Who we are
This website is run by Octopus 365 Ltd., registered in England and Wales, company number 07493979. We're the data controller for information you give us through it. We're registered with the Information Commissioner's Office, registration number ZA069820.
Questions about your data: email hello@octopus365.com or ring 01792 94 94 94.
What we collect, and why
Contact form
Your name, email address, and optionally your phone number, business name and message. We use it to reply to you. Our lawful basis is legitimate interests: you've asked us to get in touch.
Free exposure check
Your name, work email address, business name, website domain, rough staff numbers and optionally your phone number, plus your consent to the check. We use these to run the check and send you the results.
The check looks only at public information about your domain: breach databases and dark web sources for email addresses at your domain, your domain's public email records, and what your business shows to the internet. We send the report only to an email address at the domain checked. Our lawful basis is your consent, which you can withdraw at any time by emailing us.
Email security checker
The email checker runs in your browser. It asks Cloudflare's public DNS service for your domain's records. We don't receive or store the domain you check or the results.
Phone calls and emails
If you contact us directly, we keep the conversation so we can help you and refer back to it.
Spam protection
Our forms use Cloudflare Turnstile to check that a person, not a bot, is sending them. It looks at signals from your browser for that one check, and Cloudflare doesn't use it to track you across websites or for advertising.
Who we share it with
We don't sell your information or share it for marketing. We use a small number of suppliers to run this website and handle enquiries:
- Cloudflare hosts this website and processes form submissions.
- Make passes form submissions on to our team.
- Microsoft hosts our email and files.
- usecure provides the breach database search used in the exposure check, for the domain you give us.
Some of these suppliers may process data outside the UK. Where they do, they're covered by UK adequacy regulations or the UK's international data transfer safeguards.
If you become a customer, how we handle your business's data is covered by our customer agreement.
How long we keep it
Enquiries and exposure check results that don't lead to work are deleted within two years. If you become a customer, we keep your records for as long as you're a customer and for six years after, as required for tax and legal purposes.
Your rights
You can ask us for a copy of the information we hold about you, and ask us to correct it, delete it, or stop using it. Email hello@octopus365.com and we'll respond within one month.
If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
This website doesn't set any cookies and doesn't use advertising trackers, so there's no cookie banner.
We count visits with Cloudflare Web Analytics, which doesn't use cookies, doesn't store anything on your device and doesn't follow you across other websites. It tells us things like which pages are read and which sites people came from, as totals rather than about you as a person.
Our pages, fonts and images are served from our own website, and the only outside services they use are the Cloudflare ones described on this page.
Links to other websites, such as our remote support page, TeamViewer, Trustpilot and LinkedIn, are covered by those sites' own privacy policies.
Changes
If we change how we use your information, we'll update this page and the date at the top.