Digital Gnome (“we”) provides plain-English cyber security and assurance tools. For the data you put into the product, you are the data controller and we are your processor. For your account and billing details, we are the controller.

Your account details (name, email, business name). The answers, devices, suppliers and records you add to the product. Basic technical logs needed to run the service securely. We connect to your systems read-only, and we never read the contents of your emails, files or messages.

To provide the service, keep it secure, and support you. We do not sell your data, and we do not use it to train third-party AI models.

We rely on contract (to deliver the service you signed up for), legitimate interests (to keep it secure), and consent (for anything optional, such as marketing, which you can withdraw at any time).

We keep your data while your account is active. Close your account and we delete it, or export it for you first. You can ask us to delete specific data at any time.

You can access, correct, export or delete your data, and complain to the ICO (ico.org.uk) if you are unhappy with how we handle it. To exercise any of these, email [email protected].