This policy explains how Cyber Defence Service Ltd (CDS, we, us) handles personal information collected through cyberdefenceservice.co.uk (the site) and through enquiries you send us. It is written in plain English for a professional audience. It does not cover data we process when delivering products and services under contract; that processing is governed by the relevant agreement with the client.

This policy explains how Cyber Defence Service Ltd (CDS, we, us) handles personal information collected through cyberdefenceservice.co.uk (the site) and through enquiries you send us. It is written in plain English for a professional audience. It does not cover data we process when delivering products and services under contract; that processing is governed by the relevant agreement with the client.

  1. Who is responsible for your information

Cyber Defence Service Ltd is the data controller for information collected through the site. We are registered in England and Wales under company number 10290462, at Greater Manchester Digital Security Hub, 2nd Floor, Heron House, 1 Lincoln Square, Manchester, M2 5LN, and with the Information Commissioner's Office under registration ZB130773. For anything relating to this policy or your information, contact contact@cyberdefenceservice.co.uk or write to the address above.

Cyber Defence Service Ltd is the data controller for information collected through the site. We are registered in England and Wales under company number 10290462, at Greater Manchester Digital Security Hub, 2nd Floor, Heron House, 1 Lincoln Square, Manchester, M2 5LN, and with the Information Commissioner's Office under registration ZB130773. For anything relating to this policy or your information, contact contact@cyberdefenceservice.co.uk or write to the address above.

  1. Information we collect

Enquiries. When you use the contact form or email us, we collect the details you choose to give: name, work email address, phone number, job title, organisation, organisation website and your message.

Correspondence. If we go on to talk, we keep the correspondence.

Technical data. Like most websites, the site's infrastructure records technical information such as IP address, browser type and pages requested. This is used for security and to keep the site working.

Cookies and analytics. Described in section 6.

We do not ask for sensitive personal information through the site, and we ask you not to send it. Given the sectors we serve, please also avoid including classified or operationally sensitive material in an enquiry; if a conversation needs a more appropriate channel, we will arrange one.

Enquiries. When you use the contact form or email us, we collect the details you choose to give: name, work email address, phone number, job title, organisation, organisation website and your message.

Correspondence. If we go on to talk, we keep the correspondence.

Technical data. Like most websites, the site's infrastructure records technical information such as IP address, browser type and pages requested. This is used for security and to keep the site working.

Cookies and analytics. Described in section 6.

We do not ask for sensitive personal information through the site, and we ask you not to send it. Given the sectors we serve, please also avoid including classified or operationally sensitive material in an enquiry; if a conversation needs a more appropriate channel, we will arrange one.

  1. How we use your information

  1. How we use your information

Personal

Information use

Legal Basis

Responding to your enquiry and any follow up

Enquiry details and correspondence

Legitimate interests (responding to contact you initiated), or steps towards a contract

Occasional relevant marketing to business contacts

Name and work contact details

Legitimate interests, with the right to opt out at any time; consent where the law requires it

Running and securing the site

Technical data

Legitimate interests (security and operation of the site)

Understanding how the site is used

Analytics data

Consent, given through the cookie banner

Meeting legal obligations

Any of the above

Legal obligation

  1. Who we share it with

  1. Who we share it with

We use carefully chosen service providers to run the site and our business: website hosting, email and business software, form handling and spam protection, and the analytics providers described in section 6. They process information on our instructions. We may also share information with our professional advisers and insurers, and with authorities or regulators where the law requires it. We do not sell personal information, and we do not share it with third parties for their own marketing.

We use carefully chosen service providers to run the site and our business: website hosting, email and business software, form handling and spam protection, and the analytics providers described in section 6. They process information on our instructions. We may also share information with our professional advisers and insurers, and with authorities or regulators where the law requires it. We do not sell personal information, and we do not share it with third parties for their own marketing.

  1. International transfers

  1. International transfers

Some of our providers process data outside the UK, including in the United States. Where that happens we rely on recognised safeguards, such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the ICO's international data transfer agreement and addendum, as appropriate to the provider.

Some of our providers process data outside the UK, including in the United States. Where that happens we rely on recognised safeguards, such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the ICO's international data transfer agreement and addendum, as appropriate to the provider.

  1. Cookies and analytics

  1. Cookies and analytics

The site uses a small number of cookies and similar technologies. Essential cookies keep the site working and are always on. With your consent, we also use Google Analytics to understand how the site is used, and Google reCAPTCHA to protect our forms from abuse; both involve Google processing technical data, including IP address, as described in Google's own privacy documentation. You can accept or decline non essential cookies through the banner shown on your first visit, and change your choice at any time using the cookie settings link in the footer.

The site uses a small number of cookies and similar technologies. Essential cookies keep the site working and are always on. With your consent, we also use Google Analytics to understand how the site is used, and Google reCAPTCHA to protect our forms from abuse; both involve Google processing technical data, including IP address, as described in Google's own privacy documentation. You can accept or decline non essential cookies through the banner shown on your first visit, and change your choice at any time using the cookie settings link in the footer.

  1. How long we keep information

  1. How long we keep information

We keep enquiries and related correspondence for up to 24 months after our last contact with you. If we enter into a business relationship, records are kept for the life of that relationship and afterwards for as long as legal, accounting and insurance requirements demand. Technical logs and analytics data are kept for shorter periods set within the relevant systems.

We keep enquiries and related correspondence for up to 24 months after our last contact with you. If we enter into a business relationship, records are kept for the life of that relationship and afterwards for as long as legal, accounting and insurance requirements demand. Technical logs and analytics data are kept for shorter periods set within the relevant systems.

  1. Keeping information secure

  1. Keeping information secure

We apply the same discipline to our own systems that we bring to client work, including access controls, encryption in transit and least privilege administration. No internet transmission is completely secure, so please use your judgement about what you include in a public web form, as set out in section 2.

We apply the same discipline to our own systems that we bring to client work, including access controls, encryption in transit and least privilege administration. No internet transmission is completely secure, so please use your judgement about what you include in a public web form, as set out in section 2.

  1. Your rights

  1. Your rights

UK data protection law gives you rights over your information, including the right to: access a copy of it; correct it; have it deleted; restrict or object to its use, including for direct marketing, which we will always stop on request; receive it in a portable format; and withdraw consent where consent is the legal basis. To use any of these rights, contact contact@cyberdefenceservice.co.uk. We may need to verify your identity, and we will respond within the statutory timescale, normally one month. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk, although we would welcome the chance to put things right directly first.

UK data protection law gives you rights over your information, including the right to: access a copy of it; correct it; have it deleted; restrict or object to its use, including for direct marketing, which we will always stop on request; receive it in a portable format; and withdraw consent where consent is the legal basis. To use any of these rights, contact contact@cyberdefenceservice.co.uk. We may need to verify your identity, and we will respond within the statutory timescale, normally one month. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk, although we would welcome the chance to put things right directly first.

  1. Children

  1. Children

The site is aimed at professionals and is not directed at children. We do not knowingly collect children's information.

The site is aimed at professionals and is not directed at children. We do not knowingly collect children's information.

  1. Automated decision making

  1. Automated decision making

We do not use information collected through the site to make automated decisions that have legal or similarly significant effects.

We do not use information collected through the site to make automated decisions that have legal or similarly significant effects.

  1. Other websites

  1. Other websites

The site links to other websites, including CDS product sites, which have their own privacy policies. This policy covers cyberdefenceservice.co.uk only.

The site links to other websites, including CDS product sites, which have their own privacy policies. This policy covers cyberdefenceservice.co.uk only.

  1. Changes to this policy

  1. Changes to this policy

We will update this policy when our practices or the law change, and the current version will always be published here with its date. This version replaces the policy dated 6 April 2022 in full.

We will update this policy when our practices or the law change, and the current version will always be published here with its date. This version replaces the policy dated 6 April 2022 in full.

Effective date: 21 August 2026. Version 1.0.

Effective date: 21 August 2026. Version 1.0.

Ready to see what’s ahead?

Talk to our team and discover how we can strengthen your security posture.

© 2026 Cyber Defence Service Ltd

NCSC For Startups Alumni
HMGCC Accelerate Alumni
Cyber Runway Scale Alumni
Cyber Essentials Plus Certified

Registered no. 10290462

VAT GB341182528. NCAGE U1SZ6. D-U-N-S® Number: 221951035

Ready to see what’s ahead?

Talk to our team and discover how we can strengthen your security posture.

© 2026 Cyber Defence Service Ltd

NCSC For Startups Alumni
HMGCC Accelerate Alumni
Cyber Runway Scale Alumni
Cyber Essentials Plus Certified

Registered no. 10290462

VAT GB341182528. NCAGE U1SZ6. D-U-N-S® Number: 221951035

Ready to see what’s ahead?

Talk to our team and discover how we can strengthen your security posture.

© 2026 Cyber Defence Service Ltd

NCSC For Startups Alumni
HMGCC Accelerate Alumni
Cyber Runway Scale Alumni
Cyber Essentials Plus Certified

Registered no. 10290462

VAT GB341182528. NCAGE U1SZ6. D-U-N-S® Number: 221951035