Controller and scope
Blackvault Systems Ltd, company number 16686976, is the controller for personal data handled through this website and direct business correspondence. Separate data terms may apply to a client configuration or bespoke engagement.
Privacy Notice
This notice explains how Blackvault Systems handles personal data connected with this website, direct enquiries, client configuration, onboarding and support.
Enquiry form information
The enquiry form collects the selected enquiry route, name, work email, organisation, role, area of interest, timing and the message you choose to provide. Organisation, role, area and timing can be left blank. A hidden anti-spam field is also used to reject automated submissions.
Form delivery and email fallback
A valid enquiry is forwarded only when an optional configured webhook is available and its host has been explicitly approved. If delivery is unavailable, the site returns a mailto link that opens a draft in your email application. The draft is not sent automatically; you decide whether to send it through your own email provider.
Website storage
The website does not write enquiries to a site database. The endpoint processes a bounded submission in memory and uses a short-lived, hashed network identifier for best-effort rate limiting. Vercel and network providers may process request metadata and security logs needed to host and protect the site.
Why information is used
Information is used to respond to enquiries, route the request to the appropriate Blackvault contact, take steps requested before an engagement, understand requirements, configure or support client work, maintain relevant correspondence and meet applicable legal or accounting duties.
Lawful basis
The lawful basis depends on the context: legitimate interests in responding to business enquiries and operating the website, steps taken at your request before an agreement, performance of an agreement, legal obligation, or consent where that is the appropriate basis.
Processors and hosting
Vercel hosts the website. When configured, an approved webhook provider processes the submitted enquiry for delivery, and Blackvault's email or business-communication providers process the resulting correspondence. Client engagements may use additional processors identified in the relevant agreement.
International transfers
Some hosting, webhook or communication providers may process information outside the United Kingdom. Where an international transfer requires a safeguard, Blackvault assesses the provider and relies on the applicable adequacy decision, contractual protection or other lawful transfer mechanism.
Retention
Ordinary enquiries that do not lead to an engagement are normally retained for no longer than 24 months after the last meaningful contact. Information may be kept longer when it forms part of an engagement, is needed to establish or defend a claim, or must be retained for legal, tax or accounting purposes.
Your rights
Subject to applicable law, you may ask for access, correction, deletion, restriction, objection or portability. You may also complain to the UK Information Commissioner's Office if you are dissatisfied with how personal data has been handled.
Sensitive material
Do not submit passwords, access tokens, private keys, full backups, full databases or unnecessary sensitive personal data. The form applies automated credential-pattern checks, but that check is not a substitute for removing sensitive material before sending.
Analytics and cookies
The website does not currently use a third-party analytics service or non-essential cookies. It therefore does not display a cookie-consent banner. Essential hosting and security processing may still occur when a page or form endpoint is requested.
Contact
Privacy questions and rights requests can be sent to support@blackvault.systems. Include enough detail for Blackvault Systems to identify the request and the correspondence concerned.