Privacy Policy

Effective date: 5th January 2026

CyberTechSecure ("we", "us", "our") is a trading name of Contrive Ltd a limited company registered in England and Wales. We provide Cyber Security advisory and gap analysis services to UK small and medium-sized businesses.

This privacy policy explains what personal data we collect, why we collect it, who else sees it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who you can contact

CyberTechSecure
Email: info@cybertechsecure.co.uk

If you have any questions about your personal data or this policy, contact us at the email above.

What personal data we collect

We collect personal data only when you provide it to us directly. Specifically, when you book a free pre-assessment call through our website, we collect:

• Your name
• Your business name
• Your email address
• Your phone number (if you provide it)
• Your company size (number of employees)
• A short description of your current IT setup (free text you write yourself)
• A free-text explanation of what's prompting your interest in Cyber Essentials (free text you write yourself)

We do not collect any special category data (such as health, ethnicity, or political opinions), and we do not track you across other websites.

Why we collect it (our purposes)

We use the data you provide solely to:

• Schedule and conduct the free 30-minute pre-assessment call you have booked
• Follow up with you about Cyber Essentials certification if you request it
• Maintain a record of our enquiry so we can answer questions about your case

We do not use your data for marketing, profiling, automated decision-making, or any purpose beyond the ones listed above.

Our lawful basis for processing

Under UK GDPR, we must have a valid lawful basis for processing your personal data. Our basis is:

• Article 6(1)(b) — performance of a contract — for processing the data needed to schedule and conduct the call you have booked with us
• Article 6(1)(f) — legitimate interests — for keeping a record of our enquiry so we can serve you properly, where this does not override your rights

We do not rely on consent for the free call booking, because the call itself is the service you have requested.

Who else receives your data

We share your personal data only with the third parties needed to deliver the service you have booked:

• Calendly — our appointment scheduling tool, based in the United States. Calendly processes your booking data under their own privacy policy. Their adequacy is supported by their participation in the EU-US Data Privacy Framework.
• Zoho Mail — our email provider, which hosts info@cybertechsecure.co.uk. Zoho processes your data under their own privacy policy.
• Our partner IASME-accredited certification body — only if you decide to proceed with a paid certification after the free call, and only the data needed to register and process your certification application.

We do not sell your personal data. We do not share it with advertisers, analytics providers, or any party not listed above.

How long we keep your data

We keep your booking data for up to 12 months after our last contact with you, unless you ask us to delete it sooner. We may keep anonymised enquiry summaries longer for our own records, but these will not identify you.

If you proceed with a paid certification through our partner IASME-accredited body, your data will be retained by that body for the period required by the IASME scheme rules (typically 6 years for audit purposes).

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectification of any data that is incorrect or incomplete
• Erasure ("right to be forgotten") of your data, subject to our legal obligations
• Restriction of processing in certain circumstances
• Object to processing based on legitimate interests
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent where consent is our lawful basis (not applicable to the free call booking)
• Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, email info@cybertechsecure.co.uk. We will respond within one calendar month.

If you are unhappy with our response, you can complain to the ICO at ico.org.uk or by calling 0303 123 1113.

How we protect your data

We use appropriate technical and organisational measures to protect your personal data, including:

• TLS encryption on all email communications
• Access controls on our booking and email systems
• Two-factor authentication on our business email account
• A formal data processing agreement with Calendly and Zoho

We do not store payment card data. Payments for any future paid certification will be handled by our partner IASME-accredited certification body under their own security arrangements.

Changes to this policy

We may update this privacy policy from time to time. The effective date at the top of this page will always show when it was last revised. Material changes will be communicated to active enquirers by email.

This privacy policy is provided as a starting point based on UK GDPR and ICO guidance for small organisations. It has not been reviewed by a solicitor. Before processing real client data through a paid service, we recommend obtaining professional legal review.