About The Haunted Lighthouse

The Haunted Lighthouse Limited is a cybersecurity and data protection consultancy based in Peel, Isle of Man. We are Cyber Essentials certified and registered with the ICO. Company number 138512C.

We are not a London agency with a Crown Dependency postal address. We are not a reseller packaging someone else's cloud infrastructure under a local brand. We are based here, operated from here, and the infrastructure we run reflects that -- EU-hosted, privacy-biased, documented, and backed up from day one.

The sovereignty question

The Isle of Man sits in an interesting position. Outside the UK. Outside the EU. Subject to its own data protection law, its own regulatory framework, and its own unresolved questions about digital sovereignty. Those questions are not abstract to us. We live and work inside them.

Crown Dependencies are small enough that the gap between policy and practice is visible. Who controls the infrastructure? Under which jurisdiction does your data sit when the lights go out? These are the questions we ask on behalf of clients, and the questions we have already answered for ourselves.

How we work

Our consultancy work starts from a simple premise: governance is a design constraint, not an afterthought. We work with individuals, small organisations, and public bodies who want infrastructure they can understand, audit, and recover from.

We run our own stack -- self-hosted social platforms, privacy-first Git hosting, encrypted backups, documented controls -- because we do not recommend things we would not operate ourselves. No dark patterns. No lock-in by stealth. No engagement farming dressed up as a service.

How we think

If you want to understand our approach before picking up the phone, the articles are the clearest window into that. We write about subsea cable infrastructure, data protection law, cloud sovereignty, and the gap between compliance theatre and actual security posture. No vendor briefings. No press releases repackaged as analysis. Primary sources, named where possible.

Read the articles →

At a glance

  • Isle of Man company (No. 138512C), registered in Peel.
  • Cyber Essentials certified. ICO registered.
  • Infrastructure hosted in the EU with a strong privacy bias.
  • Backups, documentation, and exit plans baked in from day one.
  • No dark patterns, no engagement farming, no theatrics.

Unsure if your project fits? Send a short note -- we'll answer clearly.