NetThreat Privacy Policy Statement
This Privacy Statement was updated June 2026
The privacy of your data is important to us. We encourage you to read the following privacy statement and email us at privacy@netthreat.co.uk if you have any questions.
Who are we? NetThreat is one of the UK’s leading resellers of network security appliances, solutions, and services. Our registered head office is Minerva Mill, Station Road, Alcester, B49 5ET. NetThreat Ltd is recognised as the Data Controller.
This privacy policy applies to NetThreat Ltd and our group of companies and websites including but not limited to: netthreat.co.uk, sonicwallonline.co.uk, watchguardonline.co.uk.
What is personal data? Personal data includes your name, telephone number, title (marital status), email address, position in the company and address. We may also retain correspondence from service-related communications and activities, such as meetings, phone calls, documents, and emails.
From our websites we may collect your IP-address and map your journey through our sites.
Special categories of personal data. This includes information about your religion, race, genetic and biometric information. NetThreat do not collect or process any special categories of personal data.
When do we collect personal data about you? When you interact with us in person, by written or electronic correspondence, phone, or through our websites. We may also collect personal information from other legitimate sources, such as third-party data providers*, public sources, and public social networks. *If they have received your consent to share your personal data.
Where we collect personally identifiable information, we will be clear about this. For example, asking for your email address when you use our online chat facility.
Why do we collect and use personal data? To carry out administration, sales and order processes, direct marketing, and customer service functions. We also collect personal data about our suppliers, partners, and resellers and to process a job application, partner, or reseller application. Google may also use your personal data when you give consent via our website, you can view Google’s Business data responsibility site here.
Data minimisation. As a data controller we will:
- Only collect data required for processing and to fulfil our obligations under contract.
- Ensure data is stored only for the required amount of time and there is a process to securely dispose of all copies at the right time.
- Ensure data is not shared with third parties, suppliers, cloud providers unless necessary and agreed by consent, under contract, or the basis of legitimate interest exists.
Live Chat. We use a live chat facility provided by a third party called LiveAgent. You can view the Live Agent Privacy Statement here.
Collection and processing of information. We only collect the information we need to fulfil a function or administrative process. We process information on the following lawful conditions:
- Contract. We may collect and process personal data to fulfil our obligations under contracts and agreements with you, our customers, partners, resellers, and suppliers.
- Legitimate interest. We may collect and process personal data if it is of legitimate interest to us or you and only if your privacy rights do not override this interest. An assessment will determine a mutual interest.
- Social media and community sites. Content uploaded to social media platforms (i.e. LinkedIn) remains in the public domain. We are not responsible for the consequences or use of any information submitted.
How long do we keep your personal data? We will retain data for a reasonable period following the completion of the purpose for which it has been originally collected, subject to the following guidelines:
- Up to 6 years following a purchase, OR until the vendor end of life date for the related product, whichever occurs latest. This is so we can issue updates on devices, firmware, service agreements, and renewals for example.
- Up to 2 years following the set-up of an online account. This is so we can issue updates on relevant products and services.
- Up to 2 years following an enquiry. This is so we can issue updates on relevant products and services.
We also retain data for longer periods of time, as necessary for legal/statutory purposes. After a period of reasonableness, we will delete data. We may retain a suppression list for systems i.e. Mailchimp, where individuals have asked to be unsubscribed.
Your rights to your personal data. You have the right to request:
- a copy of the personal data we hold about you.
- corrections if the data we hold about you is incorrect or out of date.
- personal data is deleted when it is no longer necessary to retain it.
- your withdrawal from personal data processing. (i.e. unsubscribe from our marketing communications).
- restrictions on further processing of your data in case of inaccuracies or objections to methods of processing.
Online accounts. You may update your online user profile at any time. If you have not purchased through your online account for a period of 6 years, we will delete your account. You can set up a new account at any time, but we will not be able to reinstate a previous account.
NetThreat Knowledge. Our marketing newsletter contains content about selected offers, discount deals, industry news, webinars, and other relevant information that we refer to as ‘NetThreat Knowledge.’ You may unsubscribe at any time, and we will retain your email address on a ‘suppression list’ as record of your request.
Products, services, and solutions. We will keep you up to date with essential information related to products, services, and solutions. This may include renewal notices, hardware/firmware updates, and information about the end of support/life for your appliance. If you decide that you do not wish to receive this essential information, we will be unable to accept any liability for any losses or consequences incurred that may expose your network and/or impact the effectiveness of your appliance.
Cookie Policy. We use Google Analytics and Google Ads to understand how visitors use our website, improve our services, and measure advertising performance.
Where you give consent, Google may process cookies, device identifiers, IP address, and browsing activity to provide website analytics, advertising measurement, remarketing, personalised advertising, and campaign insights.
Google may also associate this data with users signed into Google services, in line with their account settings. More information is available in Google’s Privacy Policy and My Activity tools:
https://policies.google.com/privacy
https://myactivity.google.com
We use Google Consent Mode to communicate your cookie preferences to Google services. It adjusts how Google Analytics and Ads operate based on your consent choices.
If you do not consent to analytics or advertising cookies, Google will not use cookies for personalisation or advertising. Limited, aggregated or modelled data may still be used to measure website and advertising performance in accordance with applicable law.
External links. Although we take every effort to ensure the accuracy and providence of links from our site to any third-party sites or landing pages, we are not responsible for any malicious content.
Data sharing. We will not sell, rent, or trade your information to Third Parties.
Third party providers. Where we use a third-party provider to process your data (with our explicit consent), we will ensure a Data Processing Agreement is in place. Third parties include our vendors and distributors, we also use Mailchimp to deliver NetThreat Knowledge and other marketing platforms such as Eventbrite and WebEx etc. to help manage our webinars and other events.
Third Party privacy statements. We retain a copy of the privacy statement for each of our third party processors/platforms.
Sub-Contractors. We are responsible for ensuring sub-contractors adhere to our Privacy Policy and current legislation. Where necessary we will request a signed Data Processing Agreement and a Non-Disclosure Agreement if applicable.
Outside of the EU. If our third-party processors or sub-contractor processes personal data outside of the EU, the processing will continue to be in accordance GDPR legislation.
Legal notice on disclosure of data. If required by statutory law, we will disclose your personal information, or if we, as a company, believe that disclosure is necessary to protect our company’s rights and/or to comply with any legal process. We will do what we can to ensure that your privacy rights remain protected.
Subject Access Request. You can request a copy of the personal data we hold and the reason for processing by emailing privacy@netthreat.co.uk or writing to us at NetThreat, Minerva Mill, Station Road, Alcester, B49 5ET. There is no cost for this information, and we will respond to you within 30 days by the method in which you contacted us where possible.
More Information. If you have any questions about GDPR please refer to the Information Commissioner’s Office official regulations guide. https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/
Please contact us at privacy@netthreat.co.uk if you would like to know more about our privacy policy.