In short: your scans run locally on your PC — we never see, upload or store your files or results. Our website is hosted on Framer and uses Plausible Analytics; neither sets tracking cookies, which is why you won’t see a cookie banner. The only personal data we hold is what you actively give us, such as your email if you subscribe, contact us, or buy a licence.

1. Who we are

The PCRiskPro application and this website are operated by PCRiskPro Limited, a company registered in England and Wales (company number 17035916), registered office 20 Wenlock Road, London, N1 7GU, United Kingdom. We are the “data controller” responsible for the personal data described in this policy.

For any privacy question, or to exercise your rights, contact us at support@pcriskpro.com.

2. How the PCRiskPro app handles your data

PCRiskPro scans your Windows PC — including local drives and connected locations such as OneDrive, SharePoint, network shares and email — to find exposed personal data, out-of-date or vulnerable software, and gaps in your security configuration. All of this processing happens locally, on your own machine.

Your files stay with you. Files and their contents are read on your device only. They are never uploaded, transmitted, or shared with us or anyone else.
Your results stay with you. Scan results, risk scores and reports are generated and stored on your device. We have no access to them.
No scan telemetry. We do not receive the content of your scans, the files found, or your risk scores. Because this data never reaches us, there is no central store of it to lose.

Licence validation

If you use a paid licence, when the app starts it sends us your licence key and an anonymised device identifier — a one-way hash that lets us enforce per-device limits but does not identify you personally. This confirms your licence is valid, and the result is cached so the app keeps working offline. We use this data only to operate and protect your licence.

Payments

Purchases are handled by our appointed payment provider (our “Merchant of Record”), who processes your payment and billing details on their own secure systems. Your card and payment details never reach PCRiskPro. We receive only the information needed to issue and support your licence, such as your name, email address and the product you purchased.

3. How our website handles your data

If you subscribe, we collect your email address and use our email provider, Zoho, to send you the updates you asked for — practical UK compliance and data-protection tips, plus PCRiskPro news. We rely on your consent, and you can unsubscribe at any time using the link in every email or by emailing us.

Contacting us

If you email support@pcriskpro.com, we receive your email address, your message and anything you choose to include, so that we can help you and keep a record of the conversation.

Website analytics

We use Plausible Analytics, a privacy-friendly, EU-based service, to understand how many people visit our site and which pages are popular. Plausible collects aggregate statistics only. It sets no cookies, does not track you across websites, and does not collect or store any information that identifies you personally.

4. Cookies

A cookie is a small file a website can store on your device. Most websites use them for tracking and advertising — we don’t.

No tracking or advertising cookies. We do not use cookies to profile you, retarget you with ads, or follow you across the web.
Cookieless hosting. Our website is built and hosted on Framer, which does not set cookies on visitor-facing pages by default.
Cookieless analytics. Our analytics provider, Plausible, works entirely without cookies.

Because we don’t use any non-essential or tracking cookies, we don’t need to show you a cookie consent banner, and there is nothing here for you to accept or reject. If you buy a licence, the checkout is hosted by our payment provider, who may use their own cookies on their checkout pages under their own privacy and cookie policy. You can block or delete cookies at any time in your browser settings without affecting how our website works.

5. Legal bases for using your data

We only use your personal data where UK data protection law allows. Depending on the situation, our legal basis is one of the following:

Consent — for sending you our newsletter. You can withdraw it at any time.
Performance of a contract — to provide, validate and support your licence.
Legitimate interests — to run and secure our website, understand aggregate usage, and respond to your enquiries, balanced against your rights and freedoms.
Legal obligation — where we are required to keep certain records, for example for tax and accounting.

6. How long we keep your data

We keep personal data only for as long as we need it:

Information

Retention period

Licence and purchase records

For the life of your licence, plus 6 years to meet tax and accounting obligations

Support emails and enquiries

Up to 2 years after your query is resolved

Newsletter subscription

Until you unsubscribe

Website analytics

Aggregate only — no personal data is stored

7. Sharing and international transfers

We do not sell your personal data. We share it only with the service providers who help us run PCRiskPro, and only as far as they need it to provide their service to us. These currently are:

Framer — website hosting;
Plausible Analytics — privacy-friendly, cookieless website analytics;
Zoho — email and newsletter delivery;
our payment provider (Merchant of Record) — processing purchases and billing.

Where any of these providers processes personal data outside the UK, we rely on appropriate safeguards — such as UK “adequacy” decisions or approved contractual clauses — to keep your data protected to UK standards.

8. How we protect your data

Our strongest protection is architectural: because your files and scan results never leave your device, there is no central database of sensitive scan data for anyone to breach. For the limited personal data we do hold (such as licence and contact records), we use appropriate technical and organisational measures, and we work only with reputable providers who maintain their own security standards.

9. Children

PCRiskPro is a business and productivity tool intended for adults. It is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Your rights

Under UK data protection law you have the right to:

access the personal data we hold about you;
have inaccurate data corrected;
have your data erased;
restrict or object to how we use it;
receive your data in a portable format; and
withdraw consent at any time, without affecting anything done beforehand.

To exercise any of these rights, email support@pcriskpro.com. We will respond within one month. If you are unhappy with how we have handled your data, you also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

11. Changes to this policy

We may update this policy from time to time. When we do, we will change the “last updated” date at the top of this page, and for significant changes we will make this clear on our website.

For any question about this policy or your personal data, contact us at support@pcriskpro.com.

12. How to contact us

PCRiskPro Limited · Company No. 17035916 · 20 Wenlock Road, London, N1 7GU, United Kingdom · support@pcriskpro.com