Privacy Policy
Last updated: June 2026
This policy explains what data ZX Cloud Security collects, why, and how it is handled. ZX Cloud Security is operated by Steve Harrison, trading as ZX Cloud Security (contact: advisories@zxcloudsecurity.co.uk). As the operator of this site and its email service, Steve Harrison is the data controller for the purposes of UK GDPR.
What data we collect and why
1. Website analytics
We use Google Analytics 4 to understand how visitors use this site. This involves Google placing cookies on your device to collect:
- Pages visited and time spent on each page
- General location (country and region — not precise location)
- Browser type, device type, and operating system
- How you arrived at the site (search engine, direct, referral)
Legal basis: Legitimate interests (UK GDPR Article 6(1)(f)) — understanding which content is useful helps us improve the quality and relevance of advisories and guides for our audience. You can withdraw consent at any time using the cookie notice on this site or by installing the Google Analytics Opt-out Add-on.
Google acts as a data processor for analytics. Data may be transferred to the United States under Google’s standard contractual clauses. See Google’s privacy policy for full details.
2. Email newsletter
If you subscribe to the ZX Cloud Security daily digest, we collect your email address for the sole purpose of sending you the digest.
Legal basis: Consent (UK GDPR Article 6(1)(a)). You opt in explicitly via the subscription form and confirm via a double opt-in email. You can withdraw consent at any time by clicking the unsubscribe link in any digest email.
Email delivery is handled by Amazon Web Services Simple Email Service (AWS SES), which acts as a data processor. Your email address is stored in AWS infrastructure based in the EU (eu-west-1, Ireland). AWS does not use your data for any purpose other than delivery on our behalf.
We do not sell, share, or rent subscriber email addresses to any third party.
Retention: Email addresses are retained for as long as you remain subscribed. They are deleted within 30 days of an unsubscribe request.
Cookies
| Cookie | Purpose | Set by |
|---|---|---|
_ga, _ga_* | Google Analytics visitor identification | |
zx-cookie-consent | Records whether you have accepted or declined analytics cookies | ZX Cloud Security |
You can decline analytics cookies using the cookie notice at the bottom of any page. The site functions fully without analytics cookies.
Your rights under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Erasure (“right to be forgotten”) — request deletion of your data
- Rectification — correct inaccurate data
- Portability — receive your data in a machine-readable format
- Object to processing based on legitimate interests
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, email advisories@zxcloudsecurity.co.uk. We will respond within one calendar month.
If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO): ico.org.uk or 0303 123 1113.
Security
This site is served over HTTPS. Subscriber data held in AWS is encrypted at rest using AES-256.
Changes to this policy
If we make material changes to this policy, we will update the “last updated” date above. Continued use of the site or the email service after changes constitutes acceptance of the revised policy.
Contact
For any privacy enquiries: advisories@zxcloudsecurity.co.uk