Who we are
VAPT.UK is the United Kingdom practice of Hassan Jawaid, independent penetration tester. Contact: [email protected].
What we collect from this website
If you submit the contact form we receive your name, work email, company, selected service, message, and a site source tag (vapt.uk). We use this to reply and to quote. Lawful basis: steps at your request prior to a contract (UK GDPR Article 6(1)(b)) and legitimate interests in running a professional practice (6(1)(f)).
Engagement data
If we contract, we process the minimum target data required to test and report, under the statement of work and authorisation letter. We do not use client data to train models. After close we delete collected target data and retain the report and contract file as agreed with you, typically for the limitation period.
Processors
The public contact form is delivered via Formspree. Hosting is expected to be Cloudflare Pages. We do not currently run a separate UK analytics property on this site.
Your rights
You may request access, correction, erasure, restriction or objection, and data portability, by emailing [email protected]. You may complain to the Information Commissioner’s Office at ico.org.uk. We do not publish an ICO registration number we have not confirmed on this page.
Retention of enquiries
Unconverted enquiries are kept only as long as needed to complete the conversation, then deleted, unless we must keep them for a legal claim.