Privacy Policy

Last updated: 25th June 2026

Edgewave Systems (“Edgewave”, “we”, “us”) respects your privacy and is committed to protecting your personal data. This policy explains what information we collect, why, how we use and protect it, and the rights you have. It applies to this website and to enquiries you make to us.

Who we are

Edgewave Systems t/a Qytek Ltd is the data controller for the personal data described in this policy.
Contact for data protection matters: privacy@edgewave.co.uk
Registered name: Edgewave Systems t/a Qytek Ltd
Registered office: 30 Bankside Court, Stationfields, Kidlington, Oxon, OX5 1JE
Company number: 5743321 (registered in England and Wales)
ICO registration number: [ICO registration number]

The information we collect

When you contact us. If you complete our contact form or email us, we collect the information you provide — typically your name, email address, and the details of your enquiry, and optionally your company, phone number, and any indication that you would like to discuss your enquiry under NDA. We also keep the correspondence that follows.

When you visit our website. We use a self-hosted, privacy-respecting analytics tool (Matomo) to understand how the site is used. It is configured to run without cookies, with IP addresses anonymised, and it respects browser Do Not Track signals. This data is processed on our own infrastructure and is not shared with any third-party analytics provider. Our web host also keeps standard server logs (such as IP address, browser type and pages requested) for security and to operate the site reliably.

How we use your information and our lawful basis

WhatWhyLawful basis (UK GDPR)
Responding to your enquiryTo reply to you and, where relevant, take steps towards providing servicesYour consent, and our legitimate interest in responding to enquiries (and, where applicable, steps prior to entering a contract)
Website analyticsTo understand and improve how the site is usedOur legitimate interest in maintaining and improving the site, using anonymised data
Server logs and securityTo keep the site secure and operationalOur legitimate interest in security and reliable operation

We do not use your information for automated decision-making, and we do not sell it or use it for third-party advertising.

Cookies

We do not use tracking or advertising cookies, and our analytics are configured to run without cookies. A small number of strictly necessary cookies may be used for core site functionality and security (for example, if you log in to the site). Because we set no non-essential cookies for ordinary visitors, the site does not display a cookie consent banner.

Who we share your data with

We do not sell your data. We share it only with the service providers (“processors”) we rely on to run the business, each acting under our instructions:

  • Web hosting — our site and its data are hosted in the United Kingdom by our hosting provider, Krystal Hosting Ltd.
  • Email — we use Google Workspace to send and receive email. Google may process data outside the UK; where it does, this is covered by appropriate safeguards such as the UK International Data Transfer Addendum or the UK extension to the EU–US Data Privacy Framework.
  • Spam protection — our contact form uses Cloudflare Turnstile to distinguish genuine submissions from automated ones, which involves Cloudflare processing limited technical information. It does not use tracking cookies.

We may also disclose information if required to do so by law.

How long we retain your data

  • Enquiries and correspondence: for as long as needed to deal with your enquiry and any relationship that follows, and then for up to 24 months after our last contact, after which it is deleted.
  • Analytics data: retained in anonymised form for up to 14 months.
  • Server logs: retained for a short period (typically up to 3 months) for security purposes.

Data may persist for a limited time in secure backups before being overwritten.

How we protect your information

We take appropriate technical and organisational measures to keep your data secure, including encrypted connections (HTTPS), access controls, and keeping our systems updated. No method of transmission over the internet is completely secure, but we work to protect your information and to respond appropriately to any security incident.

What rights you have over your data

Under UK data protection law you have the right to:

  • access the personal data we hold about you;
  • ask us to correct inaccurate or incomplete data;
  • ask us to delete your data (“right to erasure”);
  • ask us to restrict, or to object to, our processing of your data;
  • request portability of data you provided to us;
  • withdraw consent at any time, where we rely on consent.

To exercise any of these, contact us at privacy@edgewave.co.uk. We will respond within one month.

Complaints

If you have a concern about how we handle your data, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised “last updated” date above.