Privacy Policy - trusting cybercertain.co.uk with your data

---

Cyber Certain Limited (referred to in this document as “we”, “us” or “our”) is committed to protecting your privacy.  This privacy outlines how we collect, use, and safeguard your personal data, as well as your rights and choices. This notice applies to all data that we collect about you. Please read this notice carefully and contact us if you have any questions using the details provided in the contact and feedback section below.

• Personal data we collect about you
• Why we collect your personal data 
• When we collect your data and how long we keep it for
• What we do with your data
• How we and other organisations will keep your personal data safe
• The rights and choices you have when it comes to your personal data

As the Data Controller, we are responsible for ensuring that our systems, processes, suppliers, and employees comply with applicable data protection laws when handling personal data.

If you have any questions or concerns, you can contact us:

• Email: info@cybercertain.co.uk 
• Post: Please refer to the contact and feedback section on the website for our registered office address.

We collect your personal details including name, telephone and email address details, to keep you informed and provide updates about the services we are providing to you. This information is essential for us to communicate effectively with you. 

Special category data refers to sensitive personal information that requires more protection due to its sensitivity. There should be no requirement to collect this category of information during the course of any interaction with Cyber Certain Limited. However, if this is the case, it will only be used for the specific purpose you provide it for, and to provide the services described on our website.

Website usage data, we collect data about how you use our website through Cookies. This information helps us improve your experience and understand usage patterns. 

We only collect personal data which is necessary to provide and manage our services to you and will not collect any unnecessary data.

Shared email addresses: If you provide an email address that is shared with others, please be aware that we may send communications containing special category data to this address. To protect your privacy, ensure the email address is either private or only shared with individuals you trust to access this type of data.

We collect your personal data to:

Provide specialist cyber services: If you instruct us or look to instruct us to act on your behalf or on behalf or someone else, we need your data to assess and fulfil your instructions. Without this information we may be unable to deliver our services to you.

Prevent Conflict of Interest: where relevant, we collect identity information to ensure that we avoid any conflict of interest between our customers in the future.

Protect your privacy: We do not sell your data.

Respect your preferences: We will not share your data for marketing purposes unless we have informed you and gained your informed consent.

We collect and retain your data as follows:

Before you become a customer: We collect personal data to assess whether we can act for you.

During the course of any business interactions: We collect additional data and where appropriate additional consent to process your data, throughout the course of the consultancy services we are providing for you.

In most cases, we retain your data for 7 years from the conclusion of the procured service, in order to meet any legal and regulatory obligations.
In some cases, we may be required to retain documents for a longer period of time. If this applies to you, we will inform you of the reasons for the extended retention period.
Full details of our retention periods can be obtained by request.

If we intend to use your data for a purpose not covered by this Privacy Notice, we will issue a new Privacy Notice and seek your consent where necessary. 

We will use your data to

• Assess whether we are able to act for you
• Provide IT consultancy services, advice and support to you
• Manage and oversee the services we provide
• Contact and communicate with you throughout our interactions
• Maintain internal record keeping and analysis
• Measure and improve customer services and experiences, through surveys and online      reviews for example
• Investigate any worries or complaints you have about your services

You have a number of legal rights over the personal information held by us. These include the right to:

• Access your personal information held in our records, whether electronically or manually
• Correct or update any personal information that you think is incorrect
• To object to further processing
• Ask us to delete your personal information. We will only be able to accommodate this request where it is no longer necessary for the purpose(s) for which it was provided or where we no longer have a lawful basis to process your personal information
• Receive the personal information we hold about you in a portable format
• Receive information regarding decisions made through any automated means
• Ask us to stop processing your personal information in certain circumstances

Where we use Artificial Intelligence (AI) or other automated systems to support decision-making, you have the right to understand how these decisions are made and to challenge them if they have a legal or significant impact on you. We are committed to ensuring transparency and fairness in all automated processes.

If you wish to exercise these rights, please contact info@cybercertain.co.uk for more details on how to do this.

Further information can also be found on the Information Commissioner’s Office website (www.ico.org.uk)