This privacy policy explains how your personal data is collected, used, and protected when you request early access to aDiligence or otherwise interact with this website. We are committed to protecting your privacy and handling your data transparently, in line with UK data protection law — the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
01Who we are
For the purposes of UK data protection law, the data controller is:
Joe Mayhew (trading as aDiligence), based in England, United Kingdom.
aDiligence is currently operated by Joe Mayhew as an individual. If and when the business is incorporated as a company, this policy will be updated to name that company as the controller. For any questions about this policy or your personal data, contact us at [email protected].
02What data we collect
When you request early access through our sign-up form, we collect:
| Data | Why |
|---|---|
| Name | To address you and identify your request |
| Work email | To verify your request and contact you about access |
| Company | To understand who is interested in the product |
| Role (optional) | To understand your context and prioritise access |
| Deal context (optional) | To understand your intended use, if you choose to share it |
| How you heard about us (optional) | To understand how people find us |
We also automatically record limited technical information when you submit the form — your IP address and browser user-agent — to help protect the form against abuse and spam, and to confirm the time of your request.
03Why we use it, and our lawful basis
Under UK GDPR we must have a lawful basis for processing your data. We rely on:
- Consent — when you submit the sign-up form and confirm your email address, you consent to us holding your details and contacting you about early access to aDiligence. You can withdraw this consent at any time (see “Your rights”).
- Legitimate interests — for limited technical data (IP, user-agent) used to keep the form secure and prevent abuse. We balance this against your rights, and the data is minimal and retained only as long as needed.
We use a double opt-in process: after you sign up, we email you a link to confirm your request. We only add you to our early-access list once you have confirmed. This ensures we only hold data for people who genuinely want to hear from us.
04How we store and protect it
Your data is stored on our own infrastructure in the United Kingdom. Specifically:
- Sign-up records are held in a dedicated, access-controlled database, kept separate from any other systems.
- Verification and notification emails are sent through our own self-hosted mail server.
We do not sell your data, and we do not share it with third-party marketing or advertising companies. We do not use third-party analytics or advertising trackers on this site.
Traffic to and from this website is routed via Cloudflare, which provides security and content-delivery services and may process technical connection data (such as IP addresses) in transit on our behalf. Your sign-up details themselves are stored only on our own UK infrastructure.
International transfers
Your personal sign-up data is stored in the UK and is not transferred outside the UK.
05How long we keep it
We keep your sign-up data for up to 24 months from your most recent interaction with us (for example, your sign-up or a reply to one of our emails), after which it is deleted — unless you ask us to delete it sooner, or you become a customer, in which case a separate retention policy will apply.
You can ask us to delete your data at any time; see below.
06Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data (“right to be forgotten”)
- Restrict or object to our processing
- Withdraw consent at any time, without affecting processing done before withdrawal
- Data portability — receive your data in a portable format
To exercise any of these, email [email protected]. We will respond within one month, as required by law.
If you are unhappy with how we handle your data, you have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk.
07Future product data
aDiligence is a cyber due-diligence product for mergers, acquisitions, and private-equity transactions. As the product develops, it will process information relating to target companies and their external cyber posture, gathered from publicly available sources. Where that information includes personal data, we will act as a data controller or processor as appropriate, and a dedicated privacy notice and data-processing terms will govern that activity.
This website policy does not cover product data. If you become a customer, you will receive the relevant terms and privacy documentation before any such processing begins.
08Changes to this policy
We may update this policy from time to time. The “last updated” date at the top shows when it last changed. Material changes affecting how we use your data will be communicated to you directly where appropriate.