Privacy Policy

Introduction

CyberSymbio Limited ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

As a cybersecurity-focused company, we take data protection seriously and comply with all applicable UK data protection laws, including the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

Information We Collect

We collect several types of information from and about users of our website and services:

Personal Information

This includes information that can be used to identify you, such as:

• Contact details (name, email address, phone number, business address)
• Business information (company name, size, industry)
• Technical information for Cyber Essentials certification preparation
• Payment information (processed securely through our payment providers)

Technical Data

When you visit our website, we automatically collect:

• IP address and browser type
• Pages visited and time spent on our site
• Referring website information
• Device information and operating system

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

How We Use Your Information

We use the information we collect for various purposes:

Purpose	Legal Basis
Providing Cyber Essentials preparation services	Contract performance
Responding to inquiries and providing support	Legitimate interests
Processing payments	Contract performance
Sending service-related communications	Legitimate interests
Improving our website and services	Legitimate interests
Complying with legal obligations	Legal obligation

Data Sharing and Disclosure

We may share your information in the following situations:

With Service Providers

We may share your information with third-party vendors who provide services on our behalf, such as:

• Payment processors
• Email service providers
• Analytics providers

All third-party service providers are required to maintain the confidentiality and security of your information.

For Legal Reasons

We may disclose your information where required to do so by law or in response to valid requests by public authorities.

Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the new entity.

Data Retention

We will retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

For Cyber Essentials certification preparation clients, we typically retain data for 7 years from the completion of services to comply with UK tax and regulatory requirements.

Website analytics data is generally retained for 26 months.

Your Data Protection Rights

Under UK data protection laws, you have rights including:

Right to Access

You have the right to request copies of your personal information.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal information, under certain conditions.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal information, under certain conditions.

Right to Object to Processing

You have the right to object to our processing of your personal information, under certain conditions.

Right to Data Portability

You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. Please contact us at privacy@cybersymbio.co.uk if you wish to make a request.

International Data Transfers

We primarily store and process your data within the United Kingdom. In some cases, we may use service providers located outside the UK. In such cases, we ensure appropriate safeguards are in place to protect your data in accordance with UK data protection laws.

Cookies Policy

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly
• Analytical/Performance Cookies: Allow us to recognize and count visitors and see how visitors move around our website
• Functionality Cookies: Used to recognize you when you return to our website

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

Data Security

We have implemented appropriate security measures to prevent your personal information from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed.

In addition, we limit access to your personal information to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Links to Other Websites

Our website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.