Our Privacy Policy

You do not need to register or supply any personal information to browse our website.

What data we collect and how we collect it

We try to minimise risk to you by collecting as little personal data as possible. We collect the most basic information such as your name, email, and phone numbers when you comment on our blog or contact us to inquire about our services or to contract with us. This is the type of information found in a typical business card. You do not need to supply us with any personal information to use the services on our website.

We also record your calls when we carry out remote telephone assessments or when we contract to ensure we are able to accurately provide the service to you and for our training to improve our quality of service to you. This information is only retained for this purpose and deleted in accordance with out retention schedule

Cookies and Analytics

See our Cookie Policy for more details.

What we do with the data

This information is used by us to contact you to offer you the services that you have expressed an interest in.  We will contact you to offer these and related services. We do not share, outsource, offshore this information with anyone outside our company and only use it to contact you. We do not routinely transfer personal data to third parties outside the EU.

We respect your privacy and will not sell or pass this information to anyone unless required by law.

Lawful Bases – the legal reason for processing your data

By communicating, commenting or asking us to contact you, you understand that you are providing this information to us voluntarily and there is a legitimate reason to retain this information for the period required to discharge those obligations mentioned above. Without the contact information, we will not be able to get back to you or publish your comments.

Where we ask for Consent you will be asked to opt-in and you are free to not give or withdraw if you have given consent and then change your mind. We also rely on Contract as the lawful basis for processing your data where you have expressed an interest in procuring our services, for which we need to prepare a contract or we need the information to provide services under a contract with you.

We also rely on Legitimate Interest as a lawful basis to process information where we have a clear interest to process your data and it does not impact your rights and freedoms. We would not want to harm your privacy so please let us know if you have any issues and we will try and explain and accommodate your wishes.

Your rights

When you provide us with your personal information you have certain rights, these include the right to  ensure:

  • we process your data fairly and lawfully.  
  • we process for the purpose it was collected from you
  • your data is accurate
  • your data processed is the minimum required for the purpose, that it is not excessive 
  • your data is secure in our possession
  • your data is not retained for too long

You can:

  • have your data updated and amended if it is incorrect, out of date or incomplete.
  • restrict the level of processing or object to automated processing
  • know how long we keep your data
  • ask us to erase your data under certain circumstances
  • ask us to provide details of your personal data that we hold
  • you can object to automated processing and profiling
  • you can also object to direct marketing
  • under certain conditions, have your data deleted, e.g. data collected with your consent
  • you can ask for the data to be supplied to you in a portable format if appropriate

You can do this by using the Contact Us form. We will, of course, need to verify your identity before we can speak to you about the data or act on your instructions.

How long do we keep your data

Your personal data will be retained for the period needed to interact with you but no longer than 3 years and will be retained in an anonymised form thereafter. Which means you will not be identifiable when the data is anonymised.

For comments for the period, the blog is published. We do not publish your email address only the name you have used. This does not need to be your real name. Please do not leave personal information in your comments.

How your data is protected

This information collected through the website will be retained online on our website and protected behind our hosting provider’s firewall and other security arrangements. As with any such hosts website there is no absolute guarantee of security. If you feel this not sufficient then please do not provide any personal information or let us know and we will dispose of the information, securely of course. Other information, such as emails and documents you share are kept security on our systems.

How to contact us

We are Compsec Ltd, T/A as Cyber Counsel. If you have any issues with our privacy policy or if you feel your data has been used unfairly, then please contact us using the Contact Us form and we will respond to you a.s.a.p. If there is an urgent matter then please contact the privacy lead on 07005978121.

If we cannot resolve your issues, you can contact the ICO, the regulator for UK data protection.