Privacy Policy
Privacy Policy
This policy explains how Cyber Defence Service Ltd (CDS, we, us) handles personal information collected through cyberdefenceservice.co.uk (the site) and through enquiries you send us. It is written in plain English for a professional audience. It does not cover data we process when delivering products and services under contract; that processing is governed by the relevant agreement with the client.
This policy explains how Cyber Defence Service Ltd (CDS, we, us) handles personal information collected through cyberdefenceservice.co.uk (the site) and through enquiries you send us. It is written in plain English for a professional audience. It does not cover data we process when delivering products and services under contract; that processing is governed by the relevant agreement with the client.
Who is responsible for your information
Cyber Defence Service Ltd is the data controller for information collected through the site. We are registered in England and Wales under company number 10290462, at Greater Manchester Digital Security Hub, 2nd Floor, Heron House, 1 Lincoln Square, Manchester, M2 5LN, and with the Information Commissioner's Office under registration ZB130773. For anything relating to this policy or your information, contact contact@cyberdefenceservice.co.uk or write to the address above.
Cyber Defence Service Ltd is the data controller for information collected through the site. We are registered in England and Wales under company number 10290462, at Greater Manchester Digital Security Hub, 2nd Floor, Heron House, 1 Lincoln Square, Manchester, M2 5LN, and with the Information Commissioner's Office under registration ZB130773. For anything relating to this policy or your information, contact contact@cyberdefenceservice.co.uk or write to the address above.
Information we collect
Enquiries. When you use the contact form or email us, we collect the details you choose to give: name, work email address, phone number, job title, organisation, organisation website and your message.
Correspondence. If we go on to talk, we keep the correspondence.
Technical data. Like most websites, the site's infrastructure records technical information such as IP address, browser type and pages requested. This is used for security and to keep the site working.
Cookies and analytics. Described in section 6.
We do not ask for sensitive personal information through the site, and we ask you not to send it. Given the sectors we serve, please also avoid including classified or operationally sensitive material in an enquiry; if a conversation needs a more appropriate channel, we will arrange one.
Enquiries. When you use the contact form or email us, we collect the details you choose to give: name, work email address, phone number, job title, organisation, organisation website and your message.
Correspondence. If we go on to talk, we keep the correspondence.
Technical data. Like most websites, the site's infrastructure records technical information such as IP address, browser type and pages requested. This is used for security and to keep the site working.
Cookies and analytics. Described in section 6.
We do not ask for sensitive personal information through the site, and we ask you not to send it. Given the sectors we serve, please also avoid including classified or operationally sensitive material in an enquiry; if a conversation needs a more appropriate channel, we will arrange one.
How we use your information
How we use your information
Personal
Information use
Legal Basis
Responding to your enquiry and any follow up
Enquiry details and correspondence
Legitimate interests (responding to contact you initiated), or steps towards a contract
Occasional relevant marketing to business contacts
Name and work contact details
Legitimate interests, with the right to opt out at any time; consent where the law requires it
Running and securing the site
Technical data
Legitimate interests (security and operation of the site)
Understanding how the site is used
Analytics data
Consent, given through the cookie banner
Meeting legal obligations
Any of the above
Legal obligation
Who we share it with
Who we share it with
We use carefully chosen service providers to run the site and our business: website hosting, email and business software, form handling and spam protection, and the analytics providers described in section 6. They process information on our instructions. We may also share information with our professional advisers and insurers, and with authorities or regulators where the law requires it. We do not sell personal information, and we do not share it with third parties for their own marketing.
We use carefully chosen service providers to run the site and our business: website hosting, email and business software, form handling and spam protection, and the analytics providers described in section 6. They process information on our instructions. We may also share information with our professional advisers and insurers, and with authorities or regulators where the law requires it. We do not sell personal information, and we do not share it with third parties for their own marketing.
International transfers
International transfers
Some of our providers process data outside the UK, including in the United States. Where that happens we rely on recognised safeguards, such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the ICO's international data transfer agreement and addendum, as appropriate to the provider.
Some of our providers process data outside the UK, including in the United States. Where that happens we rely on recognised safeguards, such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the ICO's international data transfer agreement and addendum, as appropriate to the provider.
Cookies and analytics
Cookies and analytics
The site uses a small number of cookies and similar technologies. Essential cookies keep the site working and are always on. With your consent, we also use Google Analytics to understand how the site is used, and Google reCAPTCHA to protect our forms from abuse; both involve Google processing technical data, including IP address, as described in Google's own privacy documentation. You can accept or decline non essential cookies through the banner shown on your first visit, and change your choice at any time using the cookie settings link in the footer.
The site uses a small number of cookies and similar technologies. Essential cookies keep the site working and are always on. With your consent, we also use Google Analytics to understand how the site is used, and Google reCAPTCHA to protect our forms from abuse; both involve Google processing technical data, including IP address, as described in Google's own privacy documentation. You can accept or decline non essential cookies through the banner shown on your first visit, and change your choice at any time using the cookie settings link in the footer.
How long we keep information
How long we keep information
We keep enquiries and related correspondence for up to 24 months after our last contact with you. If we enter into a business relationship, records are kept for the life of that relationship and afterwards for as long as legal, accounting and insurance requirements demand. Technical logs and analytics data are kept for shorter periods set within the relevant systems.
We keep enquiries and related correspondence for up to 24 months after our last contact with you. If we enter into a business relationship, records are kept for the life of that relationship and afterwards for as long as legal, accounting and insurance requirements demand. Technical logs and analytics data are kept for shorter periods set within the relevant systems.
Keeping information secure
Keeping information secure
We apply the same discipline to our own systems that we bring to client work, including access controls, encryption in transit and least privilege administration. No internet transmission is completely secure, so please use your judgement about what you include in a public web form, as set out in section 2.
We apply the same discipline to our own systems that we bring to client work, including access controls, encryption in transit and least privilege administration. No internet transmission is completely secure, so please use your judgement about what you include in a public web form, as set out in section 2.
Your rights
Your rights
UK data protection law gives you rights over your information, including the right to: access a copy of it; correct it; have it deleted; restrict or object to its use, including for direct marketing, which we will always stop on request; receive it in a portable format; and withdraw consent where consent is the legal basis. To use any of these rights, contact contact@cyberdefenceservice.co.uk. We may need to verify your identity, and we will respond within the statutory timescale, normally one month. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk, although we would welcome the chance to put things right directly first.
UK data protection law gives you rights over your information, including the right to: access a copy of it; correct it; have it deleted; restrict or object to its use, including for direct marketing, which we will always stop on request; receive it in a portable format; and withdraw consent where consent is the legal basis. To use any of these rights, contact contact@cyberdefenceservice.co.uk. We may need to verify your identity, and we will respond within the statutory timescale, normally one month. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk, although we would welcome the chance to put things right directly first.
Children
Children
The site is aimed at professionals and is not directed at children. We do not knowingly collect children's information.
The site is aimed at professionals and is not directed at children. We do not knowingly collect children's information.
Automated decision making
Automated decision making
We do not use information collected through the site to make automated decisions that have legal or similarly significant effects.
We do not use information collected through the site to make automated decisions that have legal or similarly significant effects.
Other websites
Other websites
The site links to other websites, including CDS product sites, which have their own privacy policies. This policy covers cyberdefenceservice.co.uk only.
The site links to other websites, including CDS product sites, which have their own privacy policies. This policy covers cyberdefenceservice.co.uk only.
Changes to this policy
Changes to this policy
We will update this policy when our practices or the law change, and the current version will always be published here with its date. This version replaces the policy dated 6 April 2022 in full.
We will update this policy when our practices or the law change, and the current version will always be published here with its date. This version replaces the policy dated 6 April 2022 in full.
Effective date: 21 August 2026. Version 1.0.
Effective date: 21 August 2026. Version 1.0.
Ready to see what’s ahead?
Talk to our team and discover how we can strengthen your security posture.
Contact
Copy component
Copied
contact@cyberdefenceservice.co.uk
Copy component
Copied
+44 (0)161 4646204
Registered no. 10290462
VAT GB341182528. NCAGE U1SZ6. D-U-N-S® Number: 221951035
Ready to see what’s ahead?
Talk to our team and discover how we can strengthen your security posture.
Contact
Copy component
Copied
contact@cyberdefenceservice.co.uk
Copy component
Copied
+44 (0)161 4646204
Registered no. 10290462
VAT GB341182528. NCAGE U1SZ6. D-U-N-S® Number: 221951035
Ready to see what’s ahead?
Talk to our team and discover how we can strengthen your security posture.
Contact
Copy component
Copied
contact@cyberdefenceservice.co.uk
Copy component
Copied
+44 (0)161 4646204
Registered no. 10290462
VAT GB341182528. NCAGE U1SZ6. D-U-N-S® Number: 221951035



