Privacy Policy

Privacy information for visitors to the Be Secure Cyber website.

Background

Be Secure Cyber Ltd understands that your privacy is important and that you care about how your personal data is used. We respect and value the privacy of everyone who visits this website, securecyber.co.uk (“Our Site”), and only collect and use personal data as described in this Privacy Policy. Any personal data we collect will only be used as permitted by law.

Please read this Privacy Policy carefully and make sure that you understand it.

Information about us

Our Site is owned and operated by Be Secure Cyber Ltd, a limited company registered in Scotland under company number SC687062.

Registered address: Clyde Offices, 48 West George Street, Glasgow, G2 1BP.

What this policy covers

This Privacy Policy applies only to your use of Our Site. Our Site may contain links to other websites. Please note that we have no control over how your data is collected, stored or used by other websites. We advise you to check the privacy policies of any such websites before providing data to them.

What is personal data?

Personal data is defined by the UK GDPR and the Data Protection Act 2018 as any information relating to an identifiable person who can be directly or indirectly identified by reference to an identifier.

In simpler terms, personal data is any information about you that enables you to be identified. It includes obvious information such as your name and contact details, and less obvious information such as identification numbers, electronic location data and other online identifiers.

Your rights

Under data protection legislation, you have the following rights, which we will always work to uphold:

  • the right to be informed about our collection and use of your personal data;
  • the right to access the personal data we hold about you;
  • the right to have your personal data rectified if it is inaccurate or incomplete;
  • the right to ask us to delete or otherwise dispose of personal data that we hold;
  • the right to restrict the processing of your personal data;
  • the right to object to us using your personal data for a particular purpose;
  • the right to withdraw consent, where we rely on consent as the lawful basis for processing;
  • the right to data portability in certain circumstances;
  • rights relating to automated decision-making and profiling. We do not use your personal data in this way.

For more information about our use of your personal data or exercising your rights, please contact us using the details below.

It is important that your personal data is kept accurate and up to date. If any of the personal data we hold about you changes, please keep us informed for as long as we hold that data.

Further information about your rights can also be obtained from the Information Commissioner’s Office or your local Citizens Advice Bureau.

If you have any cause for complaint about our use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office. We would welcome the opportunity to resolve your concerns ourselves first, so please contact us using the details below.

What personal data we collect and how

Subject to the following, we do not collect personal data directly from you through forms on Our Site.

Our Site collects certain information automatically, including your IP address, the type of browser you are using, and certain other technical information about your computer or device, such as your operating system type or version and display resolution.

If you send us an email, we may collect your name, email address and any other information that you choose to provide. For the purposes of data protection legislation, Be Secure Cyber Ltd is the data controller responsible for such personal data.

The lawful basis that allows us to use technical information is Article 6(1)(f) of the UK GDPR, which allows processing when it is necessary for the purposes of our legitimate interests. In this case, those interests are the proper operation and functionality of Our Site.

If you contact us by email, our lawful basis for using the personal data you provide is to respond to your enquiry and communicate with you about the matter you have raised.

How we use personal data

Where we collect personal data, it will be processed and stored securely, for no longer than is necessary in light of the reason it was first collected. We will comply with our obligations and safeguard your rights under data protection legislation.

If you contact us and we obtain personal details from your email, we may use them to respond to that email. The technical data referred to above is necessary for the operation of Our Site and will not normally be used to personally identify you.

Emails containing personal data will be deleted no later than 12 months after the subject of your email has been addressed, unless there is a legitimate reason to retain them for longer.

We will not share personal data with third parties for purposes other than storage on email or web hosting services, except where described below or where required by law.

How and where we store data

We may store some personal data in the UK. This means that it will be protected under UK data protection legislation.

We may also store some personal data within the European Economic Area. Transfers of personal data to the EEA from the UK are permitted without additional safeguards.

To protect personal data, we take measures including:

  • limiting access to personal data to those with a legitimate need to know;
  • ensuring that relevant parties are subject to duties of confidentiality;
  • maintaining procedures for dealing with data breaches, including notifying you and/or the Information Commissioner’s Office where legally required.

Sharing personal data

We will not share personal data with third parties for purposes other than those described in this policy, subject to the following exceptions.

If we sell, transfer or merge parts of our business or assets, personal data may be transferred to a third party. Any new owner of the business may continue to use personal data in the same way that we have used it, as specified in this Privacy Policy.

In some limited circumstances, we may be legally required to share personal data if we are involved in legal proceedings, complying with legal obligations, complying with a court order, or following the instructions of a government authority.

Accessing your personal data

If you want to know what personal data we hold about you, you can ask us for details and for a copy of that data where any such data is held. This is known as a subject access request.

All subject access requests should be made in writing and sent to the email or postal address below.

There is not normally any charge for a subject access request. If a request is manifestly unfounded or excessive, for example if repetitive requests are made, a fee may be charged to cover our administrative costs.

We will respond to your subject access request within one month of receiving it. In some cases, particularly if your request is complex, more time may be required up to a maximum of three months from the date we receive the request. You will be kept informed of our progress.

Contacting us about data protection

To contact us about anything to do with your personal data and data protection, including making a subject access request, please use the following details:

Changes to this Privacy Policy

We may change this Privacy Policy from time to time. This may be necessary if the law changes or if we change our business in a way that affects personal data protection.

Any changes will be posted on Our Site. We recommend that you check this page regularly to keep up to date.

This Privacy Policy was last updated June 2025.