Privacy Policy

Last updated: 11 July 2026

1. Who we are

CloakCore is a private security and counter-exposure service operated by CloakCore. We are the data controller for the personal data described in this policy. You can contact us at cloakcore@gmail.com.

2. Scope

This policy applies to this website. Client engagements are governed by a separate written service agreement, which sets out additional confidentiality and data-handling obligations.

3. Personal data we collect

We use this data solely to respond to your enquiry and arrange a consultation.

4. Lawful basis for processing

We process this data on the basis of your consent, our legitimate interest in responding to enquiries you initiate, and steps taken at your request before entering into a contract.

5. Data we do not collect

6. Retention

We retain enquiries only for as long as necessary to deal with them, and in any event no longer than 90 days after our last contact with you, unless the enquiry results in a client engagement (in which case the service agreement governs retention) or we are required by law to retain it for longer.

7. Disclosure

We do not sell personal data or share it for marketing purposes. Personal data may be processed on our behalf by our hosting, form-handling and email service providers, each acting as a processor under contract and permitted to use the data only on our instructions. We may disclose personal data where required to do so by law.

8. International transfers

We accept clients worldwide, and our service providers may process data outside the United Kingdom and EEA. Where this occurs, we rely on appropriate safeguards, such as adequacy decisions or standard contractual clauses.

9. Your rights

Subject to your jurisdiction, you may have the right to access, rectify, erase, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. To exercise any of these rights, contact cloakcore@gmail.com.

If you are in the United Kingdom or the EEA and are dissatisfied with our response, you may lodge a complaint with your supervisory authority (in the UK, the Information Commissioner's Office, ico.org.uk). If you are resident in a US state with applicable privacy legislation, you may have equivalent rights, including the right not to be discriminated against for exercising them. We do not sell personal information.

10. Security

This website is served over TLS. Enquiries are handled over encrypted channels and access is restricted to personnel who require it. We apply data minimisation to our own operations.

11. Children

Our services are not directed at persons under 18, and we do not knowingly collect their personal data.

12. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised date.