Privacy and terms
Short version: this website has no accounts, no forms, no analytics and no advertising. It sets no cookies. If you never email us, we never learn who you are. The long version is below, because a company that sells proof should be able to prove this too.
Last updated 22 September 2026. This notice covers adorasec.com. Processing terms for the ADORASEC service itself are separate and provided to institutions under contract.
Who we are
ADORASEC Ltd is the data controller for this website. Registered in England and Wales, company number 17298666, 71–75 Shelton Street, Covent Garden, London WC2H 9JQ.
Data protection questions, access requests and complaints: info@adorasec.com. We answer data protection requests within one month, as UK GDPR requires.
The UK GDPR and the Data Protection Act 2018 apply to everything described on this page. Data is processed in the United Kingdom and the European Economic Area.
This website
Our hosting provider records a standard web server log for every page served: IP address, timestamp, the file requested, and the browser's user-agent string. This is how any web server works and it is what lets us see that the site is up and detect abuse. Lawful basis: legitimate interests — running and securing the site. These logs are retained by the host on their own schedule and are not combined with anything else, not used to build a profile, and not sold.
The pages use two typefaces served by Google Fonts. Your browser therefore makes a request to fonts.googleapis.com and fonts.gstatic.com, and your IP address is visible to Google in that request. No cookie is set by this. We are telling you because it is the one third party this site contacts, and we would rather name it than bury it.
There is no contact form. If you write to info@adorasec.com we hold your message, your address and our reply for as long as the correspondence is live, and for up to 24 months afterwards so we can pick up a conversation where it stopped. Lawful basis: legitimate interests, or steps taken at your request before entering a contract. Ask us to delete it and we will.
No cookies. No analytics, no tag manager, no pixel, no session recording. No advertising network. No newsletter list. No tracking across sites. Nothing on this site tries to work out who you are.
Your rights
Under the UK GDPR you have the right to be told what we hold about you, to get a copy of it, to have it corrected, to have it erased, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on consent you can withdraw it at any time.
Write to info@adorasec.com. We do not charge for this and we do not require a particular form of words — a plain sentence is enough.
If you think we have handled your data badly, you can complain to the Information Commissioner's Office — ico.org.uk, helpline 0303 123 1113. You do not have to come to us first, though we would rather you did, because we would like the chance to fix it.
Terms of use
The working paper, the anonymised dataset and the figures presented on this site may be quoted, reproduced and re-analysed with attribution to ADORASEC Ltd. No fee, no permission needed, no conditions on what conclusion you reach. If your reading of the numbers contradicts ours, publish it.
The underlying material comes from responses to Freedom of Information requests made under the Freedom of Information Act 2000. Individual authorities are not identified anywhere on this site or in the dataset, and figures are reported in aggregate. That is a deliberate choice: the finding is about how the sector measures, not about who performed worst.
The content is provided for information. It is not legal, financial, regulatory or security advice, and it does not create a professional relationship. Figures are cited to their sources; where a figure is an estimate or a range, we say so on the page. We give no warranty that the site is uninterrupted or error-free.
The ADORASEC name, mark and the design of this site remain ours. The films on this site may be shown and linked to in full; please do not re-cut them or present excerpts as the whole. These terms are governed by the law of England and Wales.
The service itself
This page is about a website you are reading. It is not the processing agreement for the ADORASEC channel. Where an institution uses ADORASEC to reach its own residents or customers, that institution is the controller and we are the processor, under a written contract that says so.
The architecture behind those terms — what the central operator cannot see, what an institution cannot see, what is logged and what is never stored — is set out in full on the security page, because the separation is built into the backend rather than promised in a policy.
We will update this notice when what the site does changes. The date at the top is the date of the version you are reading; we do not change it silently.
