Privacy
Policy

01

Who we are

Dettogni Ltd is a security consulting and managed operations practice registered in England and Wales (Company No. 17184776), operated by Alex Ulfeldt and based in Milton Keynes, United Kingdom.

Dettogni Ltd is registered with the Information Commissioner's Office (ICO) as a data controller. ICO registration reference: ZC147795.

Dettogni Ltd is the data controller for personal data collected through this website and through Keep by Dettogni (dettogni.com/keep/), a website care and maintenance service operated under the same legal entity. This policy covers both services. This policy explains what data we collect, why we collect it, how we use it, and what your rights are under UK GDPR and the Data Protection Act 2018.

If you have any questions about this policy or how your data is handled, contact us at hello@dettogni.com.

02

Data we collect

Contact form submissions

When you submit an enquiry through this website, we collect the following information you provide voluntarily:

• Full name
• Organisation or business name
• Email address
• Job role or title (optional)
• Website URL (optional)
• Your reason for enquiring
• Any message content you include

Automatically collected data

When you visit this website, certain technical data is processed automatically by our infrastructure providers. This includes your IP address, browser type, the pages you visit, and request timestamps. This data is processed by Cloudflare as part of our web infrastructure. See the Third Parties section for details. We do not operate our own analytics platform and do not use tracking pixels, advertising networks, or behavioural profiling tools.

The contact form uses Cloudflare Turnstile to reduce spam and automated submissions. Cloudflare may process technical information required to verify that a form submission is legitimate.

Keep by Dettogni: client operational data

If you become a Keep client, we additionally hold and process the following in order to deliver the service:

• Your domain name and DNS configuration details
• Email address used to deliver monthly status reports
• Website content and files provided during onboarding (logos, images, copy)
• Billing name and contact details passed to GoCardless for Direct Debit collection

03

How we use it

We use the information you provide through the contact form for one purpose: to respond to your enquiry. Your details are read personally by Alex Ulfeldt and used solely to reply to you and, where relevant, to arrange a discovery call.

We do not add enquiries to marketing lists. We do not send newsletters, promotional communications, or automated sequences. We do not share, sell, or transfer your personal data to any third party for their own purposes.

If an enquiry leads to a retained engagement, the data relevant to that engagement is handled under a separate Data Processing Agreement which we provide to clients on request.

Keep by Dettogni: client data

For Keep clients, we use your data to provide the hosting and website management service you have contracted, including managing your domain's DNS and security configuration, delivering monthly status reports to your email address, and actioning content update requests. We do not use Keep client data for any purpose beyond service delivery.

04

Legal basis

We process personal data submitted through the contact form on the basis of legitimate interests (Article 6(1)(f) UK GDPR). Our legitimate interest is responding to business enquiries directed to us. We have assessed that this interest is not overridden by your rights and freedoms, given that the data is submitted voluntarily, used only to respond to your enquiry, and not used for any other purpose.

Where we enter into a client engagement, processing under that engagement is carried out on the basis of contract performance (Article 6(1)(b) UK GDPR) and, where applicable, legal obligation (Article 6(1)(c)).

05

Third parties

We use a small number of third-party services to operate this website. Each acts as a data processor on our behalf and is subject to appropriate data processing agreements.

We do not use advertising networks, social media plugins, or session recording tools. We use Cloudflare Web Analytics to measure aggregate website usage. This service does not use cookies, does not collect personal data, and does not track individual visitors across sites. All other third-party services listed above are used only to the extent necessary to operate our services.

06

Data retention

Contact form submissions that do not result in a client engagement are retained for no longer than 12 months from the date of submission, after which they are deleted.

Where an enquiry leads to a client engagement, records relevant to that engagement are retained for 6 years from the end of the engagement, in line with UK legal and tax requirements.

For Keep by Dettogni clients: active client records, including domain configuration, contact details, and correspondence, are retained for the duration of the retainer and for 6 years thereafter. Website content files provided during onboarding are deleted within 30 days of offboarding. DNS configuration and Cloudflare zone data is removed within 30 days of the retainer ending.

Infrastructure logs processed by Cloudflare are subject to Cloudflare's own retention periods, which vary by log type. Cloudflare's free plan retains request log data for a limited period; detailed logs are not retained by Dettogni.

07

Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: you can request a copy of the personal data we hold about you.
• Right to rectification: you can ask us to correct inaccurate data.
• Right to erasure: you can ask us to delete your personal data where there is no legitimate reason for us to continue holding it.
• Right to restriction: you can ask us to restrict processing of your data in certain circumstances.
• Right to object: you can object to processing based on legitimate interests. We will stop processing unless we have compelling grounds to continue.
• Right to data portability: where processing is based on consent or contract, you can request your data in a structured, machine-readable format.

To exercise any of these rights, email hello@dettogni.com. We will respond within one calendar month. There is no charge for exercising your rights.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the UK supervisory authority: the Information Commissioner's Office (ICO), ico.org.uk. Our ICO registration reference is ZC147795.

08

Cookies

This website does not use cookies for tracking, analytics, or advertising purposes. We do not set any first-party cookies.

Cloudflare may set a functional cookie (__cf_bm) as part of its bot management service. This cookie is strictly functional. It is used to distinguish between human visitors and automated bots and does not track you across other sites or for advertising purposes. It expires at the end of your browser session.

No cookie consent banner is displayed because we do not set any non-essential cookies. If this changes, this policy will be updated and a consent mechanism will be implemented.

09

Contact us

For any questions about this policy, to exercise your data rights, or to raise a concern:

• Email: hello@dettogni.com
• Registered office: Dettogni Ltd, 5 Brayford Square, London, E1 0SG
• Company No. 17184776, registered in England and Wales
• ICO Registration No. ZC147795

This policy was last reviewed and updated on 2 July 2026. We may update it from time to time; the effective date at the top of the page will reflect the most recent revision.