Legal
Privacy Policy
This Privacy Policy explains how Datazag collects, uses, and protects personal data when you interact with our website, platform, and services.
Last updated
1. Introduction
Datazag (“we”, “us”, “our”) is committed to protecting your privacy and handling personal data in a transparent and secure manner.
This Privacy Policy applies to:
- Visitors to our website
- Users of our customer portal
- Customers and partners using our datasets, feeds and services
- Individuals who contact us or interact with us in a business context
This policy does not apply to personal data processed by our customers through their own use of our services, where we act as a data processor.
2. Who we are
Datazag provides Infrastructure Intelligence to help security teams detect phishing, brand impersonation, and infrastructure abuse.
The controller for personal data collected through this website is Datazag Ltd, a company registered in England and Wales.
- Registered name
- Datazag Ltd
- Registered in
- England and Wales
- Company number
- 13217786
- Registered office
- 12 South Drive, Wokingham, England, RG40 2DH
- Incorporated
- 23 February 2021
For the purposes of applicable data protection laws, Datazag acts as:
- a data controller for personal data collected through our website and business operations
- a data processor where we process personal data on behalf of customers under a Data Processing Agreement (DPA)
3. Personal data we collect
Contact information
Name, business email address, company name, and role when you contact us, request a demo, or sign up for updates.
Account and portal data
Information required to create and manage user accounts, including authentication details and access logs.
Free report requests
Your work email address and the domain you submit when you request a free exposure snapshot. We use them to generate the report, email you a private link to it, and keep it available behind that link. We contact you about related services only if you opt in.
Usage and technical data
IP address, device information, browser type, and usage metadata related to access of our website or services.
Communications
Information you provide when you email us, submit forms, or communicate with us for support or commercial discussions.
We do not intentionally collect sensitive personal data.
4. How we use personal data
We use personal data to:
- Provide and operate our website and services
- Respond to inquiries and demo requests
- Generate and deliver the free reports you request
- Manage customer relationships and accounts
- Improve our products, services, and security
- Monitor and protect our infrastructure from abuse
- Comply with legal and regulatory obligations
We do not sell personal data.
5. Legal bases for processing
6. How we share personal data
We may share personal data with:
- Cloud infrastructure and service providers that support our operations
- Professional advisors (legal, accounting, compliance)
- Law enforcement or regulators where required by law
All service providers are required to protect personal data and process it only for specified purposes.
We do not share personal data for advertising or data brokerage purposes.
7. International data transfers
Datazag operates globally and may process personal data in countries outside your jurisdiction.
Where required, we use appropriate safeguards such as contractual protections to ensure personal data remains protected in accordance with applicable data protection laws.
8. Data retention
We retain personal data only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.
Retention periods depend on:
- the nature of the data
- legal or contractual requirements
- operational and security considerations
9. Data security
We implement appropriate technical and organizational measures designed to protect personal data, including:
- access controls and least-privilege principles
- encryption in transit and at rest where appropriate
- monitoring and logging of system access
- separation of production and non-production environments
No system is completely secure, but we continuously improve our security practices.
10. Your rights
Depending on your location, you may have rights under applicable data protection laws, including:
- the right to access your personal data
- the right to correct inaccurate data
- the right to request deletion of data
- the right to object to or restrict processing
- the right to data portability
Requests can be made using the contact details below.
You also have the right to complain to a data protection authority. In the UK, that is the Information Commissioner’s Office (ICO), at ico.org.uk. We would welcome the chance to address your concern first.
11. Cookies and analytics
This applies to datazag.com, portal.datazag.com and observatory.datazag.com. We use cookies and similar technologies to run the sites and, only if you agree, to understand how people use them.
- Essential: sign-in and security cookies on the portal, and
dz_consent, which records your analytics choice for 180 days. - Analytics (optional): Google Analytics 4 sets
_gacookies to count visits and pages viewed. It loads only after you select “Accept”. We ask Google to anonymize IP addresses. On the Observatory it also records which figures and tools you use, such as copying a citation or downloading a chart. It never records a domain you look up.
Your choice covers all three sites. To change it, select “Cookie settings” in the footer. If you decline, we remove the analytics cookies. You can also block cookies in your browser settings.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
The latest version will always be available on our website.
13. Contact us
If you have questions about this Privacy Policy or our data practices, you can contact us at: