This notice explains what happens to your information if you use a form on this website — for example, "Request early access" — if you contact us by email, and what cookies and measurement tools this website uses. It does not cover data the ClaveQ Scan appliance itself observes when scanning a customer's network — that's covered separately by our Data Processing Agreement (available on request).

Who we are

ClaveQ is a trading name of QUANTUM CLAVE LTD, a company registered in England & Wales, no. 17340121. Registered office: 49 Jamaica Street, Liverpool, England, L1 0AH. We are the "data controller" for the information described here — meaning we decide what it's used for and are responsible for looking after it.

What we collect

When you submit the "Request early access" form, we collect:

• your work email address
• your organisation's name, if you give it
• what you tell us you're looking to scan
• whether you've ticked the box to receive product updates
• your approximate location and browser/device, which Forminit derives automatically from your IP address at the time of submission
• if you arrived by clicking one of our Google ads: the ad's click reference (a "gclid") and any campaign tags (UTM parameters), which the form reads from the page address when you submit it

If you email us directly, for example at tony@claveq.com or hello@claveq.com, we hold your email address, the content of your messages and any details you choose to include, such as your name, organisation and what you are looking to scan. We use them to reply to you and to deal with your enquiry, on the same legitimate-interest basis as the form (see the table below). Emails are kept for the same period as form enquiries (see "How long we keep it").

Why we use it, and on what basis

We never use it for anything else, and we don't sell it.

Who we share it with

• Google (Workspace) — hosts the claveq.com email, so it stores the emails you send us and the replies we send you.
• Cloudflare, Inc. — our website hosting provider, which handles ordinary technical logs (like your IP address) for any visit to this site.
• Forminit (operated by UXPLUS LTD, a UK company) — the form-processing service that receives and stores your submission on our behalf, and automatically derives approximate location and browser/device from your IP address.
• Google — only if you arrived from one of our Google ads: we upload the ad's click reference and the time of your enquiry to Google Ads, so it can count the enquiry against the ad. We do not send Google your email address, name or organisation.
• Google (Tag Manager and measurement tags) — this website loads Google Tag Manager on every page. Once you have accepted cookies (see below), the tags it loads can send information about your visit, such as the pages you view and your approximate location, to Google.

We don't share your information with anyone else, other than organisations we're legally obliged to share it with (for example, a court order or a statutory request from a regulator) — something true of any company, not a description of anything that's happened.

Where it's processed

Forminit is UK-incorporated and stores submissions on AWS's Ireland region, so that part of your information stays within the UK/EEA — no international-transfer safeguard is needed for it. Cloudflare is US-headquartered, so hosting the site with them does mean your technical logs (like your IP address) are processed outside the UK. That transfer is covered by the Addendum to the EU Standard Contractual Clauses — Cloudflare's own data processing agreement's standard safeguard for exactly this situation. Google stores our email in Europe under the data region setting we have chosen, covering the subject, body and attachments of the emails we send and receive. Google may still process emails elsewhere when it runs the service, for example for support, and its transfer safeguards are set out in its Workspace data processing terms.

How long we keep it

Up to 12 months after our last contact with you, then deleted — unless you ask us to delete it sooner, or we're in an active, ongoing conversation with you, in which case we keep it for as long as that continues.

Your rights

You have the following rights over your information, though which ones apply depends on why we're using it (see the table above):

• Access — ask us for a copy of what we hold about you.
• Rectification — ask us to correct or delete anything inaccurate or incomplete.
• Erasure — ask us to delete your information.
• Restriction — ask us to limit how we use it.
• Object — object to our use of your information where we rely on legitimate interest (this applies to replying to your enquiry, not to marketing — for marketing, withdrawing consent achieves the same thing).
• Portability — ask us to transfer the information you gave us to another organisation, or to you (this applies where we rely on consent — i.e. the marketing tick-box — not to legitimate interest).
• Withdraw consent — withdraw your marketing consent at any time, with no effect on the legitimate-interest basis we use to reply to your enquiry.

To use any of these, email hello@claveq.com or tony@claveq.com and we'll respond within a month. If you're unhappy with how we've handled your data, you can also complain to the UK Information Commissioner's Office — we'd appreciate the chance to put it right first, but the choice is yours: ico.org.uk/make-a-complaint ↗, 0303 123 1113, or by post to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Cookies and tracking

This website uses cookies. We load Google Tag Manager on every page. Google Tag Manager is a container that loads measurement tags we configure, and those tags can set cookies on your device and read them back to measure visits and advertising. We set these cookies only after you accept them on our cookie banner. If you decline, the tags do not run and the site works the same way.

You can change your choice at any time using the cookie settings link in the footer, or by clearing cookies in your browser. Your browser can also block cookies altogether.

Your light/dark theme choice and your cookie choice (accept or reject) are stored in your browser's local storage, not in a cookie, and are never sent to us. Your cookie choice is kept so the banner does not return on every page.

The advertising measurement described above is separate: if you arrive from one of our Google ads, the form reads the ad's click reference from the page address when you submit it, and we upload that reference to Google Ads to count the enquiry.

← Back to claveq.com