Legal
Privacy notice
Effective and last updated: August 25, 2026
1. Who controls your information
Sooner Secure is the controller of personal information described in this notice. Privacy questions and rights requests may be sent to hello@soonersecure.org.
2. Information we process
Website visits
This static website does not currently use an analytics provider or advertising technology. Our hosting provider may process standard technical logs, such as IP address, request time, requested page, referrer, device/browser information, and security events, to deliver and protect the site.
Messages you send us
If you email us, we process your name, email address, organization, message contents, and related correspondence so we can respond and maintain an appropriate record of the interaction.
Vulnerability-notification outreach
For our public-system security project, we may obtain professional contact details, domain or network identifiers, publicly available ownership information, and limited observations about an exposed or potentially vulnerable system. Sources may include public records, public technical data, and information visible from internet-facing services. We use this information to identify and responsibly notify an appropriate system owner. We do not use it for advertising.
3. Purposes and legal bases
| Purpose | Information | Legal basis where GDPR/UK GDPR applies |
|---|---|---|
| Respond to messages | Contact details and correspondence | Legitimate interests in communicating with you; steps requested before an agreement where applicable |
| Responsible security outreach | Professional contact, system identifiers, public ownership data, limited security observations | Legitimate interests in notifying owners and reducing risk to exposed systems and the public |
| Operate and secure the website | Technical and security logs | Legitimate interests in reliable and secure website operation |
| Optional analytics, if introduced | Usage and device data described at the time | Consent where required; it remains off until enabled through cookie settings |
Where we rely on legitimate interests, we consider the necessity and proportionality of the processing, the limited nature of the information, and the interests and rights of affected individuals. You may object as described below.
4. Sharing and international transfers
We may share information with service providers that support hosting, email, security, and professional operations; with advisers under confidentiality obligations; or when required by law or necessary to protect rights and safety. We do not sell personal information. Providers may process information in the United States or other countries. Where legally required, we use an approved transfer mechanism or other appropriate safeguard.
5. Retention
We retain information only as long as reasonably necessary for the purposes above, including security follow-up, recordkeeping, dispute resolution, and legal obligations. Consent preferences remain in your browser until you clear site data or change the setting. Specific retention schedules must be reviewed whenever a new service provider, form, analytics tool, or outreach workflow is introduced.
6. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of your information; object to certain processing; withdraw consent at any time; and complain to your local data-protection authority. Withdrawing consent does not affect prior lawful processing. To make a request, email hello@soonersecure.org. We may need to verify your identity and will respond within the period required by applicable law.
7. Security and children
We use reasonable administrative and technical safeguards appropriate to the information processed. No transmission or storage method is completely secure. This website is intended for a general professional audience and is not directed to children under 13; we do not knowingly collect their personal information through the site.
8. Changes
We may update this notice as our services or legal obligations change. The date above shows the latest revision. Material changes will be highlighted where appropriate.