PRIVACY POLICY

Last updated: October 2026

CYB3R Ltd ("CYB3R", "we", "us" or "our") is committed to protecting your privacy and handling your personal information responsibly, securely and transparently.

This Privacy Policy explains how we collect, use, store, share and protect personal information when you visit our website, contact us, enquire about or purchase our services, become a customer, supplier or business contact, subscribe to our communications, or otherwise interact with CYB3R.

CYB3R Ltd is the data controller responsible for personal information covered by this Privacy Policy, except where we specifically state otherwise.

CYB3R Ltd
Company Number: 11140786
ICO Registration Number: ZC098951
Unit 66, Hillgrove Business Park
Nazeing Road
Nazeing
Essex
EN9 2HB
United Kingdom

Email: info@cyb3rsolutions.com
Telephone: +44(0)20 3924 5555

1. Personal Information We Collect

The personal information we collect depends on how you interact with CYB3R and the services you use.

We may collect your name, job title, company or organisation, business address, email address, telephone number and other contact information that you provide to us.

Where you are a customer, prospective customer, supplier or other business contact, we may also process information relating to your organisation, enquiries, proposals, contracts, services, correspondence, support requests, account history, invoices, payments and our commercial relationship with you.

When you use our website, we may collect technical information including your IP address, browser type and version, device information, operating system, approximate location, referral source, pages visited, interactions with the website, date and time of access and other technical or usage information.

We may also collect information that you choose to provide when completing a website form, contacting us by telephone or email, subscribing to communications, attending an event, communicating with members of our team or otherwise engaging with CYB3R.

2. Information Processed Through Our Services

CYB3R provides cyber security, managed IT, cloud, communications and related professional services.

Depending on the services provided to a customer, CYB3R may process information contained within customer systems, networks, endpoints, cloud environments, email systems, security platforms, logs, alerts, support requests and other infrastructure.

This may include information processed in connection with services such as Security Operations Centre (SOC) monitoring, Managed Detection and Response (MDR/XDR), vulnerability management, penetration testing, security assessments, incident response, endpoint and cloud security, managed IT and other technical services.

The nature and extent of the information processed will depend on the service being provided.

Where CYB3R processes personal information solely on the documented instructions of a customer as part of providing contracted services, CYB3R will normally act as a data processor and the customer will normally remain the data controller.

Such processing will be governed by the applicable customer agreement, data processing terms and any other relevant contractual arrangements.

Where CYB3R determines the purposes and means of processing personal information for its own business activities, CYB3R acts as the data controller.

3. How We Collect Personal Information

We may collect personal information directly from you when you contact us, submit an enquiry, subscribe to communications, use our website, purchase or use our services, communicate with our employees or otherwise provide information to us.

We may also obtain business contact information from your employer or organisation, referrals, suppliers, business partners, publicly available company information, professional networking platforms and other legitimate business sources.

Where personal information is obtained from a source other than directly from you, we will process that information in accordance with applicable data protection law and provide the required privacy information where applicable.

4. How and Why We Use Personal Information

We only process personal information where we have a lawful basis for doing so.

We may process your information where it is necessary to take steps at your request before entering into a contract or to perform a contract with you. This can include responding to service enquiries, providing quotations, establishing services, administering customer accounts, delivering contracted services, providing technical support and managing payments.

We may process information where it is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and interests. These purposes may include managing relationships with customers and prospective customers, improving our services, protecting our business and systems, maintaining network and information security, preventing fraud and misuse, handling enquiries and complaints, maintaining appropriate business records and communicating with relevant business contacts.

We may process information where necessary to comply with a legal or regulatory obligation, including accounting, taxation, fraud prevention, law enforcement and regulatory requirements.

Where the law requires consent for a particular activity, we will request your consent before carrying out that processing. Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Marketing Communications

We may send relevant information about CYB3R products, services, events, cyber security updates, news and other business communications where we are legally permitted to do so.

Where consent is required for electronic marketing, we will obtain the appropriate consent before sending such communications.

Where applicable law permits us to rely on another lawful basis for business-to-business marketing, we may do so while respecting your right to object.

You can ask us to stop sending marketing communications at any time by using the unsubscribe option contained within the communication, where available, or by contacting us at info@cyb3rsolutions.com.

If you unsubscribe or otherwise opt out of marketing, we may retain limited information on a suppression list where necessary to ensure that your preference continues to be respected.

6. Cookies and Website Analytics

Our website uses cookies and similar technologies to operate correctly, remember preferences, understand how visitors use the website, measure performance and, where applicable, support marketing activities.

Some cookies are strictly necessary for the operation and security of the website and do not require consent.

Where consent is required by law, non-essential cookies, including relevant analytics and advertising cookies, will only be used in accordance with the choices you make through our cookie consent mechanism.

You can accept, reject or manage relevant cookie preferences using the cookie controls provided on our website. You may also be able to control cookies through your browser settings.

Where we use third-party analytics or other website technologies, information may be processed by those providers in accordance with the arrangements we have in place with them and applicable data protection law.

Further information about the cookies and similar technologies used on our website is available through our cookie notice or cookie preference controls.

7. Sharing Personal Information

We do not sell your personal information.

We may share personal information with trusted third parties where necessary to operate our business, deliver our services or comply with our legal obligations.

These third parties may include technology and cloud service providers, communications providers, website and hosting providers, professional advisers, payment and accounting providers, contractors, suppliers and other service providers acting on our behalf or supporting our operations.

Where third parties process personal information on our behalf, we require appropriate contractual, confidentiality and security arrangements in accordance with applicable data protection law.

We may also disclose personal information where required by law, regulation, court order or a competent authority; where necessary to establish, exercise or defend legal rights; to prevent or investigate fraud, security incidents or unlawful activity; or where necessary to protect the rights, property or safety of CYB3R, our customers or others.

If CYB3R or part of its business is sold, transferred, reorganised or merged, relevant personal information may be disclosed to professional advisers, prospective purchasers or other parties involved in the transaction, subject to appropriate confidentiality and data protection safeguards.

8. International Transfers

Some suppliers, technology platforms and service providers used by CYB3R may process or store personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we take appropriate steps to ensure that the transfer complies with UK data protection law.

Where appropriate, we may rely on UK adequacy regulations. Where an applicable adequacy arrangement is not available, we may use appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism.

Where required, we will also carry out appropriate assessments relating to international transfers and implement additional safeguards where necessary.

You may contact us if you would like further information about the safeguards used in connection with relevant international transfers.

9. How We Protect Personal Information

CYB3R takes the security of personal information seriously.

We maintain appropriate technical and organisational measures designed to protect personal information against unauthorised or unlawful access, use, disclosure, alteration or destruction and against accidental loss or damage.

The measures applied depend on the nature of the information, the way it is processed and the risks associated with that processing. Measures may include access controls, authentication, encryption where appropriate, security monitoring, vulnerability management, system and software updates, backups, security policies, staff controls and other technical and organisational safeguards.

Access to personal information is restricted to employees, contractors and service providers who require access for legitimate business purposes and who are subject to appropriate confidentiality and security obligations.

While we take appropriate measures to protect information, no method of transmitting or storing information can be guaranteed to be completely secure.

10. How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable contractual, legal, accounting, taxation, regulatory and security requirements.

Customer, contractual and associated business records may generally be retained for up to six years following the end of the relevant relationship where necessary for legal, contractual, accounting, taxation or dispute-resolution purposes.

Information relating to enquiries and prospective customers is retained only for as long as reasonably necessary to respond to the enquiry, conduct appropriate follow-up and manage the prospective business relationship.

Marketing information is retained for as long as there is an appropriate lawful basis for its use. Where you unsubscribe or object to direct marketing, limited information may be retained on a suppression list so that we can continue to respect your preference.

Security logs, monitoring information and personal information processed in connection with cyber security, IT and related customer services may have different retention periods depending on the service provided, the customer's requirements, contractual arrangements, security requirements and applicable law.

Where CYB3R acts as a processor on behalf of a customer, retention and deletion of personal information will also be governed by the applicable customer agreement and documented instructions of the customer.

When determining an appropriate retention period, we consider the nature and sensitivity of the information, the purpose of processing, applicable legal and contractual requirements, potential disputes or claims, security requirements and whether the information remains necessary for legitimate business purposes.

When personal information is no longer required, we will securely delete, destroy or anonymise it as appropriate.

11. Your Data Protection Rights

Depending on the circumstances and the lawful basis on which we process your personal information, UK data protection law provides you with a number of rights.

These may include:

the right to request access to personal information we hold about you;
the right to request correction of inaccurate or incomplete personal information;
the right to request deletion of personal information in certain circumstances;
the right to request restriction of processing in certain circumstances;
the right to object to certain processing;
the right to data portability where applicable;
the right to withdraw consent where processing is based on consent; and
the right to object to the use of your personal information for direct marketing at any time.

These rights are not absolute and may be subject to exemptions or conditions under applicable law.

To exercise your rights, please contact us at info@cyb3rsolutions.com.

We may request information reasonably necessary to confirm your identity and ensure that personal information is not disclosed to an unauthorised person.

We will respond to requests within the time limits required by applicable data protection law. We will normally respond without undue delay and within one month. Where the law permits additional time because of the complexity or number of requests, we will inform you and explain the reason.

We do not normally charge a fee for exercising your data protection rights. A reasonable fee may only be charged where permitted by applicable data protection law, such as where a request is manifestly unfounded or excessive or where additional copies of personal information are requested.

12. Automated Decision-Making

CYB3R does not currently use personal information collected through this website to make decisions about individuals based solely on automated processing that produce legal effects or similarly significant effects.

If this changes, we will update our privacy information and provide the information required by applicable data protection law.

13. Links to Other Websites

Our website may contain links to websites operated by third parties.

CYB3R is not responsible for the privacy practices, security or content of third-party websites. If you follow a link to another website, we recommend reviewing that organisation's privacy information before providing personal information.

14. Keeping Your Information Accurate

We take reasonable steps to ensure that personal information we hold is accurate and, where necessary, kept up to date.

Please contact us if your contact details or other personal information change or if you believe information we hold about you is inaccurate.

15. Complaints

If you have concerns about how CYB3R has collected, used or protected your personal information, please contact us in the first instance so that we have an opportunity to investigate and address your concerns.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent regulator for data protection.

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Telephone: 0303 123 1113

Further information about making a complaint is available on the ICO website.

Making a complaint to CYB3R does not affect your right to complain to the ICO or pursue another remedy available to you under applicable law.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, services, technology, legal obligations or the way in which we process personal information.

The current version will be published on our website and the "Last updated" date at the top of this policy will be amended when material changes are made.

Where required by law, we will bring significant changes affecting the way we use personal information to the attention of affected individuals.

17. Contact Us

If you have any questions about this Privacy Policy, how CYB3R processes personal information, or if you wish to exercise any of your data protection rights, please contact: