Privacy Policy

Who We Are

This website and the personal data described below are controlled by KRONEUS ZTS SECURITY LTD, a private limited company registered in England and Wales, company number 17125057, registered office 46 Kathleen Avenue, Wembley, United Kingdom.

For any question about your data, or to exercise any of the rights set out below, contact [email protected].

Information We Collect

We may collect:

• Your name, email address and contact details
• Information submitted in forms (demo requests, inquiries, partnerships)
• Technical information such as your IP address and browser user-agent, recorded with form submissions and in our security audit log

We do not collect sensitive personal information unless voluntarily provided.

How We Use Your Information

Your data is used to:

• Respond to inquiries and provide requested services
• Improve our website, products and security
• Send product updates, announcements or relevant notifications
• Maintain internal records, compliance and security monitoring

We do not sell or lease your personal information to third parties.

Recruitment and Assessments

If you apply for a role with us we collect your name, email address, CV, any link you supply, and your covering message. A CV is required for roles that include a technical assessment. Your CV is encrypted before it is stored and can only be opened by staff with a recruitment role; every download is logged.

Our lawful basis for assessing your application is our legitimate interests in recruiting for open roles, and taking steps at your request before entering into a contract. You can object to this processing at any time by emailing us.

Where a role includes an online assessment:

• Your written answers are graded with AI assistance by Groq, a provider in the United States. Only the question, the marking rubric and your answer are sent — never your name, email address or CV.
• The AI score is advisory. A person at KRONEUS reviews every submission and makes the final decision. No application is ever rejected automatically.
• During the assessment we record session-integrity signals: tab switches and window changes (and how long), blocked paste attempts, copy attempts, right-clicks and fullscreen changes. We record the length of a blocked paste but never the contents of your clipboard. These signals are evidence for the human reviewer and are never scored automatically.

We keep unsuccessful applications, including CVs and assessment answers, for two months from the date the role closes, after which they are deleted. If you accept a role with us, your application becomes part of your employment record and is kept under a separate retention period. You can ask us to delete your application sooner at any time.

Cookies

We use only strictly necessary cookies, so there is no cookie banner to click through. We set no advertising or analytics cookies, and we use no third-party tracking or advertising pixels.

• A sign-in session cookie, set only for staff using the internal admin portal.
• An assessment session cookie, set only after a candidate verifies their identity, which ties the exam to the device it was started on.

Cloudflare Turnstile, which protects our forms from automated abuse, may set a cookie on pages containing a form. It checks whether a submission is automated; it does not track you across sites.

Where Your Data Is Processed

Our database is hosted in the United Kingdom (London). Some providers we rely on are based in the United States, so some personal data is transferred outside the UK. Those transfers are made under the transfer terms in each provider’s data processing agreement.

• Neon — database hosting, United Kingdom. Applications, assessments and encrypted CVs.
• Vercel — website hosting and delivery.
• Groq — United States. AI-assisted grading of assessment answers, and triage of enquiry messages. Receives message and answer text, never CVs.
• Microsoft — email delivery and our own mailboxes.
• Resend — United States. Backup email delivery if Microsoft is unavailable.
• Cloudflare — United States. Form abuse protection (Turnstile).
• OpenAI — United States. Real-time transcription, only if you start a voice call on the site.

We do not sell or rent your personal information, and we do not share it for advertising.

Data Sharing

Data may be shared with:

• The service providers named individually under “Where Your Data Is Processed” above
• Regulatory authorities if required by law

All partners are obligated to maintain strict confidentiality and robust security controls.

Data Security

KRONEUS applies industry-standard security measures, including:

• Encryption in transit and at rest
• Strict access controls
• Zero Trust validation principles
• Continuous monitoring and anomaly detection

Your Rights

Under UK data protection law you may request:

• Access to your personal data, and a copy of it
• Correction of anything inaccurate
• Deletion of your data (including any CV you sent us)
• Restriction of, or objection to, how we process it
• Portability — your data in a machine-readable form
• Withdrawal of consent, where consent is what we relied on

For requests, contact: [email protected]. We respond within one month.

If you are not satisfied with how we have handled your data, you have the right to complain to the UK’s supervisory authority, the Information Commissioner’s Office, at ico.org.uk. We would rather you told us first, but you do not have to.

Policy Updates

This policy may be updated to reflect legal or operational changes. The latest version will always appear on this page.