Privacy Notice

Last updated: 6 September 2026

1. Who we are

The data controller is Andras Mezofi trading as SecureDocUK (“we”, “us”, “our”).

We sell UK security document templates online and may contact UK corporate businesses about those products.

Email: andras@securedocuk.co.uk Website: https://securedocuk.co.uk Address: 24 Barge House Road, London E16 2NW

---

2. Website visitors and customers

What we collect

Depending on how you use the site or shop, we may process:

• name and email address
• order and payment-status information (for example that a payment succeeded). We do not receive or store your full payment card details — card payments are handled by the shop platforms’ payment providers
• messages you send us
• technical data such as IP address, device/browser type, and pages viewed
• cookie data as described in the Cookies section

Why we use it and lawful basis

Where we rely on legitimate interests for running and securing the site or answering enquiries, those interests are operating a small online shop and responding to people who contact us.

We do not currently send marketing emails to customers. If that changes, we will update this notice first and only email on a lawful basis under UK GDPR and PECR.

Do you have to give us data?

Checkout fields needed to complete a purchase are required. If you do not provide them, we cannot fulfil the order. Other contact details are optional.

Service providers and recipients

We use the following organisations in connection with the site and shop. They do not all act in the same capacity:

Payment card details are processed by the payment methods offered at Payhip/Etsy checkout under those providers’ arrangements. We receive order and payment-status information, not full card numbers.

International transfers

Some of these organisations may process personal data outside the United Kingdom. Where that happens, we rely on the transfer arrangements in their current privacy notices and data-processing terms. You can ask us for more detail.

How long we keep website / customer data

---

3. Business contacts and B2B outreach (corporate subscribers only)

This section applies when we obtain business contact details from a database or public sources (not from you directly) and email you about SecureDocUK products.

Who we email

We send cold B2B marketing emails only to contacts at corporate subscribers (for example limited companies, LLPs, and similar organisations where PECR’s electronic-mail consent rule does not apply).

We do not send unsolicited marketing emails to sole traders or ordinary partnerships unless we have valid consent or the PECR soft opt-in applies.

Named employees’ business emails are still personal data under UK GDPR.

Categories of data

• name, job title, employer / company
• business email address
• LinkedIn or other public professional profile information
• notes about our contact with you (including replies and opt-outs)

Sources

• Apollo.io
• Publicly available sources (company websites, Companies House, professional directories, public LinkedIn pages)

Why we use it and lawful basis

Our legitimate interest is promoting relevant UK security documentation products to people in security operations, guarding, or related compliance roles at UK corporate organisations.

Before any cold B2B outreach starts, a written legitimate-interests assessment (LIA) for this processing will be signed and dated. Until then, this notice does not claim that a documented LIA is already maintained.

When we tell you

Where we obtained your data from Apollo or other public / third-party sources, we provide this privacy information at the latest when we first contact you (by linking to this notice in the first email).

Campaign controls

Before each outreach campaign we screen the send list against our suppression list so opted-out contacts are not emailed.

Service providers and recipients (outreach)

International transfers (outreach)

Apollo and Google may process outreach-related personal data outside the United Kingdom. We rely on the transfer arrangements in their current privacy notices and data-processing terms. You can ask us for more detail.

How long we keep prospect data

Your right to object

You have an absolute right to object to direct marketing. Reply “not for me” or email andras@securedocuk.co.uk and we will stop marketing emails and add you to our suppression list.

Cold-email template requirement

Every cold B2B email must:

1. Link to this privacy notice, and
2. Include a clear opt-out (for example: reply “not for me” or email andras@securedocuk.co.uk).

---

4. Your rights

Under UK GDPR you may have the right to:

• access your personal data
• rectify inaccurate data
• erase data (in some cases)
• restrict or object to processing
• data portability (in some cases)
• withdraw consent where we rely on consent

Email andras@securedocuk.co.uk. You can also complain to the ICO: https://ico.org.uk/

---

5. Cookies

Essential cookies may be used to run and secure the website.

The site loads Vercel Web Analytics (/_vercel/insights/script.js) for basic traffic measurement. Vercel describes this product as privacy-oriented / cookieless. We do not use advertising cookies or other non-essential marketing trackers.

If we add non-essential analytics cookies in future, we will use them only with consent and update this section first. We will not use legitimate interests as the basis for analytics cookies.

---

6. Changes

We may update this notice. The “Last updated” date at the top will change when we do. For material changes affecting B2B contacts, we will update this page and, where appropriate, note the change in future emails.

---

7. Contact

Andras Mezofi trading as SecureDocUK
Email: andras@securedocuk.co.uk
Web: https://securedocuk.co.uk
Address: 24 Barge House Road, London E16 2NW