Privacy
Who is responsible
- Controller
- The Will of Man Ltd (TWM)
- Address
- 20 Wenlock Road, London N1 7GU, United Kingdom
- contact@twm-defense.com
We process personal data under the UK GDPR and the Data Protection Act 2018. Where visitors are in the European Union, the EU GDPR applies as well.
What this site does not do
This site sets no cookies. It uses no analytics, no tracking pixels, no advertising, no social media plugins and no embedded third-party content. Fonts, images and video are served from this site’s own server, so your browser does not contact any other company while you read this page. Nothing is stored on or read from your device. For that reason there is no cookie banner — there is nothing to consent to. The contact form does not change this: it uses no session, sets no cookie and loads nothing from anywhere else. Neither does the language switch: the language you are reading is held in the page address alone, not on your device.
Server log files
Like every web server, ours records each request. That log contains your IP address, the date and time, the file requested, the amount of data transferred, the HTTP status, the page you came from if any, and your browser and operating system.
We use this only to deliver the site, to keep it working, and to detect and defend against attacks. The legal basis is Article 6(1)(f) UK GDPR and GDPR — our legitimate interest in a functioning and secure website. Log entries are kept for a short period by our hosting provider and are then deleted automatically. They are not combined with any other data and are not used to identify you.
Domain and hosting
The domain twm-defense.com is registered, and its name servers are operated, by GoDaddy (GoDaddy.com, LLC, 2155 E GoDaddy Way, Tempe AZ 85284, USA, together with its European affiliates). Every request for this address is resolved through GoDaddy’s name servers, which necessarily see the asking resolver’s IP address. GoDaddy processes this under its own terms and privacy notice.
The pages themselves are hosted by GoDaddy on a cPanel web hosting plan (GoDaddy.com, LLC, 2155 E GoDaddy Way, Tempe AZ 85284, USA, and its European affiliates), acting as our processor under GoDaddy’s data processing addendum, which meets Article 28 UK GDPR and Article 28 GDPR. The plan is provisioned in GoDaddy’s European data centre region, so the pages and the server log are stored in the EU. GoDaddy is part of a group with its parent in the United States; where support or administration reaches the data from outside the United Kingdom or the EEA, the transfer is covered by the European Commission’s standard contractual clauses together with the UK International Data Transfer Addendum. The provider stores the server log described above and deletes it automatically after a short period. It does not use the data for its own purposes.
If you write to us
You can reach us in two ways: by writing to the address above, or through the form on our contact page.
What the form asks for. Your name, your company or organisation, your role, your country and your email address, because without them we cannot place your enquiry or reply to it. Optionally a phone number, which platforms and which fields of use interest you, who you would like to speak to, and a free-text message. Nothing else is collected and nothing is inferred.
Where it goes. The form is processed by a script on this site’s own server and the result is sent to us as an email. It is not passed to any form service or other third party. The message reaches the mailbox described below.
Why we may do this. Article 6(1)(b) UK GDPR and GDPR where your enquiry concerns a contract or its preparation, otherwise Article 6(1)(f), our legitimate interest in answering people who approach us. We will not add you to a mailing list and we will not use your details for anything other than your enquiry.
How long we keep it. For as long as we need it to deal with your enquiry and to meet any retention duty that applies. Enquiries that lead nowhere are deleted once it is clear they will not be taken further.
The check at the end of the form. To keep automated spam out, the form asks you to add two numbers shown in a small image. That image is drawn by our own server. It sets no cookie, stores nothing about you and contacts no outside service. The question and its answer travel in a short-lived signed token inside the page itself and expire after thirty minutes.
Please note. The form is an ordinary web form over an encrypted connection. It is not an approved channel for confidential, classified or export controlled material, and you should not send such material through it.
If you email us instead, we use your address and the content of your message to answer you, on the same legal bases and for the same period.
Our mailboxes run on Microsoft 365, supplied to us through GoDaddy. GoDaddy acts as our processor for that service and Microsoft as its sub-processor, under contracts meeting Article 28 UK GDPR and Article 28 GDPR. Where personal data in that correspondence is transferred outside the United Kingdom or the EEA, the transfer is covered by the European Commission’s standard contractual clauses together with the UK International Data Transfer Addendum.
Your rights
You have the right to ask us for a copy of your data, to have it corrected or deleted, to have its processing restricted, to object to processing based on legitimate interests, and to receive it in a portable form. Write to contact@twm-defense.com.
You may also complain to a supervisory authority. In the United Kingdom that is the Information Commissioner’s Office, ico.org.uk. In the European Union it is the authority for the country where you live.
Changes
We update this page when the site changes. Adding a map, an embedded video or any analytics would change what is written above, and this page would be updated before that happens.