[LEGAL REVIEW REQUIRED] — this policy is a working draft and must be reviewed and approved before publication.
Who we are
[LEGAL COMPANY NAME] Ltd (trading as Zerone Cyber) is the data controller for personal data submitted through this website. Registered address: [REGISTERED ADDRESS], United Kingdom. Company number: [COMPANY NUMBER]. ICO registration: [ICO REGISTRATION NUMBER].
What we collect
- Contact details you provide (name, company, work email, phone, job title).
- Information about your organisation and enquiry.
- Answers and scores from the Cyber Risk Self-Assessment, if you complete it.
- Technical data such as IP address for security and rate limiting.
Why we use it
We use your information to respond to enquiries, prepare assessment results and provide the services you request. Our lawful bases are legitimate interests (responding to business enquiries), consent (analytics cookies and marketing) and contract performance where a service agreement is in place.
Retention
Enquiry and assessment records are retained for [RETENTION PERIOD] unless a longer period is required for legal or contractual reasons.
Sharing and security
We use vetted service providers for hosting, email and analytics. Data submitted through this website is transmitted over encrypted connections and stored with access restrictions in place. We do not sell personal data.
Your rights
Under UK GDPR you have rights of access, rectification, erasure, restriction, objection and portability. To exercise them, contact info@zeronecyber.com. You may also complain to the Information Commissioner's Office at ico.org.uk.