Privacy Policy

1. Who we are

Industrial Cybersecurity Partners Ltd (ICP) provides consultancy services and products focused on operational technology security. This Privacy Policy explains how we collect and use personal data when you use our website or contact us.

Controller: Industrial Cybersecurity Partners Ltd

2. What data we collect

We may collect:

• Contact details such as name, organisation, role, email address, and phone number
• Enquiry details that you choose to provide via contact forms or email
• Basic website usage data such as pages visited, browser type, and approximate location derived from IP address

We measure website usage with Vercel Web Analytics. It does not use cookies or store anything on your device, and it reports aggregated page views and a few anonymous events (for example, that a decision check was completed). It does not identify you.

We do not intentionally collect special category personal data. Please do not submit sensitive personal data via this website.

3. How we use your data

We use your data to:

• Respond to enquiries and requests
• Arrange meetings, pilots, or follow up discussions
• Improve our website and communications
• Maintain website security and prevent misuse

4. Lawful bases for processing

We process personal data based on:

• Legitimate interests in operating our business and responding to enquiries
• Taking steps prior to entering a contract where you request services
• Legal obligations where applicable

5. Data sharing

We may share personal data with trusted service providers that support website hosting, analytics, or email delivery. We do not sell personal data.

6. Decision checks (/ot)

The decision checks at /ot are answered by choosing options, and your answers are processed in your browser.

• To let you resume, a record is stored automatically when you answer, in your browser’s localStorage, on your device only. It holds the IDs of the options you chose and the step you reached, is cleared when you choose “Start again”, and is never sent to ICP.
• Your answers are not sent to ICP unless you choose “Stress test this decision with ICP”. (Anonymous usage events, such as that a check was started or completed, are counted as described in section 2; they include at most the result category, such as “Investigate”, never your answers or contact details.)
• If you choose “Stress test this decision with ICP”, this emails ICP your work email address and the note text built from your option choices. We use them only to reply to you, and handle them like contact-form enquiries: Resend processes the email for delivery, and rate-limit counters are kept in Redis.
• “Email to myself” opens your own email app. ICP sends nothing.

7. Data retention

We retain personal data only for as long as necessary to fulfil the purposes described above and to meet legal or regulatory requirements.

8. Your rights

You may have rights to access, correct, delete, or restrict processing of your personal data. You can contact us via the contact form on this website.

9. Security

We apply reasonable technical and organisational measures to protect personal data. No transmission method is completely secure.

10. Third party links

This website may include links to third party sites. We are not responsible for their content or privacy practices.

11. Changes to this policy

We may update this Privacy Policy periodically. The latest version will always be published on this page.