Privacy Policy

OkamiSec is an independent UK consultancy run by Constantin Ovidiu Strinu. This policy covers okamisec.dev and explains what happens to the information you give us through the Website Intelligence Assessment request form and the contact form.

Only what you type into a form:

• Website Intelligence Assessment form: your website address, email address, which pillars you'd like reviewed, and any optional notes.
• Contact form: your name, email address, an optional website, and your message.

We don't use tracking cookies, and we don't buy, sell or import contact data from anywhere else.

Solely to do the thing you asked for: review your website and email you a report, or reply to your message. Your details are not added to a mailing list, and we don't send marketing emails unless you separately and explicitly ask us to.

Form submissions are sent as an email via Resend, a transactional email delivery service, to our own inbox. There is no separate database — your submission exists only as that email and any reply we send you.

The site is hosted on Vercel, which also provides basic, privacy-friendly analytics (Vercel Analytics and Speed Insights) to help us understand overall traffic and page performance. These tools are designed not to use tracking cookies or store data that identifies you personally.

If you choose to message us on WhatsApp, that conversation is handled directly by WhatsApp/Meta under their own privacy policy — we don't control how they process it.

This site does not use cookies. There's no advertising tracker, no session cookie, and no third-party marketing pixel. Vercel Analytics and Speed Insights (mentioned above) are built to work without setting cookies or storing anything in your browser that identifies you personally — so there's nothing to consent to. If that ever changes, we'll update this page and ask for your consent first, as UK law requires.

We keep the emails generated by form submissions for as long as we need them to deliver the service you requested and to keep a reasonable record of the engagement, then delete them. If you'd like something removed sooner, just ask.

Under UK GDPR you can ask us what information we hold about you, ask us to correct or delete it, or object to how it's used. Email hello@okamisec.dev and we'll deal with it directly — no forms, no delay tactics. If you're not satisfied with our response, you can complain to the UK Information Commissioner's Office (ico.org.uk).

If how we handle data changes materially, we'll update this page. This is an informational policy describing our actual practices, not a substitute for legal advice — if you need a formal compliance review, ask a solicitor.