Privacy Policy

1. Who we are

Cyber Crime Guards Ltd ("we", "us", "our") is the data controller responsible for your personal data. We are a private limited company registered in England & Wales under company number 17245515.

This policy explains how we handle personal data in connection with our website and our cyber-security services (security monitoring, managed antivirus, infrastructure protection, penetration testing, training and incident response). Where we handle personal data within your systems while delivering those services, we normally act as your processor under our Terms of Service; this policy covers the data for which we are the controller.

2. Data we collect

We collect and process the following categories of personal data:

• Contact & enquiry data — name, email address, company name and the content of messages you send us through our contact form or by email.
• Account & customer data — the information needed to provide services to you, including billing details and, where required, identity-verification (KYC) information.
• Technical data — IP address, browser type, device information and similar data collected automatically when you use our website or services, primarily for security and to keep our systems running.
• Communications — records of your correspondence with us for support, compliance and quality purposes.

3. How and why we use your data

We use personal data to:

• respond to enquiries and provide quotes;
• set up, deliver, support and bill for our services;
• verify identity and prevent fraud, abuse and unlawful use of our network;
• secure, monitor and improve our systems and services;
• meet legal, regulatory and accounting obligations.

4. Legal bases for processing

Under the UK GDPR we rely on the following legal bases:

• Consent — when you submit an enquiry through our contact form.
• Contract — where processing is necessary to provide services you have requested.
• Legal obligation — to comply with law, including tax, accounting and lawful requests from authorities.
• Legitimate interests — to secure our network, prevent abuse and run our business, provided these interests are not overridden by your rights.

5. Sharing your data

We do not sell your personal data. We share it only where necessary with:

• technology and service providers who help us deliver our services (for example security-tooling and antivirus vendors, cloud providers and payment processors), acting as our processors under contract;
• professional advisers such as accountants and lawyers;
• authorities, regulators or law-enforcement bodies where we are legally required to do so, or to investigate abuse.

6. International transfers

Some of our providers may process data outside the UK or European Economic Area. Where they do, we ensure an appropriate safeguard is in place — such as an adequacy decision or the International Data Transfer Agreement / Standard Contractual Clauses — so your data remains protected.

7. How long we keep data

We keep personal data only for as long as necessary for the purposes described above, or as required by law (for example, accounting records are generally retained for six years). When data is no longer needed, we securely delete or anonymise it.

8. Your rights

Subject to conditions, you have the right to: access your data; request correction or erasure; restrict or object to processing; data portability; and to withdraw consent at any time. To exercise any of these, contact us using the details below.

You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you are unhappy with how we handle your data.

9. How we protect your data

We apply appropriate technical and organisational measures — including encryption in transit, access controls and continuous monitoring — to protect personal data against unauthorised access, loss or misuse. No method of transmission is entirely secure, but we work to industry standards to keep your data safe.

10. Cookies

Our website uses only cookies that are strictly necessary for it to function. We do not use advertising or non-essential tracking cookies by default. See our Cookie Policy for details.

11. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it was last revised. Material changes will be reflected on this page.

12. Contact us

For any privacy question or to exercise your rights, contact us through the contact form on our website and we will respond within a reasonable time.