Privacy notice

Last updated: 30 October 2026

1. Who we are

This website is run by ControlShield Ltd, a private limited company registered in Scotland with company number SC805206, incorporated on 2 April 2024. Our registered office is Winter Lodge At Chapelton, Methlick, Ellon AB41 7EP.

ControlShield Ltd is the controller of the personal data described here.

For any privacy question or request, contact us at our email address.

2. What we collect and why

When you use our contact form

We collect your first name, last name (optional), email address, company (optional), the type of enquiry you choose and your message. We use them only to reply to your enquiry and to keep a record of our correspondence with you.

The form also asks a short maths question to block spam. Your answer is used only for that check.

Lawful basis: our legitimate interests in replying to you, because you contacted us, and in keeping a record of that correspondence.

When you subscribe to our News emails

We collect your email address and a record of when you signed up and confirmed. We use them only to send you our News emails, a weekly digest that lists new ControlShield News items (our OT and ICS security news), sent only when there is something new.

Sign-up uses double opt-in: we email you a link, and you are added to the list only after you click it. Every email we send has an unsubscribe link, and you can unsubscribe at any time.

Lawful basis: your consent. You can withdraw it at any time by unsubscribing.

When you browse the site

We use cookies and site analytics as described in section 5.

3. Who processes your data for us

• Wix.com hosts this website. Contact form messages are stored in Wix Forms and added to our Wix contact list, and Wix emails us a notification of each new message. Wix also provides the cookie banner and the site analytics.
• Cloudflare, used by Wix, protects the site against attacks and bots.
• Brevo (an EU company) runs our News email list. It stores subscribers' email addresses in the EU, sends the confirmation and News emails, and handles unsubscribes.

Wix and Brevo each act on our instructions under their data processing terms, which set out where they process data and the safeguards they use for any transfer outside the UK.

4. How long we keep it

• Enquiries and contact records: we keep them for 24 months after our last contact with you, then delete them.
• News emails: we keep your email address on our mailing list until you unsubscribe. When you do, you stop receiving our emails and Brevo keeps your address marked as unsubscribed, so you are not emailed again by mistake. If you would like that record deleted as well, contact us using the details in section 1.

5. Cookies and analytics

When you first visit, the cookie banner lets you accept, decline or choose which categories of cookies we can use: essential, analytics, functional and advertising.

• Essential cookies are always on, because the site needs them to work and stay secure. They are set by Wix and Cloudflare for sessions, security and bot protection. Examples seen on this site are svSession, XSRF-TOKEN, hs, ssr-caching and __cf_bm.
• Analytics and other cookies are used only if you accept them in the banner. Our site analytics are provided by Wix.

We don't use Google Analytics, and we don't use LinkedIn, Facebook or other advertising tracking tags on this site.

6. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you
• ask us to correct it or delete it
• ask us to restrict how we use it, or object to our use of it
• withdraw your consent at any time, for example by unsubscribing from our emails
• ask for your data in a portable format

To use any of these rights, contact us using the details in section 1. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

7. Changes to this notice

If we change how we use personal data, we will update this page and the "last updated" date at the top.