Privacy information for 5Z Product Security, a B2B product-security consulting and managed-services business and a division of 5Z Consulting.
About this notice
5Z Product Security is a division of 5Z Consulting providing B2B product-security consulting and managed services. This notice explains how we handle personal information through this website and our professional relationships. For privacy questions or requests concerning your personal information, contact privacy@5zconsulting.com.
Website information
We collect information you provide: name, work email, company, job title, a telephone number if volunteered, form submissions and scheduling information. Website providers may process IP addresses, device information, technical logs and usage or analytics data. Please do not submit sensitive technical material through the initial enquiry form.
Engagement information
Only where necessary for the agreed engagement, we may handle product architecture, firmware information, software dependencies, SBOMs, vulnerability and incident information, technical documentation, repository access, development processes, product-support information and customer-provided compliance evidence. Technical information is not always personal data; confidentiality obligations apply independently. Where we process personal data on a client’s instructions, the engagement and applicable data-processing agreement govern that processing.
Purposes and legal bases
We use contact and scheduling information to respond to enquiries and administer professional relationships, based on legitimate interests. Contractual necessity applies where the individual is a contracting party or requests pre-contractual steps. Legal obligations may require certain records. Consent is used where required for optional marketing or non-essential tracking and can be withdrawn. Our legitimate interests include operating, securing and improving our services, subject to your rights.
Confidentiality and security
We apply least-privilege access, restrict access to personnel involved in an engagement, use encryption in transit and appropriate encrypted storage, and agree retention and deletion controls. Customer-controlled repositories are used where practical. Confidentiality agreements and NDAs are available where appropriate. We do not sell customer technical data. Confidential client information is not used to train public AI models. No security measure can eliminate every risk.
Service providers and disclosures
Website hosting, enquiry automation, communications, scheduling and other service providers may process information on our behalf under appropriate contractual controls. Framer supports the website and Make supports enquiry routing. Engagement-specific providers and access arrangements are reviewed with the client. Disclosures may also be necessary to comply with law or protect legal rights.
International transfers
Provider processing may take place outside the EEA. Where GDPR applies, transfers require an applicable adequacy decision or appropriate safeguards such as European Commission standard contractual clauses, with additional measures where necessary. Contact us for information about relevant safeguards. Hosting location and transfer arrangements for technical engagement data are agreed for the engagement.
Retention
We retain information only as long as needed for the relevant purpose, relationship, legal obligation or the establishment or defence of claims. Enquiry records are reviewed for continued relevance. Engagement retention, return and deletion are defined by the contract and applicable law; restricted backup copies expire according to the relevant backup cycle.
Your rights
Subject to applicable law, you may request access, correction, erasure, restriction or portability of personal data, and object to processing based on legitimate interests or direct marketing. You may withdraw consent without affecting prior lawful processing. Contact privacy@5zconsulting.com; proportionate identity verification may be required. You may complain to a supervisory authority, particularly where you live, work or believe an infringement occurred.
Cookies and website analytics
Necessary technologies support site operation. Any non-essential cookies or similar tracking requiring consent must remain disabled until consent is obtained. Browser settings can limit cookies, although this may affect functionality. For information about website analytics, cookies and relevant retention periods, contact privacy@5zconsulting.com.
Updates
We may update this notice to reflect service, provider or legal changes. Material changes will be communicated where required. For questions about this notice, contact privacy@5zconsulting.com.