CounterShadow Ltd Website Privacy Policy

Who we are

CounterShadow Ltd is registered in England and Wales, company number 15941419. We are registered with the Information Commissioner’s Office (ICO), registration number CSN4925208. For anything relating to your personal data, contact us at hello@countershadow.com.

What this notice covers — and what it does not

This notice covers personal information we hold as a controller: website visitors, people who enquire about or buy our products, and people we contact about them.

It does not cover data processed inside the CounterShadow Platform. When our platform investigates security alerts for a customer, any personal data within that telemetry belongs to the customer, who remains the controller; we process it as a processor under the customer’s agreement with us, which sets out the safeguards that apply. If your data may appear in a customer’s security telemetry, the customer’s own privacy notice is the right place to look.

What we collect, why, and on what legal basis

Cookies

Our website uses a consent banner. Non-essential cookies are not set until you choose to accept them, and declining is as easy as accepting.

Strictly necessary cookies are always active: they include the cookie that remembers your consent choice itself — including, if you decline, a single cookie whose only purpose is remembering that you declined so we do not ask you again.

Analytics cookies (set only with your consent) are provided by HubSpot, our website and CRM platform. They include cookies such as __hstc, __hssc, __hssrc and hubspotutk, used to recognise returning visitors and understand how people use our site so we can improve it.

You can change or withdraw your cookie consent at any time using the Cookie Settings link in the footer of every page, which reopens the banner. Our banner also honours the Global Privacy Control browser signal: if your browser sends it, we treat it as a decline without asking.

Who we share personal information with

We do not sell personal information. We share it with service providers who process it on our instructions under data processing agreements: HubSpot (website, CRM and marketing), Google (business email, documents and cloud infrastructure), and our accountants (billing and payroll records only). Where the law requires it, we may also share information with regulators or law enforcement.

International transfers

We are a UK company and most of our processing happens in the UK and EU. Some of our service providers process data in the United States or other countries; where they do, transfers are protected by recognised safeguards — the UK International Data Transfer Agreement or the EU Standard Contractual Clauses with the UK Addendum — or by an adequacy decision.

How long we keep information

We keep enquiry, sales and support records for the duration of our relationship with you or your organisation and for up to two years afterwards, then review and delete. Contract and billing records are kept for six years from the end of the relevant financial year, as tax law requires. Unsuccessful job applications are deleted six months after the recruitment process ends. Analytics data persists for the lifetime of the relevant cookies. You can ask us to delete your information at any time, and we will, unless the law requires us to keep it.

How we protect it

Security is our business. We operate an information security management system aligned to ISO/IEC 27001, with encryption in transit and at rest, multi-factor authentication across our systems, access limited to the people who need it, and company-managed, encrypted devices.

Your rights

Under UK data protection law you have the following rights over your personal information.

To exercise any of these rights, email hello@countershadow.com. We will respond without undue delay and in any event within one month.

Changes to this notice

When we make material changes we will update this page and the date at the top. This version reflects the introduction of our cookie consent banner in July 2026.

How to complain

If you are unhappy with how we have used your personal data, please tell us first at hello@countershadow.com — we would rather fix it than have you live with it.

You also have the right to complain to the ICO: