Privacy

— Last updated 13 May 2026

Short version. Foundry Cyber Ltd is a UK cybersecurity company based in Yorkshire. This site, foundrycyber.com, is a marketing site. We've designed it to collect as little data about you as possible:

Cookie-less first-party analytics (Microsoft Application Insights). We count page views and aggregate, country-level location so we can tell whether the site is reaching the right audience. No cookies, no localStorage, no cross-site tracking, no advertising, no session recording.
No advertising trackers. No third-party retargeting pixels.
Two third-party loads: Microsoft Application Insights (cookie-less analytics, see above) on every page, and the Cloudflare bot-challenge on the contact page. Typefaces are served from this domain, so your IP isn't sent to a font provider.
An opt-in storage banner asks once whether we can store your light/dark theme choice in local storage. It's off by default until you accept. The banner is independent of analytics; analytics runs either way because it doesn't store anything in your browser.
Hosting is on Microsoft Azure (West Europe). Microsoft logs request metadata as part of running the platform.

If that's enough for you, you can stop reading here. If you want the full picture, read on.

Who we are

Foundry Cyber Ltd ("we", "us", "our") is a private limited company registered in England & Wales (company number 17135231), based in Yorkshire, United Kingdom. For data protection purposes we are the data controller for this website. You can contact us at hello@foundrycyber.com.

What data we collect

When you visit foundrycyber.com:

On your first visit a small banner asks whether we can store a theme preference in your browser. Your decision is recorded in a local-storage entry called fc-consent-v1 (containing the word "accepted" or "rejected"). This entry is strictly necessary so the banner doesn't reappear on every page; it does not require separate consent.
If you accept, your browser stores a value called fc-theme when you toggle the light/dark button (containing the word "light" or "dark"). Nothing leaves your device.
If you reject, your theme choice isn't persisted between visits.
Either way, Microsoft Azure (our hosting provider) logs your IP address, browser user-agent, the page you requested, and the time, in standard server logs.
Microsoft Application Insights — a first-party analytics service we run via Microsoft Azure — counts an anonymous page view each time a page loads. It receives the page URL, the page title, the referring URL, the browser user-agent, and a country-level location derived from your IP. The IP itself is masked at ingest (stored as 0.0.0.0). Application Insights is configured with cookies disabled and with no use of localStorage or sessionStorage, so it does not write anything to your browser and cannot link two visits to the same person.

We do not collect form data (other than what you choose to send via the contact form), account data, or precise location data. We do not use tracking cookies. The analytics service described above is cookie-less and storage-less, configured specifically so it cannot identify you across visits.

If you email us via a mailto: link on this site, or send a message via our contact form, the resulting message is delivered to our hello@foundrycyber.com inbox. That email contains whatever you choose to write, plus standard email metadata (your address, subject line, time). We process those emails on a legitimate-interests basis to respond to enquiries.

Why we process this data

Theme preference: so the site looks the way you chose. Legitimate interests; low-impact preference.
Server logs (Microsoft): so the platform stays available, secure, and free of abuse. Legitimate interests, balanced against your right to private browsing.
Cookie-less analytics (Application Insights): to understand whether the site is reaching its intended audience (UK SMEs, security buyers) and which pages are useful. Legitimate interests, with the privacy intrusion minimised by disabling cookies, disabling browser storage, and masking IP addresses. Because there is no identifier persisted to your browser, we cannot link two visits to the same person; the data is functionally a count of anonymous, separate page views.
Email correspondence: to reply to your enquiries. Legitimate interests / contractual necessity.

Cookies and similar technologies

This site does not set any tracking cookies. The analytics described above (Microsoft Application Insights) is configured with cookies and browser storage disabled, so it sets nothing in your browser. The Cloudflare bot-challenge on the contact page may set a short-lived cf_chl_* cookie while the challenge is in flight; that is strictly necessary to run the challenge and is not used for tracking. We use these browser-storage entries:

fc-consent-v1 (local storage): strictly necessary. Records your choice from the storage banner so we don't ask again on every page. Values: "accepted" or "rejected".
fc-theme (local storage): optional. Stores your light/dark theme preference. Only written if you accepted the banner.
fc-tier-recommender (session storage): strictly necessary, only set if you click "Talk to us about [tier]" from the tier guide. Carries your answers across to the contact form so they prefill the message field. Cleared as soon as the contact form reads it, and in any case removed automatically when you close the tab.

You can change your decision any time via the "Storage settings" button at the bottom of every page. Clearing your browser's site data removes these entries.

Third parties

The third parties involved in serving this site are:

Microsoft (Azure Static Web Apps): hosts the static site. Region: West Europe (Netherlands).
Microsoft (Application Insights): cookie-less first-party analytics, also part of Microsoft Azure (West Europe, Netherlands). Receives an anonymous page-view record per page load as described above. We use this to measure aggregate site usage. The Application Insights JavaScript SDK loads from js.monitor.azure.com.
Cloudflare (DNS): provides DNS resolution for foundrycyber.com. We currently configure all records as DNS-only (no proxy), so Cloudflare does not see your page requests.
Cloudflare Turnstile (contact page only): runs a privacy-friendly bot-challenge on the /contact page to block spam submissions. When you visit that page, your browser loads a script from challenges.cloudflare.com and Cloudflare grades the challenge using your IP and browser signals. It is not used for cross-site tracking. The challenge is not loaded on any other page of the site.

Typefaces (Inter, JetBrains Mono) are served from this domain rather than a third-party CDN, so loading the site does not transfer your IP address to any font provider.

We do not share data with any advertising, retargeting, or data-broker third party.

International transfers

Hosting may transfer your IP address and request metadata outside the UK:

Microsoft Azure West Europe is in the Netherlands (EU/EEA). UK adequacy applies.

Your rights

Under the UK GDPR you have the right to:

access the personal data we hold about you,
ask us to correct or delete it,
object to or restrict our processing of it,
ask for your data in a portable format,
complain to the Information Commissioner's Office (ICO).

Because we don't keep customer accounts or marketing databases tied to this website, the practical scope is limited to email correspondence and any retained server logs. To exercise any of these rights, email hello@foundrycyber.com.

Data retention

Local storage preference:persists in your browser until you clear site data. We don't have a copy.
Server logs (Microsoft):retained per Microsoft's defaults, typically 90 days for security telemetry. We do not extract or archive these logs.
Application Insights analytics:retained for 90 days, then deleted by Microsoft. We do not extract or archive this data beyond the 90-day window.
Email correspondence:retained for as long as the conversation is active and for a reasonable period afterwards (typically 24 months) for legal and operational reasons.

Security

We use Microsoft Azure for hosting, served over HTTPS only. We do not store user credentials or payment data on this site.

Children

This site is aimed at business users. We do not knowingly collect data from anyone under 18.

Changes to this policy

If we change this policy we will update the "Last updated" date at the top. Material changes will be flagged on the page itself.

How to complain

If you are unhappy with how we have handled your data, please tell us first at hello@foundrycyber.com. You also have the right to complain to the Information Commissioner's Office: ico.org.uk.