Privacy Policy
Last updated: April 2025
Cykube Limited ("Cykube", "we", "us", or "our") is committed to protecting the personal data of all individuals who interact with our website and services. This Privacy Policy explains what data we collect, how we use it, and your rights under applicable data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Cykube Limited is a technology consulting company registered in England and Wales. We are the data controller for personal data collected through this website.
2. Data We Collect
We may collect the following categories of personal data when you interact with our website or contact us directly:
Identity Data
First name, last name, job title, and organisation name.
Contact Data
Email address and telephone number.
Enquiry Data
The content of messages or enquiries you submit through our contact form or by email.
Technical Data
IP address, browser type and version, time zone, operating system, and platform data collected automatically when you visit our website.
Usage Data
Information about how you navigate and use our website, including pages visited and time spent.
We do not collect any special category data (such as health, religious, or political information) and we do not knowingly collect data from individuals under the age of 16.
3. How We Use Your Data
We use your personal data only for the purposes set out below, and only where we have a lawful basis to do so under the UK GDPR:
| Purpose | Lawful Basis |
|---|---|
| Responding to your enquiries and contact form submissions | Legitimate interests / Contract |
| Providing and managing our services to clients | Contract |
| Improving our website and user experience | Legitimate interests |
| Complying with legal and regulatory obligations | Legal obligation |
| Sending relevant service updates or information (where consented) | Consent |
We will never sell your personal data to third parties, nor use it for purposes incompatible with those stated above.
4. Data Storage and Security
We take the security of your personal data seriously. All data is stored on secure servers with appropriate technical and organisational measures in place to prevent unauthorised access, loss, or disclosure.
Where data is stored or processed outside the United Kingdom, we ensure that appropriate safeguards are in place in accordance with UK GDPR requirements, including standard contractual clauses where applicable.
We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Enquiry data is typically retained for up to 24 months. Client engagement data is retained in line with our contractual and legal obligations.
5. Third Party Services
We may share your data with carefully selected third parties where necessary to deliver our services or operate our website. These include:
- check_circleHosting and infrastructure providers — who store and serve our website and associated data.
- check_circleEmail service providers — used to manage and respond to inbound communications.
- check_circleAnalytics providers — used to understand how visitors interact with our website, on an anonymised or aggregated basis where possible.
- check_circleProfessional advisors — including legal, financial, and compliance advisors, where required.
All third-party processors are subject to appropriate data processing agreements and are required to handle your data in accordance with applicable data protection law. We do not permit our third-party service providers to use your personal data for their own purposes.
7. Your Rights Under UK GDPR
As a data subject under UK GDPR, you have the following rights in relation to your personal data:
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your personal data where there is no legitimate reason for continued processing.
Right to Restriction
Request that we restrict processing of your data in certain circumstances.
Right to Data Portability
Request transfer of your data to you or a third party in a structured, commonly used format.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes.
To exercise any of these rights, please contact us using the details below. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have not been respected.
8. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.
9. Contact Us
For any questions, requests, or concerns relating to this Privacy Policy or how we handle your personal data, please contact us:
Address
Kemp House, 124 City Road
London EC1V 2NX