Privacy policy

📅 Last updated: 1 May 2026

Who We Are
Scope of This Policy
Personal Data We Collect
How We Use Your Personal Data
Legal Basis for Processing
How Long We Keep Your Data
Sharing Your Personal Data
International Transfers
Cookies and Similar Technologies
Our Software Products (CASEY)
Your Rights
Security
Changes to This Policy
Contact Us and How to Complain

1. Who We Are

This Privacy Policy is issued by ForenSecure Ltd, a company registered in Jersey, Channel Islands ("ForenSecure", "we", "us", or "our").

ForenSecure is the data controller for personal data collected through this website (forensecure.com) and in connection with our business operations, including product enquiries, sales, and support activities.

You can contact us at: support@forensecure.com

2. Scope of This Policy

This policy describes how ForenSecure handles personal data relating to:

Visitors to our website at forensecure.com
Individuals who contact us via our contact form, email, or other means
Customers, prospective customers, and their representatives
Individuals whose data we process in the course of providing support or professional services

This policy does not describe the processing of personal data within CASEY by organisations that deploy our software. See Section 10 for further information on that distinction.

3. Personal Data We Collect

Information you provide to us

When you contact us or enquire about our products, we may collect:

Your name and job title
Your work email address
The name of your organisation or agency
The content of your message or enquiry
Any other information you choose to include in your communication

Information collected automatically

When you visit our website, our web server may automatically log standard technical information, including:

Your IP address
The type and version of your browser
The pages you visit and the time of your visit
The referring URL (the page you visited before arriving at our site)

We do not use third-party analytics services (such as Google Analytics) on this website. Server logs are held for security and operational purposes only.

Information from third parties

We do not purchase or acquire personal data from data brokers or other third parties for marketing purposes.

4. How We Use Your Personal Data

We use personal data for the following purposes:

Purpose	Description
Responding to enquiries	To reply to messages sent through our contact form or by email, and to follow up on product enquiries or demonstration requests.
Sales and account management	To manage relationships with customers and prospective customers, including preparing quotations, licensing agreements, and deployment support.
Providing support	To deliver technical support and assistance to licensed users of CASEY.
Improving our products and services	To understand how our products are used and to inform product development — using aggregated or anonymised information where possible.
Complying with legal obligations	To fulfil our obligations under applicable law, including data protection, financial, and regulatory requirements.
Security and fraud prevention	To protect our website, systems, and business from unauthorised access, malicious activity, and fraud.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

5. Legal Basis for Processing

ForenSecure processes personal data under the Data Protection (Jersey) Law 2018. The legal bases we rely on are:

Legitimate interests — for responding to enquiries, managing customer relationships, and improving our products, where those interests are not overridden by your rights and interests.
Contractual necessity — where processing is necessary to perform a contract with you or to take steps at your request prior to entering into a contract (for example, processing your details in connection with a licensing agreement).
Legal obligation — where we are required to process data to comply with a legal obligation applicable to us.
Consent — where we have obtained your specific, informed consent for a particular processing activity (for example, adding you to a mailing list). You may withdraw consent at any time.

6. How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. In practice:

Enquiry and contact data — retained for up to 2 years from your last contact with us, unless you become a customer, in which case it is held for the duration of the relationship and for a reasonable period thereafter.
Customer and licensing records — retained for the duration of the contract and for 7 years following its conclusion, in line with standard commercial record-keeping requirements.
Web server logs — retained for up to 90 days for security and operational purposes, then deleted.

When personal data is no longer required, it is securely deleted or anonymised.

ForenSecure does not sell, rent, or trade personal data. We may share personal data in the following limited circumstances:

Service providers — we may engage third-party service providers (such as email hosting, cloud storage, or website hosting providers) who process personal data on our behalf under written data processing agreements that require them to protect your data.
Legal requirements — we may disclose personal data where required to do so by law, court order, or at the request of a regulatory authority.
Business transfers — in the event of a merger, acquisition, or sale of all or part of our business, personal data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

We do not share personal data with third parties for their own marketing purposes.

8. International Transfers

Jersey is recognised by the European Commission as providing an adequate level of data protection. Where we transfer personal data outside Jersey to countries that do not have an equivalent adequacy decision, we implement appropriate safeguards — such as standard contractual clauses — to ensure your data is protected.

This website uses only locally hosted assets. No font files, scripts, or other resources are loaded from third-party servers during your visit, so no personal data is transmitted to external parties as a result of using the site.

9. Cookies and Similar Technologies

This website does not use cookies for analytics, advertising, or tracking purposes. All fonts, scripts, and stylesheets are hosted locally — no resources are loaded from third-party servers.

Your browser may cache locally hosted resources such as CSS, fonts, and scripts to improve page load performance on subsequent visits. This is standard browser behaviour and does not involve any tracking by ForenSecure.

If we introduce cookies in future, we will update this policy and implement an appropriate consent mechanism.

10. Our Software Products (CASEY)

CASEY is a software platform licensed to organisations — such as law enforcement agencies, digital forensic units, and corporate investigation teams — for their own operational use.

When an organisation deploys CASEY, that organisation acts as the data controller for the personal data held within the system. ForenSecure acts as a data processor only to the extent that we access or handle that data in the course of providing support, maintenance, or professional services under a written agreement with the customer organisation.

If you are an individual whose personal data is held within a CASEY system operated by an organisation, you should direct your data subject rights requests to that organisation directly. ForenSecure cannot fulfil rights requests relating to data we do not control.

Customers wishing to understand our data processing obligations as a software provider should refer to their licensing agreement, or contact us at support@forensecure.com to discuss a data processing agreement.

11. Your Rights

Under the Data Protection (Jersey) Law 2018, you have the following rights in relation to personal data that ForenSecure holds about you:

Right of access — to request a copy of the personal data we hold about you (a Subject Access Request).
Right to rectification — to request that we correct inaccurate or incomplete personal data.
Right to erasure — to request that we delete your personal data, in certain circumstances.
Right to restriction of processing — to request that we limit how we use your data in certain circumstances.
Right to data portability — to receive your personal data in a structured, commonly used, machine-readable format, where processing is based on consent or contract and carried out by automated means.
Right to object — to object to processing based on legitimate interests, including direct marketing.
Rights relating to automated decision-making — we do not carry out solely automated decision-making with significant effects on individuals.

To exercise any of these rights, please contact us at support@forensecure.com. We will respond to verified requests within one month. We may need to verify your identity before processing a request.

Exercising your rights is free of charge. Where requests are manifestly unfounded or excessive, we may charge a reasonable fee or decline to act.

12. Security

ForenSecure implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or damage. These measures are reviewed and updated as necessary.

No method of transmission over the internet or electronic storage is completely secure. While we take your data security seriously, we cannot guarantee absolute security. If you become aware of any security concern relating to your data, please contact us promptly at support@forensecure.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or regulatory guidance. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of our website following any changes constitutes your acknowledgement of the updated policy.

14. Contact Us and How to Complain

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

ForenSecure Ltd
Jersey, Channel Islands
Email: support@forensecure.com

If you are not satisfied with our response, or you believe we are processing your personal data in a way that does not comply with the Data Protection (Jersey) Law 2018, you have the right to lodge a complaint with the supervisory authority:

Jersey Office of the Information Commissioner (JOIC)
2nd Floor, 5 Castle Street, St Helier, Jersey JE2 3BT
Website: jerseyoic.org
Email: enquiries@jerseyoic.org

We would, however, welcome the opportunity to address your concerns before you approach the JOIC, and ask that you contact us in the first instance.