Privacy Policy
Last updated: August 17, 2026
MD-5 ("MD-5", "we", "us", or "our") operates md-5.com (the "Site"). This policy explains what information we collect when you visit or use the Site, how we use it, and the choices you have. It applies to this website only — not to any penetration testing, vulnerability assessment, or consulting engagement, which is governed separately by the signed statement of work for that engagement.
Information we collect
Information you provide to us
When you submit our contact form, we collect what you enter into it:
- Your first name
- Your email address
- Your phone number, if you choose to provide one
- The message you write and the service areas you indicate you're interested in
We use this only to respond to your enquiry. We don't require an account to browse the Site, and we don't collect payment information here — that's handled separately, per engagement.
Information collected automatically
We don't run analytics or advertising scripts on this Site, and we don't set tracking or advertising cookies. Like any website, our hosting infrastructure necessarily processes standard technical data to serve pages and keep the Site secure — things like IP address, browser type, and request timestamps, typically retained briefly in server/CDN logs for security and abuse prevention.
The Site remembers one preference locally in your browser's storage: whether you've chosen light or dark mode. That preference stays on your device — it's never sent to us.
How we use your information
- To respond to messages sent through the contact form and follow up on enquiries
- To scope, discuss, and deliver the services you request
- To maintain, secure, and improve the Site
- To meet legal obligations
Third-party service providers
Our contact form is processed by Web3Forms, a third-party form-delivery service that relays your submission to our inbox. Web3Forms processes the data you submit on our behalf; see their privacy policy for details on how they handle it in transit. We don't use any other third-party processor to collect data on this Site.
How we share information
We don't sell or rent your information. We share it only with the service provider named above, as needed to operate the Site, or when required by law, legal process, or to protect the rights, property, or safety of MD-5, our clients, or others.
Data retention
We keep contact form submissions for as long as reasonably needed to handle your enquiry and any resulting engagement, and then delete or anonymize them. Server/CDN logs are retained only as long as our hosting provider's default security window requires.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of the personal information we hold about you, or to object to or restrict how we use it. To exercise any of these rights, email us at [email protected] and we'll respond within a reasonable time.
Children's privacy
This Site is intended for a business and professional audience. We don't knowingly collect information from children under 16, and if we learn that we have, we'll delete it.
Security
We take reasonable technical and organizational measures to protect the information you share with us. No method of transmission or storage is completely secure, so we can't guarantee absolute security.
International visitors
If you access the Site from outside the country where our servers or service providers are located, your information may be transferred to, stored, and processed in a different jurisdiction with different data protection laws than your own.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above. We encourage you to review this page periodically.
Contact us
Questions about this policy or how we handle your information? Email us at [email protected].