Legal
Privacy notice
This notice covers the data collected through this website. Data handling for an actual assessment engagement is governed separately, by an agreement signed before any configuration is transferred.
Last updated
What is collected, and why
PQVPN collects only what a scoping conversation actually requires. There is no tracking pixel, no advertising network, no cross-site identifier and no cookie set by this site.
| What | Why | Retention |
|---|---|---|
| Name, work email, company, role | To respond to your enquiry and identify the organisation | 365 days from submission by default |
| Phone number and country or region (optional) | To reach you by the method you prefer, in your business hours | 365 days from submission by default |
| Coarse estate characteristics — tunnel band, site band, vendor list, cloud providers | To scope the work and produce a preliminary complexity band | 365 days from submission by default |
| Objective, timeframe, driver and free-text notes | To understand what you actually need before the first conversation | 365 days from submission by default |
| Consent record and timestamp | To evidence the lawful basis for holding the above | Retained with the record |
| Submission identifier and correlation identifier | To trace a submission through processing without logging your details | Retained with the record; correlation identifiers appear in logs |
Retention and deletion
Lead records expire automatically. The default production retention is 365 days from submission, implemented as a time-to-live on the record itself, so expiry happens whether or not anyone remembers to run a cleanup. The period is configurable per environment and is documented in the repository.
To request export or deletion before expiry, email privacy@pqvpn.com from the address you submitted, or quote the submission identifier shown on the confirmation page. Requests are actioned against the record and confirmed back to you.
Processors
Form submissions are received and stored using Amazon Web Services. The application region is configured for data residency and is currently in the European Union. Content delivery for the website itself is global.
- Amazon Web Services — content delivery, request handling, lead storage and transactional email.
- Analytics — a privacy-conscious, cookieless provider may be configured. When it is, it receives page paths and a fixed set of event names only. It never receives your name, email address, company name, IP address, free text, or any technical detail about your estate; the analytics adapter drops any property outside a fixed allow-list before sending.
- Customer relationship management — a CRM integration may be configured to receive lead records. Where one is active, it is named here before it is enabled.
No processor beyond those listed receives data from this site. Third-party scripts are not loaded.
Logs
Application logs record submission and correlation identifiers, never contact details or free text. Where an abuse control requires an IP address, it is hashed with a rotating secret salt rather than stored, and the hash is retained only for the period the control needs.
Marketing
PQVPN does not send marketing email unless you explicitly opted in on the form, and that consent is recorded with a timestamp. Responding to your enquiry is not marketing. You can withdraw consent at any time by replying to any message or emailing privacy@pqvpn.com.
Compliance claims
PQVPN does not claim any specific certification on this site. Certifications are published only once held and evidenced. If your procurement process requires a particular attestation, ask directly and you will get an accurate answer about what is and is not currently in place.
Contact
Privacy questions and data requests: privacy@pqvpn.com. Security reports: security@pqvpn.com. See also the terms of use.