Legal

Privacy policy

What this site collects, which is very little, and what we commit to doing before that changes.

Last updated: September 2026

The short version

This site is static HTML. There is no account to create, no form to submit, no payment to make, no advertising network and no tracking cookie. The only personal data we hold is correspondence you choose to send us by email.

Correspondence

If you email the addresses on the contact or submit a company pages, we retain that correspondence for as long as it takes to review and act on the request — a correction, a submission, a question — plus a reasonable period afterwards so we can show why a listing was changed. We do not sell it, and we do not share it with third parties for advertising.

One thing worth knowing if you are submitting on behalf of a company: evidence you send us that supports a published claim may be summarised or cited on the affected profile, because our editorial policy commits us to showing our sources. We do not publish the sender's name or contact details.

Cookies

This site sets no cookies. It uses no advertising, analytics or tracking cookies, and there is no consent banner because there is nothing to consent to.

Analytics

No analytics are running today. If we add analytics or any form backend later, this page will be updated before that goes live, not after, and will state what is collected, why, how long it is kept, and how to request deletion.

Fonts and third-party requests

Typefaces are self-hosted from this domain rather than loaded from a font CDN, so viewing a page does not send your IP address to a third party for that purpose. The site loads no third-party scripts, no embedded video and no external images. Outbound links to vendor sites, registers and standards bodies are ordinary links — following one takes you to that organisation, under its own privacy policy, and we are not told that you did.

Server logs

The hosting provider serving these files may keep standard access logs, including IP addresses, for security and operational purposes. We do not use those logs to build profiles of visitors, and we do not combine them with anything else.

Your requests

To ask what data we hold about you, or to request deletion, write to privacy [at] best-external-penetration-testing-companies.com — a placeholder until the domain mailbox is live. If your request concerns correspondence, quoting the original subject line helps us find it.

Changes to this policy

Material changes will be reflected in the "last updated" date at the top of this page. Where a change would mean collecting data we do not collect today, this page is updated before the change takes effect.

This page describes practices, not legal advice, and it is not a statement of compliance with any particular data-protection regime on your behalf.