Privacy policy
How CyberVanta collects, uses, and protects personal data on this website and during engagements.
Who we are
CyberVanta is a cybersecurity services company operating in the United Kingdom. We are the data controller for personal data collected through this website. Questions about this policy can be sent to info@cybervanta.tech.
What we collect
This website does not use advertising trackers or third-party analytics cookies. Session storage is used only where required for the site to function.
- Contact form submissions: your name, work email, company, the service you are interested in, and your message.
- Email correspondence you send us, including attachments.
- Basic server logs: IP address, browser type, pages requested, and timestamps, kept for security monitoring.
Why we use it
Our legal bases under UK GDPR are legitimate interests (responding to enquiries, securing our systems), performance of a contract, and legal obligation.
- To respond to your enquiry and arrange a scoping call.
- To prepare a proposal and, if you engage us, to deliver the work under contract.
- To protect this website and our systems from abuse.
- To meet legal and regulatory obligations.
Engagement data
During testing we may encounter personal data held in your systems. We access only what is necessary to demonstrate a finding, do not copy it beyond the evidence required for the report, and handle it under the data processing terms in your engagement contract. Evidence is stored encrypted and deleted at the end of the agreed retention period.
Retention
- Enquiries that do not lead to an engagement: 12 months.
- Client records and reports: for the duration of the contract plus 6 years, as required for professional liability.
- Server logs: 90 days.
Sharing
We do not sell personal data. We share it only with service providers who help us run the business (email, hosting, document storage) under contracts that restrict their use of it, or where the law requires.
Your rights
You can ask us to access, correct, delete, or restrict the use of your personal data, and to object to processing based on legitimate interests. Email info@cybervanta.tech and we will respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.
Changes
We will post any changes to this policy on this page and update the date above.