Privacy Policy
Last updated: January 2026
1. Who we are
Derwent Labs Ltd is a security data pipeline company incorporated in the United Kingdom. Our platform normalises security telemetry to the Open Cybersecurity Schema Framework (OCSF). References to "Derwent," "we," "us" or "our" in this policy refer to Derwent Labs Ltd.
2. What data we collect
We collect information you provide directly (name, email, company, message) when you submit a contact form or subscribe to our newsletter. We also collect usage data (page views, session duration) via privacy-preserving analytics. We do not use third-party tracking cookies.
3. How we use your data
We use contact form data solely to respond to your enquiry. Newsletter email addresses are used to send the newsletter you requested. Usage analytics help us improve the site. We do not sell your data to third parties.
4. Legal basis
Processing is based on your consent (for newsletters and contact forms) and our legitimate interests in operating and improving the website. You may withdraw consent at any time.
5. Data retention
Contact form submissions are retained for up to 12 months. Newsletter subscriptions are retained until you unsubscribe. Analytics data is retained in anonymised form for up to 24 months.
6. Your rights
Under UK/EU data protection law, you have the right to access, correct, erase, or port your personal data, and to object to or restrict its processing. To exercise these rights, contact us at privacy@derwentlabs.com.
7. Cookies
We use strictly necessary cookies only. No advertising or tracking cookies are set. You can disable cookies in your browser settings without affecting site functionality.
8. Security
We use industry-standard security measures including TLS encryption in transit and access controls at rest. No method of transmission over the internet is 100% secure.
9. Changes
We may update this policy. Material changes will be communicated via a notice on this page. Continued use of the site after changes constitutes acceptance.
10. Contact
For privacy enquiries: privacy@derwentlabs.com — Derwent Labs Ltd, United Kingdom.