This policy explains what personal data we collect through this website, why we collect it, how long we keep it, and what rights you have under the General Data Protection Regulation.
LAST UPDATED: 25 AUGUST 2026
This website is operated by Lockpick Networks S.R.L., a company registered in Romania, with its registered office at Strada Nicolae G. Caranfil 49, Sector 1, Bucharest, Romania, VAT number RO45283616 (“Lockpick Networks”, “we”, “us” or “our”).
For the purposes of the General Data Protection Regulation (EU) 2016/679 (“GDPR”), we are the data controller for personal data collected through this website.
You can contact us about any privacy matter at contact@lockpicknetworks.com or on +40 746 666 750.
Information you give us. When you submit our contact form we collect your first name, last name, email address, telephone number (if provided), company name (if provided) and the content of your message.
Information collected when you book a meeting. If you use our booking link, the scheduling is handled by Microsoft Bookings. The data you enter there is processed by Microsoft on our behalf and is subject to Microsoft’s own privacy terms.
Technical information. Our hosting provider processes standard server and security log data, including IP addresses, browser type and pages requested. This is used to deliver the site securely and is not used to build a profile of you.
We do not use advertising trackers, and we do not sell or rent personal data to anyone.
To respond to your enquiry. Legal basis: our legitimate interest in replying to people who contact us about our services, and taking steps at your request prior to entering into a contract.
To provide and secure this website. Legal basis: our legitimate interest in operating a functioning, secure website and preventing abuse.
To meet legal obligations. Where we are required to retain records, for example for accounting or tax purposes, our legal basis is compliance with a legal obligation.
We use a small number of service providers who process data on our behalf. Each is bound by contract to process data only on our instructions.
Cloudflare, Inc. — website hosting, content delivery and security.
Web3Forms — processing of contact form submissions and delivery to our inbox.
Microsoft Corporation — business email (Microsoft 365) and meeting scheduling (Microsoft Bookings).
Google LLC — this website currently loads web fonts from Google Fonts, which means your IP address is transmitted to Google when a page loads. [Note for the site owner: self-hosting these fonts removes this transfer entirely and is the recommended approach. See the note at the end of this page.]
We do not otherwise disclose your data to third parties, except where we are legally required to do so.
Some of the providers listed above are established outside the European Economic Area, or may process data outside it.
Where personal data is transferred outside the EEA, that transfer is made under an adequacy decision of the European Commission or under Standard Contractual Clauses approved by the European Commission, together with any additional safeguards required.
Infrastructure that we manage on behalf of clients is kept within the European Union unless a client instructs otherwise in writing.
Contact form enquiries are kept for [RETENTION PERIOD, e.g. 24 months] from the last contact, after which they are deleted, unless the enquiry becomes a client relationship.
Where you become a client, we retain records for the duration of the engagement and afterwards for the period required by Romanian accounting and tax law.
Server and security logs are retained for a short period in line with our hosting provider’s standard configuration.
Under the GDPR you have the right to request access to the personal data we hold about you, to have inaccurate data corrected, to have your data erased, to restrict or object to our processing of it, and to receive it in a portable format.
To exercise any of these rights, email contact@lockpicknetworks.com. We will respond within one month.
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), at anspdcp.ro.
We apply role-based access control, encryption in transit, and documented change control to the systems we operate. Access to enquiry data is limited to the members of our team who need it in order to reply to you.
Further detail on our security practices is available on our Security & Compliance page.
We may update this policy from time to time. The date at the top of this page shows when it was last revised. Material changes will be highlighted on this page.
