Legal information, in full view.

Privacy policy

1 · Who we are

Controller: Musketeers Security Ltd, Company No. 16892937 (England & Wales). Registered office: 44 Grand Parade, Brighton BN2 9QA. Privacy contact: privacy@musketeers-security.com.

2 · What we collect, why, and on what basis

• Enquiries & incident-response calls — name, contact details, what you tell us. Lawful basis: legitimate interest in responding.
• Expert intro booking (Microsoft Bookings) — name, work email, slot details. Lawful basis: contract / pre-contract steps.
• Free tools & nurture list — answers, score, name, work email, role, company. Lawful basis: consent — never pre-ticked, results never conditional on marketing consent, every email carries unsubscribe (PECR).
• Visitor identification (Snitcher) — IP address → company lookup. Lawful basis: consent (marketing category) — does not load until you opt in.
• Behavioural analytics (Syft Data) — on-page events. Lawful basis: consent (analytics category).
• Page metrics (Cloudflare Web Analytics) — cookieless page views. Lawful basis: legitimate interest (no cross-site profiling).

3 · Who receives it

Processor categories include visitor identification, consented analytics, content delivery, Microsoft 365 and Bookings, and authorised email delivery. Each operates under appropriate contractual terms. Personal data is never sold. Member firms receive engagement data only under the NDA and contract governing your engagement.

4 · How long we keep it

• Enquiry correspondence — only while needed to respond and manage the relationship.
• Free-tool answers and scores — until consent is withdrawn or the documented retention period expires.
• Incident-response engagement records — in line with contractual, legal and evidential requirements.
• Booking records — under the applicable Microsoft 365 retention policy.

5 · Your rights

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time — write to privacy@musketeers-security.com. You may complain to the Information Commissioner's Office: ico.org.uk.

6 · Changes

Versioned and dated at the top of this page; material changes announced on the site before they take effect.

Cookie policy

This site stores a strictly necessary local preference so it can remember whether you accepted or declined optional analytics. Optional analytics do not load until you consent. We do not use advertising cookies or cross-site personal profiling.

Your choice

You can accept or decline optional analytics from the banner and change that choice in Cookie preferences below. Withdrawing consent does not affect processing that occurred before withdrawal.

Website terms of use

By using this website you accept these terms. Content is general information, not legal, regulatory, insurance or security advice. It must not replace an assessment of your circumstances.

You may not probe, scan or test this site without written authorisation, introduce malicious code, misuse content or scrape it at scale. Approved security research must follow the Responsible Disclosure Policy.

Links to third-party websites are provided for convenience. Musketeers is not responsible for third-party availability or content. These terms are governed by the law of England and Wales.

Terms of business

Musketeers assesses, assembles and coordinates independent specialist practices. The engagement proposal and statement of work identify the scope, commercial route, named responsibilities, dependencies, fees and definition of done.

Specialists may contract directly with the client or operate under one agreed umbrella route. Whichever route is selected, delivery responsibilities, intellectual property, confidentiality, liability, insurance, change control and termination are confirmed in the signed engagement documents.

Full terms are issued with each proposal and prevail over this plain-English website summary.

Data protection & security statement

We apply data minimisation, least-privilege access, multi-factor authentication, encryption in transit and at rest, controlled sharing, supplier due diligence and documented incident procedures.

Personal data is shared with a consortium member only when required for an agreed engagement and subject to the appropriate NDA, controller-to-controller or processor terms. Suspected breaches are assessed promptly and notified where legal thresholds are met.

Responsible disclosure

If you believe you have found a security vulnerability affecting this site or a Musketeers service, email security@musketeers-security.com with a clear description, affected location and safe reproduction steps.

Do not access data that is not yours, degrade service, use destructive testing, publish details before resolution or demand payment. We will acknowledge valid reports, investigate and keep the reporter informed where contact details are supplied.

Cookie preferences

Use these controls to update the optional analytics preference stored in this browser.

Mock note: production wires these to the consent store used by the banner.