Privacy Policy

This Privacy Policy explains how Aqua Networks Limited ("DataSec", "we", "us", or "our"), a company incorporated in England and Wales (Companies House number 07207169) with its registered office at 20-22 Wenlock Road, London, England, N1 7GU, United Kingdom, collects, uses, and protects personal data when you visit datasec.sh or use the DataSec bot detection and mitigation service (the "Service").

1. Information We Collect

• Account and contact information: name, work email, company name, and any information you submit through our contact or demo request forms.
• Service traffic data: when the Service is deployed on a customer's website or API, we process technical signals from incoming requests (IP address, device and browser characteristics, TLS handshake metadata, behavioral interaction patterns) strictly to distinguish human traffic from automated traffic. This data is processed on behalf of our customers as a data processor, governed by a separate Data Processing Agreement (DPA) available on request.
• Website usage data: standard analytics data (pages visited, referrer, approximate location, device type) collected via cookies and similar technologies — see our Cookie Policy for details.

2. How We Use Information

We use collected information to: provide and improve the Service; respond to demo requests and support inquiries; send product and security updates (you can opt out at any time); detect and prevent fraud, abuse, and security incidents; and comply with legal obligations.

3. Legal Basis for Processing (GDPR)

Where the UK/EU GDPR applies, we rely on: performance of a contract (providing the Service to customers), legitimate interests (product improvement, security, fraud prevention), consent (marketing communications, non-essential cookies), and legal obligation (tax, accounting, and compliance requirements).

4. Data Sharing

We do not sell personal data. We may share data with: sub-processors who help us operate the Service (cloud hosting, email delivery, analytics — a current list is available on request); professional advisors (legal, accounting); and law enforcement or regulators where legally required.

5. International Data Transfers

Where data is transferred outside the United Kingdom or the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or the UK International Data Transfer Agreement (IDTA).

6. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy, or as required by law.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise these rights, contact us at privacy@datasec.sh.

8. Security

We apply industry-standard technical and organizational measures to protect personal data, including encryption in transit, access controls, and regular security review.

9. Children's Privacy

The Service is not directed at individuals under 16, and we do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via the website or, for customers, via email.

11. Contact

Questions about this Privacy Policy can be sent to privacy@datasec.sh or by post to Aqua Networks Limited, 20-22 Wenlock Road, London, England, N1 7GU, United Kingdom.