Website privacy and hosting

Fidelis Iwu operates this website under the trading name Firmword. The site is hosted by Cloudflare, which processes connection information such as IP addresses and traffic data to run and protect its services. We use this hosting to keep the site available and secure. We have not added advertising trackers or analytics scripts. The enquiry form sends your name, business email, optional organisation, selected service and message through FormSubmit to our [email protected] mailbox. FormSubmit processes the submission to deliver it by email. Please do not include passwords, confidential documents or sensitive personal information. The service finder and fictional sample previews run in your browser and do not submit information.

If you email us, our privacy notice below explains how we handle your enquiry and business contact information. Cloudflare may process technical information internationally; its privacy policy explains its processing, retention and safeguards. Contact [email protected] with a privacy question.

Privacy notice for business enquiries and outreach

Updated: 25 October 2026. This version includes the website enquiry form.

Who we are

Firmword is the trading name of Fidelis Iwu, who is the data controller responsible for the information covered here. Services include security questionnaires, supplier reviews and IT support for businesses and consultancies.

For privacy questions or to exercise your rights, email [email protected].

What this notice covers

This notice explains how we handle information when researching potential business customers, contacting them, discussing enquiries and following up. Information used to deliver client work is covered by separate arrangements.

Information we use and where it comes from

We may keep your name, role, employer, published business contact details and relevant professional information. We also keep the sources and dates of our research, correspondence, meeting arrangements and notes about the work your business needs.

Information comes from business websites, public team and contact pages, public professional profiles, and details you or your colleagues provide. We record where we found it. You can ask us for the source. Where relevant, our first email explains what prompted us to get in touch.

Please do not send passwords, production data or confidential security documents in response to initial outreach.

Why we use it and our lawful basis

We use business information to find suitable prospects, contact the right people, understand what they need and answer enquiries. It also helps us decide whether to discuss an initial piece of work.

Our lawful basis for targeted business outreach and related correspondence is legitimate interests. The interest is developing Firmword by discussing relevant services with suitable business contacts. We assess whether the contact is necessary and weigh that against your rights and what you would reasonably expect. We limit the information used and the number of follow-ups. If you object, we stop marketing to you. This basis does not replace consent where electronic marketing rules require it.

If you ask us to stop marketing, we keep the minimum details needed to avoid contacting you again. This supports our legitimate interest in respecting your request and meeting our data protection obligations.

Your right to stop marketing

You can ask us to stop marketing at any time. Reply to our email or write to [email protected]. We will stop using your information for marketing. You do not need to give a reason.

Who can receive the information

Fidelis Iwu uses this information to run Firmword. Website form submissions are handled by FormSubmit for delivery to our mailbox; see FormSubmit privacy terms. Our enquiry form does not subscribe you to marketing. Prospect records, email, files and related administration are handled through Microsoft 365. Microsoft and its authorised providers process information to supply these services. We do not sell prospect records.

If you view this notice through a Microsoft sharing link, Microsoft may process technical information about your visit, such as your IP address and browser information, to operate and secure the service. Microsoft's privacy statement explains its handling of that information: https://privacy.microsoft.com/privacystatement.

International processing

Cloudflare, FormSubmit, Microsoft and their service providers may process website and enquiry information outside the UK. The published FormSubmit privacy terms describe processing for form delivery but do not specify every processing location. You may contact us directly by email instead of using the form. Microsoft and its authorised providers may process information outside the UK, including in the United States and other countries where they operate.

Microsoft's Products and Services Data Protection Addendum provides contractual safeguards for these transfers, including the European Commission's Standard Contractual Clauses and, for UK transfers, the UK International Data Transfer Addendum. You can read these arrangements at https://aka.ms/dpa or contact [email protected] for information about the safeguards relevant to your records.

How long we keep it

We keep inactive prospect research and correspondence for six months. If you never reply, that period starts with our last outreach message, or the date we collected the information if we do not contact you. If we have had a conversation, it starts with the last substantive exchange once the conversation becomes inactive. Unanswered follow-ups do not restart the clock. We review records each month and remove expired records from active use.

If you become a client, relevant information moves into our client record-handling arrangements. We keep only the minimum contact identifier and objection details needed on our suppression list while we continue marketing, so we do not contact you again. We review whether those records remain necessary.

Deletion from active records does not immediately erase every recovery copy. Deleted emails and files, file versions and backup copies may remain for the applicable Microsoft 365 recovery or retention periods. Those periods depend on the service and its settings. A legal preservation requirement may also require longer retention. We do not use recovery copies for continued prospecting. Contact us if you need information about the retention applying to your records.

Your other rights

Depending on the circumstances, you can request access to your information, correction of inaccurate information, erasure, restriction of processing or object to processing based on legitimate interests. Data portability applies only in certain circumstances, such as eligible automated processing based on consent or a contract.

Contact [email protected] to make a request. We may need information to verify your identity. You are not required to respond to our outreach. We do not make solely automated decisions about you that have legal or similarly significant effects.

You can complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/. You can contact us first, but you do not have to.

Changes

We update this notice when our prospecting practices change. The date above shows when this version was last revised.