Privacy notice
How we handle information you give us. Last reviewed September 2026.
Who we are
504 Risk Management & Security is the trading name of Graeme Young, a sole trader based in Scotland. We are the data controller for personal information collected through this website. Contact: info@504risk.co.uk or 0141 260 0118.
What we collect
When you use the enquiry form we collect your name, organisation, email address, contact number, preferred time to call, the service you are interested in and your message. We do not collect anything else through the website, and we ask you not to include confidential operational details, known vulnerabilities, access codes or sensitive personal information in the form.
Why we collect it and on what basis
We use enquiry information to respond to you and arrange a conversation. Our lawful basis under UK GDPR is legitimate interests: responding to a request you have made to us. If an engagement proceeds, we process information necessary to perform the contract with you.
Who processes it
- Web3Forms delivers form submissions to our email. Submissions pass through their service and are subject to their privacy terms.
- Proton hosts our email, where enquiries are received and stored.
- Cloudflare hosts this website and may process technical data such as IP addresses for security and performance.
We do not sell, share or transfer your information to any other party, and we do not use it for marketing.
How long we keep it
Enquiry information is deleted within 28 days of our last contact with you if no engagement proceeds. Where we go on to work together, we retain information for the duration of the engagement and for up to six years afterwards to meet contractual, insurance and accounting obligations.
Cookies
This website sets no analytics, advertising or tracking cookies. Our hosting provider may set strictly necessary cookies for security purposes.
Your rights
You have the right to access the personal information we hold about you, to have it corrected or deleted, to object to or restrict its processing, and to data portability where applicable. To exercise any of these rights, contact info@504risk.co.uk. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
Changes
We review this notice periodically and will update the date above when it changes.