Last updated: 1 October 2026
Who we are
Eurologix Security Holding Group Limited, trading as UK Cyber-Safe, is responsible for the personal information collected through cybersafe-uk.com.
You can reach us at privacy@cybersafe-uk.com or +44 161 391 1889, or write to us at 1 St Peter’s Square, Manchester M2 3AE.
Our Chief Privacy Officer is accountable for our compliance with this notice and can be reached at privacy@cybersafe-uk.com.
What we collect, and when
When you contact us through a form on this site, we collect the name, organisation, email address and telephone number you give us, together with anything you choose to tell us about your organisation and your enquiry.
If you message us on WhatsApp (+44 7466 538812), we receive your phone number, your WhatsApp profile name and whatever you send. WhatsApp is run by Meta, which processes the conversation under its own terms and privacy policy. We use it only to reply to you and to arrange a call, and we keep it for the same period as other enquiries. Please do not send personal information about other people, documents or security details by WhatsApp; we will move to a secure channel once we have spoken.
When you simply browse the site, our hosting provider records standard server information including your IP address, browser type and the pages you request. We use this to keep the site available and to protect it against attack.
We run Google Analytics on this site so that we can see which pages are actually used. It is configured with Google Consent Mode: analytics storage and all advertising storage are set to denied until you accept them in the cookie banner, and IP addresses are anonymised. We run no advertising trackers, we do not process payments on this site, and you cannot create an account on it. Our hosting provider used to run its own visitor-statistics tracking on every page, before you had made any choice. We have switched that off.
Why we collect it
We use what you give us to answer your enquiry, to prepare a proposal if you ask for one, and to deliver our services if you become a client. We use server and security records to keep the site secure. We do not use your information for anything else, and we do not sell it.
Your consent
We ask for your information only when you choose to contact us, and we tell you what we will do with it at the point you give it to us. You can withdraw your consent at any time by emailing privacy@cybersafe-uk.com. We will then stop using your information and delete it, unless we are required to keep it.
Who else sees it
We use a small number of service providers to run this site: GoDaddy, our hosting provider; Google, which provides our analytics only if you accept it; and Stripe, which processes payments when you buy a document from us. The fonts the site uses, the cookie consent tool and the profile images on our briefings are all served from our own server, so reading a page sends nothing to anyone else. They handle your information only in order to provide those services to us.
Payments
When you buy one of our documents, the payment is taken on Stripe’s own checkout pages, not on this website. We never see and never hold your card details. Stripe tells us that a payment succeeded, what was bought, the amount and the email address you gave, so that we can send you the files and keep a record of the licence. Stripe’s handling of your information is governed by its own privacy policy, which you can read at stripe.com/en-gb/privacy.
Where your information is held
This site is hosted by GoDaddy in a data centre in the United States, so anything you send us through a form on the site passes through, and may be stored on, a server there before it reaches us in Manchester. That transfer is covered by the UK–US Data Bridge: GoDaddy is certified under the EU–US Data Privacy Framework and its UK Extension, which the UK Government has recognised as providing adequate protection, so no further safeguard is required. We keep this under review, and if the Data Bridge were withdrawn or GoDaddy’s certification lapsed we would either put the ICO’s International Data Transfer Agreement in place or move the site to a European data centre, and update this notice either way. Where personal data travels outside the UK for any other reason — for example to a supplier we have told you about below — we rely on UK adequacy regulations where they cover the destination and, where they do not, on the International Data Transfer Agreement together with a transfer risk assessment.
Three of the services the site uses process information in the United States: GoDaddy, which hosts the site; Google, which provides analytics if you accept it; and Stripe, which processes payments.
This means your information may be accessible to courts, law enforcement and government authorities in the United States under the laws of that country. If you would rather your information were not handled this way, please telephone us instead of using the forms.
How long we keep it
If you send us a CV or an expression of interest in working with us, we keep it for twelve months and then delete it. You can ask us to keep it for longer, or to delete it sooner, and we act on either request on the day we receive it. We do not circulate it outside the practice and we do not add you to a mailing list.
We keep enquiries that do not lead to work for 24 months, and then delete them.
We keep records relating to clients — assessments, reports and related correspondence — for 7 years after our work for them ends. This lets us meet UK record-keeping requirements and answer questions about assessments we have carried out.
Server and security logs are kept for 90 days.
Where we have used your information to make a decision about you, we keep it for at least one year after that decision so that you have the chance to ask us for access to it.
How we protect it
The site runs over an encrypted connection and sits behind a web application firewall. Access to the systems holding your information is limited to the people who need it. No system is perfectly secure, but we take this seriously — it is what we do for a living.
Your rights
You can ask us what personal information we hold about you and receive a copy of it. You can ask us to correct anything that is wrong. You can withdraw your consent and ask us to delete what we hold. Write to privacy@cybersafe-uk.com and we will respond within 30 days.
If you are not satisfied with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk. You can also raise it with us first, and we would rather you did.
If you are in the EU or the EEA
Where we offer services to people in the EU or the EEA, the EU GDPR applies alongside the UK GDPR. We apply the same rights to anyone in the EU or the EEA who contacts us.
Our data protection contact for the purposes of that law can be reached at privacy@cybersafe-uk.com.
As well as the rights set out above, you can ask us for a copy of the personal data you gave us in a structured, commonly used, machine-readable format, and to have it sent to another controller where that is technically feasible. You can ask us to erase it, and where we have made it public we will take reasonable steps to tell others processing it that you have asked for erasure.
We do not make decisions about you based exclusively on automated processing.
Where we transfer personal data out of the EEA, we rely on an adequacy decision where one covers the destination, and on Standard Contractual Clauses supported by a transfer impact assessment where one does not. We complete that assessment before anything moves.
If you are not satisfied with how we have handled your information, you can complain to the supervisory authority in the EU or EEA country where you live, where you work, or where you think the problem happened. The European Data Protection Board publishes the list of national authorities at edpb.europa.eu. You can also raise it with us first, and we would rather you did.
Changes to this notice
If we change how we handle personal information, we will update this page and change the date at the top.