Privacy notice
For the SIFTR cyber check at check.siftr.so. Last updated 6 November 2026.
In short
- You can take the check without giving us your name or email.
- Your answers stay in your browser. We don’t receive them.
- We don’t use cookies. We count visits in a way that doesn’t identify you.
Who we are
SIFTR GOVTECH LTD runs this check. We’re responsible for any personal information it collects.
- Registered in England and Wales, company number 17090229
- Registered office: 66 Paul Street, London, EC2A 4NA
- Contact: support@siftr.so
What we collect and why
| What | Why | Our lawful basis |
|---|---|---|
| Your answers, company name and policy pack details | To show your result and build your policy pack. This all happens in your browser. We don’t receive it. | Not collected by us |
| Your last result, only if you choose “Save this result on this device” | So next time you can see what’s changed. Only your answers and the date are kept, in your browser’s storage. “Forget it” on the result page deletes it. | Your choice. We don’t receive it. |
| Your results code, only if you choose to copy and send it | So an adviser, council or business programme you’re working with can see your answers alongside other businesses’. The code holds your answers, type of business and defence answer, but not your name or email. You decide who to send it to. | Not collected by us, unless you send the code to us. Whoever you send it to is responsible for how they use it. |
| Your answers, if you choose “Open my free Champion plan” | So you don’t answer the same 15 questions again. Your results code goes in the link to SIFTR Champion, after a #. Browsers never send that part to a server. Champion shows you the answers and saves nothing until you choose to bring them in, and then only in your browser. | Not collected by us |
| Programme overview page (for advisers, with a partner licence) | Advisers paste the codes they’ve received to see shared gaps. This is worked out in their browser. We don’t receive the codes or any names typed in. | Not collected by us |
| Your email address, score and area results, only if you tick the box and sign up | To send you your result and occasional updates about staying secure. | Consent. You can unsubscribe at any time using the link in every email. |
| Visit counts | To see how many people visit and complete the check, so we can improve it. We don’t use cookies and don’t identify you. | Legitimate interests |
| Technical information such as your IP address, which every website receives | To deliver the page securely and keep it running. | Legitimate interests |
Who else is involved
- Vercel hosts the page and provides the cookie-free visit counts.
- Google Fonts supplies the typeface, so your browser contacts Google’s servers when the page loads.
- Mailchimp (Intuit) will store email sign-ups, once they open and if you choose to sign up.
These companies are based in the United States and may process information outside the UK. Where they do, they rely on legal safeguards for international transfers. We don’t sell your information or share it with anyone else.
How long we keep it
Email sign-ups aren’t open yet. Before they open, we’ll update this notice to say how long we keep them. Information kept in your browser stays until you delete it or clear your browser data.
Your rights
You can ask to see, correct or delete the information we hold about you, object to how we use it, or withdraw your consent. Email support@siftr.so and we’ll reply within one month.
If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.
About the check
The cyber check is a quick self-check. It isn’t an audit or a certification.