contract |
| Protecting the Site from spam, fraud and abuse | Legitimate interests |
| Measuring site usage and improving content (if analytics is enabled) | Consent (PECR) for non-essential cookies |
| Displaying advertising on Guides articles (if enabled) | Consent (PECR) for advertising cookies |
| Complying with legal obligations | Legal obligation |
We will not send you marketing emails unless you have asked for them or the law otherwise allows it, and every marketing email will include a simple way to opt out.
4. Advertising (Google AdSense)
We may display advertising on our Guides articles using Google AdSense. Advertising is never shown on our service, quote or contact pages.
- Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to our users based on their visit to our Site and/or other sites on the Internet.
- Users may opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalised advertising at www.youronlinechoices.com/uk.
- Learn more: How Google uses information from sites or apps that use its services.
Visitors in the United Kingdom, the European Economic Area and Switzerland are shown a consent message from a Google-certified consent management platform before advertising or analytics cookies are used, and can change their choices at any time via the "Privacy and cookie settings" link on pages showing ads.
5. Analytics
If enabled, we use Google Analytics 4 to understand aggregate use of the Site. Google Consent Mode ensures that analytics cookies are not set for UK visitors until they agree.
6. Sharing your data
We do not sell or rent personal data. We share it only with:
- Our hosting provider (Hostinger) and email service providers that process data on our behalf;
- Google, where you use pages with analytics or advertising, as described above;
- Professional advisers, and authorities where the law requires it.
7. International transfers
Our team is based in India, so personal data you submit from the UK is transferred to and processed in India and wherever our service providers operate. Where UK GDPR requires it, we protect these transfers with appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU standard contractual clauses. Contact us for more information.
8. Retention
We keep enquiry data for up to 24 months after our last contact unless an ongoing business relationship requires longer. Client engagement data is kept as set out in the contract. Security logs are kept for up to 12 months.
9. Your rights
Under UK GDPR, you have the right to access your personal data and to have it corrected or erased. You can also ask us to restrict processing, object to processing based on legitimate interests (including direct marketing), ask for data portability and withdraw consent at any time. To exercise any of these rights, email sales@bugfoe.com with the subject "Privacy Request". We will respond within one month.
If you are unhappy with how we have handled your data, please contact us first so we can try to resolve it. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
10. Security
The Site is served only over HTTPS. Form submissions are protected against spam and abuse, stored with restricted access, and handled only by staff who need them to respond to you.
11. Children
The Site is intended for businesses and is not directed at children. We do not knowingly collect children's data.
12. Changes
We may update this policy and will change the "Last updated" date above. Material changes will be highlighted on this page.