Legal

Privacy Policy

This Privacy Policy explains how Datazag collects, uses, and protects personal data when you interact with our website, platform, and services.

Last updated

1. Introduction

Datazag (“we”, “us”, “our”) is committed to protecting your privacy and handling personal data in a transparent and secure manner.

This Privacy Policy applies to:

  • Visitors to our website
  • Users of our customer portal
  • Customers and partners using our datasets, feeds and services
  • Individuals who contact us or interact with us in a business context

This policy does not apply to personal data processed by our customers through their own use of our services, where we act as a data processor.

2. Who we are

Datazag provides Infrastructure Intelligence to help security teams detect phishing, brand impersonation, and infrastructure abuse.

The controller for personal data collected through this website is Datazag Ltd, a company registered in England and Wales.

Registered name
Datazag Ltd
Registered in
England and Wales
Company number
13217786
Registered office
12 South Drive, Wokingham, England, RG40 2DH
Incorporated
23 February 2021

For the purposes of applicable data protection laws, Datazag acts as:

  • a data controller for personal data collected through our website and business operations
  • a data processor where we process personal data on behalf of customers under a Data Processing Agreement (DPA)

3. Personal data we collect

Contact information

Name, business email address, company name, and role when you contact us, request a demo, or sign up for updates.

Account and portal data

Information required to create and manage user accounts, including authentication details and access logs.

Free report requests

Your work email address and the domain you submit when you request a free exposure snapshot. We use them to generate the report, email you a private link to it, and keep it available behind that link. We contact you about related services only if you opt in.

Usage and technical data

IP address, device information, browser type, and usage metadata related to access of our website or services.

Communications

Information you provide when you email us, submit forms, or communicate with us for support or commercial discussions.

We do not intentionally collect sensitive personal data.

4. How we use personal data

We use personal data to:

  • Provide and operate our website and services
  • Respond to inquiries and demo requests
  • Generate and deliver the free reports you request
  • Manage customer relationships and accounts
  • Improve our products, services, and security
  • Monitor and protect our infrastructure from abuse
  • Comply with legal and regulatory obligations

We do not sell personal data.

5. Legal bases for processing

Legitimate interestsOperating, securing, and improving our services, and communicating with business contacts.
Contractual necessityProviding services under a contract or pre-contractual request.
ConsentWhere you have explicitly provided consent, such as for certain communications.
Legal obligationCompliance with applicable laws and regulations.

6. How we share personal data

We may share personal data with:

  • Cloud infrastructure and service providers that support our operations
  • Professional advisors (legal, accounting, compliance)
  • Law enforcement or regulators where required by law

All service providers are required to protect personal data and process it only for specified purposes.

We do not share personal data for advertising or data brokerage purposes.

7. International data transfers

Datazag operates globally and may process personal data in countries outside your jurisdiction.

Where required, we use appropriate safeguards such as contractual protections to ensure personal data remains protected in accordance with applicable data protection laws.

8. Data retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

Retention periods depend on:

  • the nature of the data
  • legal or contractual requirements
  • operational and security considerations

9. Data security

We implement appropriate technical and organizational measures designed to protect personal data, including:

  • access controls and least-privilege principles
  • encryption in transit and at rest where appropriate
  • monitoring and logging of system access
  • separation of production and non-production environments

No system is completely secure, but we continuously improve our security practices.

10. Your rights

Depending on your location, you may have rights under applicable data protection laws, including:

  • the right to access your personal data
  • the right to correct inaccurate data
  • the right to request deletion of data
  • the right to object to or restrict processing
  • the right to data portability

Requests can be made using the contact details below.

You also have the right to complain to a data protection authority. In the UK, that is the Information Commissioner’s Office (ICO), at ico.org.uk. We would welcome the chance to address your concern first.

11. Cookies and analytics

This applies to datazag.com, portal.datazag.com and observatory.datazag.com. We use cookies and similar technologies to run the sites and, only if you agree, to understand how people use them.

  • Essential: sign-in and security cookies on the portal, and dz_consent, which records your analytics choice for 180 days.
  • Analytics (optional): Google Analytics 4 sets _gacookies to count visits and pages viewed. It loads only after you select “Accept”. We ask Google to anonymize IP addresses. On the Observatory it also records which figures and tools you use, such as copying a citation or downloading a chart. It never records a domain you look up.

Your choice covers all three sites. To change it, select “Cookie settings” in the footer. If you decline, we remove the analytics cookies. You can also block cookies in your browser settings.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

The latest version will always be available on our website.

13. Contact us

If you have questions about this Privacy Policy or our data practices, you can contact us at: