Enquiry information
When you submit an enquiry, the website stores the company, contact person, contact method, company size, industry, service required, description, consent record and submission time. Authorised administrators use this information to handle the enquiry and follow up on a possible engagement.
Source and follow-up records
The website may record the entry-page path, referring website name and campaign-source tags to understand how enquiries reach us. It also records the internal page that led to the enquiry form. Browser session storage temporarily retains source information between pages. This feature does not store full external referring URLs or send enquiry content to third-party advertising analytics platforms.
Access and retention
Enquiries and follow-up stages are accessible only to authorised administrators. Information should be retained as needed to handle enquiries and services; this website currently has no automatic deletion period. Emailweb@gdmme.com with your reference to request access, correction or deletion of the relevant information. Necessary identity checks may apply.
Submission rate limits
To limit repeated submissions and login attempts, the server records SHA-256 hashes of IP addresses or account email identifiers, together with times and attempt counts. These rate-limit records do not retain the original IP address or email address.
Public learning and preparation tools
Public phishing practice and example text you import are processed locally in your browser. Handover-checklist ticks stay on the current page and are not submitted. Unsubmitted industry-popup drafts stay in the current page’s memory so they can be reopened. This feature does not save drafts to browser storage or transmit them to the server before submission. The separate client learning area requires sign-in and authorisation.
Ransomware initial check
The public ransomware tool processes selected file bytes and pasted note text in page memory, without uploading them, executing files or saving results to browser storage. Only features and counts are displayed. Downloads exclude filenames, raw notes and contact addresses; a hash can still identify the same file. Clear inputs or reload to remove the page results. Normal page visits may produce server access logs. External tools have their own terms and are opened only when you select their links.
Provide appropriate information
Do not enter passwords, verification codes, patient or student details, or full customer files in an enquiry. If more detailed information is needed, agree a secure handover method first.
Notice updated：2026-10-10
Management and client sign-in
The management and client areas use a necessary session cookie (GDMMESESSID) to maintain sign-in and protect form submissions. Sessions expire after 30 minutes of inactivity or 8 hours from sign-in. Private server files hold password hashes, account identifiers, authorisation and administrator authenticator settings. Plaintext passwords are not retained.