Legal

Legal and privacy

Last updated 14 October 2026

This page explains who we are, what happens to the information you send us through this website, and the terms that apply to using it. It is written to be read rather than to be survived, so if anything here is unclear, ask us and we will explain it.

Who we are

First Light is a technology and cybersecurity firm based in Erbil, Iraq, founded by Ali Salih. We are the controller of any personal data you send through this site.

What we collect

Only what you type into the enquiry form, which is your name, your email address, your company name if you choose to give one, the areas of work you tick, and your message. Nothing else about you is collected by this site.

We do not use analytics, advertising, tracking pixels, social media widgets or any third-party script. Nothing on this site profiles you, and nothing follows you to another site.

Why we may hold it, and on what basis

We use what you send for one purpose: to read your enquiry and reply to it. Under the GDPR that rests on our legitimate interest in responding to someone who has approached us about work, and on taking steps at your request before entering into a contract. We do not rely on consent for this, which is why there is no consent box to tick, and we will never use your details to market to you unless you ask us to.

Who else sees it

Your enquiry arrives as an email in our own mailbox. It is handled by the people at First Light who need to answer it. We do not sell it, rent it, trade it or pass it to anyone for their own purposes.

The only third party involved is our hosting and email provider, Hostinger, which carries the message in the same way any mail provider carries mail.

How long we keep it

We keep your enquiry for as long as we are in contact with you about it, and for a short period afterwards in case you come back to the same conversation. When a thread is closed and no longer needed, it is deleted. If you ask us to delete it sooner, we will.

Your rights

If you are in the EU or the UK, the GDPR gives you the right to ask us for a copy of the personal data we hold about you, to have it corrected if it is wrong, to have it deleted, to restrict or object to how we use it, and to receive it in a portable form. Rights similar to these exist in many other places.

Ask by emailing info@firstlight.software. We will respond within one month. There is nothing to pay, and you do not have to give a reason.

If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to a data protection authority: in the UK that is the Information Commissioner, and in the EU it is the authority for the country you live in.

Cookies and what this site stores

This site sets no cookies at all, so there is no cookie banner to dismiss.

It stores one thing in your browser: a single flag, kept only for the current tab session, that records you have already seen the opening animation, so a second visit in the same session gets a shorter one. It contains no identifier, it is never sent to us, and it disappears when you close the tab.

Security

The site is served over HTTPS. The enquiry form is validated before it is sent, throttled against abuse, and delivered straight to our own mailbox. No enquiry database is kept on the web server. We are a security firm, and we hold our own systems to the standards we apply to our clients, though no method of transmission over the internet is ever perfectly secure.

Reporting a security issue

If you believe you have found a security vulnerability in this website or in anything we operate, email info@firstlight.software with what you found and how to reproduce it. We acknowledge every report within one working day and keep you informed while we fix it. Our contact details for this are also published in machine-readable form at /.well-known/security.txt.

Using this website

The content, design, code, logo and imagery on this site belong to First Light, except for the Earth imagery, which comes from NASA Visible Earth and is in the public domain, and the typefaces and 3D library, which are used under their own open source licences.

You are welcome to read, link to and share this site. Please do not copy its content or code for your own commercial use without asking us first.

The site is provided as it is. We keep it accurate and available as best we can, but we do not warrant that it will be uninterrupted or error free, and nothing on it is professional advice for your particular situation. Talk to us and we will give you advice that is.

Changes

If this notice changes, the date at the top changes with it. Material changes to how we use personal data will be described here rather than made quietly.

Contact

Anything on this page, or anything about your data, comes to info@firstlight.software. A person reads it.