Legal
Privacy Policy
Last updated: 4 October 2026. This policy explains what personal data Vaulnut collects through this website, why, and the rights you have over it.
Who we are
Vaulnut provides managed IT and technology services to UK organisations. For the purposes of UK data protection law, Vaulnut is the data controller for personal data collected through this website.
If you have questions about how we handle personal data, contact us at info@vaulnut.com.
What we collect
Enquiry details: when you submit our contact form, we collect the details you provide: typically your name, organisation, work email, phone number and your message. Website forms are protected by Cloudflare Turnstile, which performs a brief human-verification check.
Website usage: with your consent, we use cookies to understand how visitors use the site (pages visited, time on site, referring source). We use HubSpot for analytics, Microsoft Clarity for session recordings and heatmaps, and the Meta Pixel to measure traffic from Facebook and Instagram. You can accept or decline these at any time via the cookie banner or the cookie policy page.
We do not collect special-category data through this website, and we do not buy or sell personal data.
Why we use it (lawful bases)
Responding to enquiries: to reply to your message and discuss your requirements. Our lawful basis is our legitimate interest in running our business, and steps taken at your request before entering a contract.
Website analytics: to improve the site, and only with your consent, given via the cookie banner.
Security: to protect the site from spam and abuse. Our lawful basis is our legitimate interest in keeping our systems secure.
Who we share it with
HubSpot, Inc. acts as our data processor for enquiry management and (with your consent) website analytics. Microsoft Clarity and Meta Platforms process analytics data on our behalf when you consent to tracking cookies. We do not share personal data with anyone else unless required by law.
International transfers
HubSpot may process data outside the UK. Where this happens, transfers are protected by appropriate safeguards, such as the UK Extension to the EU–US Data Privacy Framework or standard contractual clauses.
How long we keep it
Enquiry data is kept for up to 24 months from our last contact with you, unless a business relationship means we need it longer. Analytics data follows HubSpot's standard retention periods.
Your rights
Under UK data protection law you have the right to access, correct, erase or restrict the use of your personal data, to object to its processing, to data portability, and to withdraw consent at any time (for example, by changing your cookie choice). To exercise any of these rights, contact us at info@vaulnut.com and we will respond within one month.
You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you believe we have handled your data unfairly.
Changes to this policy
We may update this policy as the website or our practices change. The current version will always be published here.