Legal
Privacy Policy
Last updated: 22 August 2026
This policy explains what personal information ExploitLab collects through this website, why we collect it, and how long we keep it.
This document is a working draft provided for transparency. Actual legal wording must be reviewed and approved by qualified counsel before launch.
Information we collect
Through this website we collect only what you choose to send us:
- Your name, work email, company name and the website address you submit to the free security check.
- The contents of any message you send through the contact form.
- Standard server logs generated when your browser requests a page.
How we use it
- To respond to your enquiry and, where relevant, to scope an assessment.
- To verify that a person requesting an assessment is authorized to do so.
- To protect this website against automated abuse of our forms.
We do not sell personal information, and we do not use it for advertising profiling.
Storage and retention
Website form submissions are relayed to us by email and are not stored in a database on this website. Email correspondence is retained for as long as needed to handle your enquiry and to meet our record-keeping obligations, after which it is deleted.
Data gathered during a paid engagement is governed by the engagement agreement and our data processing information, not by this website policy.
Your rights
Depending on where you are located, you may have rights to access, correct, delete or restrict processing of your personal information, and to object to processing. To exercise any of these, write to hello@exploitlab.io.
Third parties
We use a small number of service providers to operate this website and deliver email notifications. They process data on our instructions only. We will name our current providers on request.
Questions about this document?
Write to hello@exploitlab.io.