This policy covers tutelisaegis.com and the contact form on this site. It is written plainly and kept short on purpose. Last updated: April 2026.
Tutelis Aegis Cybersecurity is an EU-based sole trader providing passive website security scanning and GDPR review services to clients across the UK and Europe. The data controller is Mat Nash, operating as Tutelis Aegis Cybersecurity.
Contact: mat@tutelis.eu
When you submit the contact form on this site, we collect:
We do not collect any other personal data. We do not use tracking pixels, analytics scripts, advertising networks, or session recording tools.
We collect your contact details solely to respond to your scan enquiry. Your information is used only to reply to the specific message you sent. We do not add you to mailing lists, send marketing communications, or use your details for any other purpose.
The legal basis for processing your data is legitimate interest under EU GDPR Article 6(1)(f). When you submit a contact form asking us to get in touch about a scan, there is a clear and proportionate reason to process the details you provided in order to respond.
We do not rely on consent as the legal basis for this processing, which means you do not need to tick a consent box. You always have the right to object — see Your Rights below.
Enquiry emails are retained for a maximum of 12 months from the date of the last contact. Once the enquiry is resolved and no ongoing relationship exists, the emails are deleted. If a scan engagement results in an ongoing client relationship, enquiry correspondence is deleted when the relationship ends.
We do not sell, rent, or share your personal data with third parties for their own purposes. Your enquiry is delivered to our mailbox via Infomaniak (our email provider), who process the message as part of that email service. Infomaniak is based in Switzerland and operates under EU GDPR-equivalent data protection standards.
No other third parties receive your data.
This site does not use cookies. No tracking, analytics, advertising, or session cookies are set. The only external request made by this page is to load fonts from Google Fonts — this is a standard CDN request and does not involve cookies or personal data being sent to Google from this site.
Under EU GDPR you have the right to:
To exercise any of these rights, email mat@tutelis.eu. We will respond within 30 days.
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the supervisory authority in your country of residence. For EU residents this is your national data protection authority (for example the French CNIL or the Spanish AEPD). For UK residents this is the Information Commissioner's Office (ICO).
For any privacy-related questions or to exercise your rights, contact Mat Nash at mat@tutelis.eu.