Privacy Policy
We're committed to protecting your privacy and handling your data responsibly
Last updated: December 2024
Our Commitment to Your Privacy
At CyberCertify, we understand the importance of data protection, especially for law firms handling sensitive client information. This privacy policy explains how we collect, use, and protect your personal information when you use our services or visit our website.
We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have any questions about this policy, please contact us at privacy@cybercertify.co.uk.
Information We Collect
- Personal information you provide when filling out our questionnaire or contact forms, including your name, email address, phone number, and company details.
- Technical information about your IT environment that you share during the certification process.
- Communication records when you contact us for support or consultation.
- Website usage data through cookies and analytics to improve our services.
How We Use Your Information
- To provide Cyber Essentials certification services and ongoing compliance monitoring.
- To communicate with you about your certification status and compliance requirements.
- To improve our services and develop new offerings that meet your needs.
- To comply with legal obligations and regulatory requirements.
- To send you relevant updates about cybersecurity compliance (with your consent).
Data Protection & Security
- We implement industry-standard security measures to protect your personal information.
- All data is encrypted in transit and at rest using advanced encryption protocols.
- Access to your information is restricted to authorized personnel only.
- We regularly review and update our security practices to maintain the highest standards.
- We never sell, rent, or share your personal information with third parties for marketing purposes.
Your Rights Under GDPR
- Right to access: You can request a copy of the personal information we hold about you.
- Right to rectification: You can ask us to correct any inaccurate or incomplete information.
- Right to erasure: You can request deletion of your personal information in certain circumstances.
- Right to portability: You can request your data in a structured, machine-readable format.
- Right to object: You can object to processing of your personal information for certain purposes.
- Right to withdraw consent: You can withdraw consent for marketing communications at any time.
Cookies & Analytics
- We use essential cookies to ensure our website functions properly and securely.
- Analytics cookies help us understand how visitors use our site to improve user experience.
- We do not use cookies for advertising or tracking across other websites.
- You can control cookie preferences through your browser settings.
- Disabling cookies may affect some functionality of our website.
Data Retention
- We retain your personal information only as long as necessary to provide our services.
- Certification records are kept for the duration required by regulatory bodies.
- Marketing communications data is retained until you unsubscribe or request deletion.
- We regularly review and delete information that is no longer needed.
- Some information may be retained longer if required by law or for legitimate business purposes.
Contact Us About Privacy
If you have any questions about this privacy policy or how we handle your personal information, please contact us:
Email: privacy@cybercertify.co.uk
Phone: +44 (0)20 1234 5678
Address: CyberCertify Ltd, Data Protection Officer, London, UK