NetThreat Privacy Policy Statement

This Privacy Statement was updated October 2025

NetThreat Privacy Policy Statement

The privacy of your data is important to us. We encourage you to read the following privacy statement and email us at privacy@netthreat.co.uk if you have any questions.

Who are we? NetThreat is one of the UK’s leading resellers of network security appliances, solutions, and services. Our registered head office is Croft Court, Croft Lane, Temple Grafton, B49 6PW. NetThreat Ltd is recognised as the Data Controller.

This privacy policy applies to NetThreat Ltd and our group of companies and websites including but not limited to: netthreat.co.uk, sonicwallonline.co.uk, watchguardonline.co.uk.

What is personal data? Personal data includes your name, telephone number, title (marital status), email address, position in the company and address. We may also retain correspondence from service-related communications and activities, such as meetings, phone calls, documents, and emails.

From our websites we may collect your IP-address and map your journey through our sites.

Special categories of personal data. This includes information about your religion, race, genetic and biometric information. NetThreat do not collect or process any special categories of personal data.

When do we collect personal data about you? When you interact with us in person, by written or electronic correspondence, phone, or through our websites. We may also collect personal information from other legitimate sources, such as third-party data providers*, public sources, and public social networks. *If they have received your consent to share your personal data.

Where we collect personally identifiable information, we will be clear about this. For example, asking for your email address when you use our online chat facility.

Why do we collect and use personal data? To carry out administration, sales and order processes, direct marketing, and customer service functions. We also collect personal data about our suppliers, partners, and resellers and to process a job application, partner, or reseller application. Google may also use your personal data when you give consent via our website, you can view Google's Business data responsibility site here.

Data minimisation. As a data controller we will:

• Only collect data required for processing and to fulfil our obligations under contract.
• Ensure data is stored only for the required amount of time and there is a process to securely dispose of all copies at the right time.
• Ensure data is not shared with third parties, suppliers, cloud providers unless necessary and agreed by consent, under contract, or the basis of legitimate interest exists.

Live Chat. We use a live chat facility provided by a third party called LiveAgent. You can view the Live Agent Privacy Statement here.

Collection and processing of information. We only collect the information we need to fulfil a function or administrative process. We process information on the following lawful conditions:

1. Contract. We may collect and process personal data to fulfil our obligations under contracts and agreements with you, our customers, partners, resellers, and suppliers.
2. Legitimate interest. We may collect and process personal data if it is of legitimate interest to us or you and only if your privacy rights do not override this interest. An assessment will determine a mutual interest.
3. Social media and community sites. Content uploaded to social media platforms (i.e. LinkedIn) remains in the public domain. We are not responsible for the consequences or use of any information submitted.

How long do we keep your personal data? We will retain data for a reasonable period following the completion of the purpose for which it has been originally collected, subject to the following guidelines: 

• Up to 6 years following a purchase, OR until the vendor end of life date for the related product, whichever occurs latest. This is so we can issue updates on devices, firmware, service agreements, and renewals for example.
• Up to 2 years following the set-up of an online account. This is so we can issue updates on relevant products and services.
• Up to 2 years following an enquiry. This is so we can issue updates on relevant products and services.

We also retain data for longer periods of time, as necessary for legal/statutory purposes. After a period of reasonableness, we will delete data. We may retain a suppression list for systems i.e. Mailchimp, where individuals have asked to be unsubscribed.

Your rights to your personal data. You have the right to request:

• a copy of the personal data we hold about you.
• corrections if the data we hold about you is incorrect or out of date.
• personal data is deleted when it is no longer necessary to retain it.
• your withdrawal from personal data processing. (i.e. unsubscribe from our marketing communications).
• restrictions on further processing of your data in case of inaccuracies or objections to methods of processing.

Online accounts. You may update your online user profile at any time. If you have not purchased through your online account for a period of 6 years, we will delete your account. You can set up a new account at any time, but we will not be able to reinstate a previous account.

NetThreat Knowledge. Our marketing newsletter contains content about selected offers, discount deals, industry news, webinars, and other relevant information that we refer to as ‘NetThreat Knowledge.’   You may unsubscribe at any time, and we will retain your email address on a ‘suppression list’ as record of your request.

Products, services, and solutions. We will keep you up to date with essential information related to products, services, and solutions. This may include renewal notices, hardware/firmware updates, and information about the end of support/life for your appliance. If you decide that you do not wish to receive this essential information, we will be unable to accept any liability for any losses or consequences incurred that may expose your network and/or impact the effectiveness of your appliance.

Google Analytics. We use a third-party service, Google Analytics, to collect standard internet log information and details of our visitors’ behaviour patterns. The information is processed in a way that will not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of visitors to our website. You can learn more about Business Data Responsibility and how Google processes personal information by navigating to this page:  Business Data Responsibility.

Cookie Policy. Cookies collect information from website visitors: pages viewed, links clicked, IP addresses. Cookies help us provide a more efficient and relevant browsing experience and may also enable us to detect and prevent security threats and abuse. Cookies may be used for personalised and non-personalised advertising activities.

External links. Although we take every effort to ensure the accuracy and providence of links from our site to any third-party sites or landing pages, we are not responsible for any malicious content.

Data sharing. We will not sell, rent, or trade your information to Third Parties.

Third party providers. Where we use a third-party provider to process your data (with our explicit consent), we will ensure a Data Processing Agreement is in place. Third parties include our vendors and distributors, we also use Mailchimp to deliver NetThreat Knowledge and other marketing platforms such as Eventbrite and WebEx etc. to help manage our webinars and other events.

Third Party privacy statements. We retain a copy of the privacy statement for each of our third party processors/platforms.

Sub-Contractors. We are responsible for ensuring sub-contractors adhere to our Privacy Policy and current legislation. Where necessary we will request a signed Data Processing Agreement and a Non-Disclosure Agreement if applicable.

Outside of the EU. If our third-party processors or sub-contractor processes personal data outside of the EU, the processing will continue to be in accordance GDPR legislation.

Legal notice on disclosure of data. If required by statutory law, we will disclose your personal information, or if we, as a company, believe that disclosure is necessary to protect our company’s rights and/or to comply with any legal process. We will do what we can to ensure that your privacy rights remain protected.

Subject Access Request. You can request a copy of the personal data we hold and the reason for processing by emailing privacy@netthreat.co.uk or writing to us at NetThreat, Croft Court, Croft Lane, Temple Grafton, B49 6PW.  There is no cost for this information, and we will respond to you within 30 days by the method in which you contacted us where possible.

More Information. If you have any questions about GDPR please refer to the Information Commissioner’s Office official regulations guide. https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/

Please contact us at privacy@netthreat.co.uk if you would like to know more about our privacy policy.