Privacy Notice

1. Who we are

Jack Goodman, trading as Block It Security, is the data controller for personal data processed through this website and the Block It Security service. You can reach us about privacy at support@blockitsecurity.com.

2. What we collect and why

• Account data — name, email address, login credentials and authentication identifiers (including Google sign-in identifiers). Used to create and secure your account. Legal basis: performance of our contract with you.
• Service data — the domains you add, scan schedules, scan results and vulnerability findings. Used to deliver scanning and reporting. Legal basis: contract.
• Support messages — the content of emails and support requests. Used to answer you. Legal basis: contract and legitimate interests.
• Usage and device data — log data, IP address, browser and device identifiers, and product telemetry. Used for security, fraud prevention, debugging and improving the product. Legal basis: legitimate interests.
• Marketing preferences — where you opt in to product updates. Legal basis: consent, withdrawable at any time.

Payment card details are never collected or stored by us; they are handled by Paddle as Merchant of Record.

3. Who we share data with

• Merchant of Record — Paddle.com, for the sale of our product, subscription management, payments, tax compliance and invoicing.
• Service providers and subprocessors — hosting, database, email delivery, scheduling and analytics providers acting on our instructions.
• Professional advisers — legal and accounting advisers where needed.
• Authorities — where we are required to disclose by law.

We do not sell personal data.

4. International transfers

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

5. Retention

We keep account and scan data for as long as your account is active and for up to 12 months after closure, unless a longer period is required for legal, tax or accounting purposes. After that, data is deleted or anonymised.

6. Your rights

Depending on where you live, you have rights to access, correct, delete, restrict, port or object to the processing of your personal data, and to withdraw consent. To exercise them email support@blockitsecurity.com; we respond within one month. If you are in the UK or EEA you may also complain to your local supervisory authority.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit, row-level access controls that isolate each customer’s data, least-privilege access for staff and audit logging.

8. Cookies

We use essential cookies and local storage to keep you signed in and to protect the service; these cannot be switched off. We may use limited analytics cookies to understand product usage. You can clear or block cookies through your browser settings, though essential cookies are required for sign-in to work.