Cyberfort’s Privacy Notice

Privacy Notification updated:  24/02/2022

Privacy Notification

The privacy of your data is extremely important to us. We gather and process your personal information in accordance with this privacy statement and in compliance with UK Data Protection Laws and the General Data Protection Regulation (EU) 2016/679). This statement applies to Cyberfort Group Limited, Agenci Limited, and Auriga Consulting LTD and provides you with the necessary information regarding your rights and our obligations and explains how, why, and when we process your personal data.

Who We Are

In relation to data protection, we are the controller, and we are committed to complying with the UK’s Data Protection Law and the General Data Protection Regulation (GDPR) for the protection of personal data, as well as the principles of data security in the configuration of our services. The registered companies that apply to this statement are:

Cyberfort Group Limited are a company registered in England and Wales under company number 10796111. We are registered on the Information Commissioner’s Office Register registration number ZA586208.

Agenci Limited are a company registered in England and Wales under company number 04705868. We are registered on the Information Commissioner’s Office Register registration number ZA586385.

Auriga Consulting LTD are a company registered in England and Wales under company number 06875201. We are registered on the Information Commissioner’s Office Register registration number ZA586043.

The companies listed can be contacted at their registered office address Venture West Greenham Business Park, Greenham, Thatcham, England, RG19 6HX.

If you have any questions about this Privacy Notice or how we use your personal data, please contact our Data Protection Officer.

Name: Chris Scott

e-mail: [email protected]

The Information We Collect

The purpose of processing your personal information is to allow us to administer your account with us and to provide the products and services you have requested from us. We will collect, store, and use elements of Personal Data. The lawful basis for the processing of this Personal Data is on a Contractual Basis and is necessary in order to administer your account and to provide the products and services you have requested from us.

What personal data do we collect?

General Forms

  • Name
  • Last Name
  • Company Name
  • Job title
  • E-mail Address
  • Contact Number

Careers Forms

  • First Name
  • Last Name
  • Email
  • Address (town, country and postcode)
  • Phone Number
  • Other contact details
  • Covering letter
  • Resume/CV

How do we collect personal information?

The ‘Contact’ page provides a form to get in touch with us. This form is used to collect the personal data we require to contact you regarding resources, products, and services.

The ‘Careers’ page allows data subjects to apply for current roles within the group. Once you click on the ‘Apply for this job’ button a form will be presented that allows us to collect the relevant data to help us to select candidates for roles.

The ‘Partners’ page allows individuals or organisations to become a partner. Clicking on the ‘Become a partner’ button an online will present you with a form to collect information from the data subject.

Forms include a consent box that complies with the Data Protection Act 2018, GDPR, The Privacy and Electronic Communications (EC Directive) Regulations 2003.

When visiting our Website

When you visit www.resources.cyberfortgroup.com we use a third-party service called Google Analytics. This helps us collect standard internet log information and details of behaviour patterns. We do this to identify things such as the number of visitors to the various parts of the site. This information is strictly processed so that it cannot identify a person or persons. If at any time we decide to collect personal data through our web site, you will be notified of any changes to our existing policies, and we will be clear and transparent of any changes.

Contact Forms

When you visit the Cyberfort website you can contact us by completing the contact us forms. This form collects your name, email, company name, and phone number as well as any personal information you choose to enter in the message field. There are consent radio buttons on each form that lets us know how you would like to be contacted. This data submitted is directed through to Hubspot and marketing team’s email address containing the supplied information.  If your query is qualified as a legitimate enquiry, the data with be entered and stored into our CRM and passed to a representative who will contact you via the method consented to as part of the form submission. The form is also used to contact us regarding relevant whitepapers, blogs, video’s, case studies etc.

Careers Forms

The ‘Apply for this job’ button navigates data subjects to an online form which allows applicants to provide relevant information to support a job application including CVs, resumes, cover letters etc. This data is collected to help our human resources department and hiring managers suitable candidates to progress to the next stages of the recruitment process. Once the form is submitted it is stored within our HR systems to assess the suitability for a role.

Become a Partner

The ‘Become a Partner’ button navigates data subjects to an online which allows individuals or organisations to contract us if they are interested in becoming one of our partners. The data is collected and sent to Hubspot and our marketing team’s email address containing the supplied information. If your query is qualified as a legitimate enquiry, the data with be entered and stored into our CRM and passed to a representative who will contact you via the method consented to as part of the form submission.

When you click on The Cyberfort Limited (formally The Bunker) from Our story timeline

We provide visitors of our website with as much information about our products and services as well as our group companies. Cyberfort Limited is a managed service provider who secures and host data in ex-military Nuclear Bunkers. They offer a range of services that complement the Cyberfort vision. When you click on The Bunker “Find out more” you will be redirected to Cyberfort Limited’s website

Click the link below to find out more about Cyberfort Limited’s privacy policy; https://www.thebunker.net/privacy-policy

When you click on Arcturus from Our story timeline

We provide visitors to our website with as much information about our products and services as well as our group companies. Arcturus is a cybersecurity consultancy who offer a range of products and service that complements the Cyberfort vision. When you click on Arcturus “Find out more” you will be redirected to Arcturus website www.arcturussecurity.com

Click the link below to find out more about Arcturus privacy policy; https://www.arcturussecurity.com/privacy-policy/

Social media

Our website provides the ability to link to social media sites such as LinkedIn, Facebook, Tik Tok, Youtube, Twitter, and Instagram. Through these services, we provide information to keep our subscribers, visitors, and followers up to date on our activities, products, and services. If you do choose to subscribe to any of these services your personal information will be subjected to these service providers’ privacy policy.

Click the link below to find out more about Twitters privacy policy;

https://twitter.com/en/privacy,

Click the link below to find out more about Facebook’s privacy policy;

https://en-gb.facebook.com/policy.php,

Click the link below to find out more about Linkedin’s privacy policy;

https://www.linkedin.com/legal/privacy-policy,

Click the link below to find out more about Instagram’s privacy policy;

https://help.instagram.com/519522125107875/

Click the link below to find out more about YouTube’s privacy policy;

https://policies.google.com/privacy?hl=en-GB

Click the link below to find out more about Tik Tok’s privacy policy;

https://www.tiktok.com/legal/privacy-policy-eea?lang=en

Use of Cookies by Cyberfort

Please refer to the separate Cookie Policy https://resources.cyberfortgroup.com/cookie-policy that will detail how Cyberfort uses cookies.

How We Use Your Personal Data

Cyberfort takes your privacy very seriously and will never disclose, share, or sell your data without your consent; unless we are required to do so by law. We only retain your data for as long as is necessary and for the purpose(s) specified in this notice. Where you have consented to us providing you with promotional offers and marketing, you are free to withdraw this consent at any time. We will also process your details through our internal systems to enable us to send you relevant communications, about a matter which we believe, are in your interest to know about. As a data subject, your interests may include one or more products offered within the group. Where this is the case this data will be shared within our four pillars to ensure you receive products and services that are relevant and suited to you. The lawful basis for processing this information internally will be Legitimate Interests. Any email communications we send will comply with the Privacy and E-communications Regulation (PECR). If you have chosen to opt-in to our direct marketing communications, we will use your information to tell you about products and services from our approved partners but again this is with the intention of helping you remain more secure.

The purposes and reasons for processing your personal data are detailed below:

We will occasionally send you marketing information where we have assessed that it is beneficial to you as a customer and in our interests. Such information will be non-intrusive and is processed on the grounds of legitimate interests

We collect your data which is used by our sales representatives to contact you to discuss how our products and services may support your business

We collect your data which is used by human resources or hiring managers to be able to assess your suitability for a role.

Your Rights

We are committed to working with each data subject and understand our responsibilities regarding the data we process. We believe in being fair and transparent with the data we hold and follow the principles of the General Data Protection Regulation (GDPR) to ensure the safety of your data. As a data subject, you have several rights available to you that you may not be aware of.

Your rights include:

Right of Access by the Data Subject

Right to rectification

Right to erasure (‘right to be forgotten’)

Right to restriction of processing

Notification obligation regarding rectification or erasure of personal data or restriction of processing

Right to data portability

Right to object (to automated individual decision-making, including profiling)

You have the right to access any personal information that Cyberfort processes about you and to request information about:

What personal data we hold about you

The purposes of the processing

The categories of personal data concerned

The recipients to whom the personal data has/will be disclosed

How long we intend to store your personal data for

If we did not collect the data directly from you, information about the source

If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to correct it as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.

You also have the right to request the erasure of your personal data or to restrict processing (where applicable) in accordance with the data protection laws; as well as to object to any direct marketing from us; to exercise your data portability rights, and to be informed about any automated decision-making we may use.

You have the right to withdraw your Consent with us to collect, process, and store your data at any time. If you wish to withdraw your consent, then please confirm this in writing to our Data Protection Officer. Each mail you receive from our Marketing department will give you an option to opt-out of any other future promotions.

If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the request; this is to ensure that your data is protected and kept secure. There will be no charge for this service. If, however, you log multiple requests, or the request is seen as excessive in nature, then there may be a nominal charge which we will request to cover the administration of your request.

Sharing and Disclosing Your Personal Information

We do not share or disclose any of your personal information without your consent, other than for the purposes specified in this notice or where there is a legal requirement. Cyberfort will share information within the group where products and services meet with the legitimate interests of data subjects. Cyberfort uses Microsoft Dynamics, Hubspot, Eventbright and First Base to provide the services and business functions in the below paragraphs; however, all processors acting on our behalf only process your data in accordance with instructions from us and comply fully with this privacy notice, the data protection laws, and any other appropriate confidentiality and security measures.

Microsoft Dynamics

Leads, enquires as well as prospects and existing customers’ information are tracked and monitored through this Cloud-based SaaS solution. Our Microsoft Dynamics solution is hosted with the UK and subjected to GDPR and UK data protection laws. Cyberfort has a limited number of user licenses which are based on the least privileges and assigned to the Sales and Marketing functions and some senior managers within the business. For more information about Microsoft Dynamics, please read their Privacy Notice at: https://privacy.microsoft.com/en-gb/privacystatement

HubSpot

Collects consolidates and organises website forms into customer relationship management (CRM). This information is sent to Cyberfort’ s Marketing team who qualifies the data and input into Cyberfort’s CRM database. For more information about Hubspot, please read their Privacy Notice at:https://legal.hubspot.com/p…

Eventbrite

Cyberfort use Eventbrite which is an online events manager that allows data subjects to attend Cyberfort events. Delegate’s information is captured and passed to Cyberfort Marketing team in order to capture the people who attending and the number of attendees. For more information about Eventbrite, please read their Privacy Notice at:https://www.eventbrite.com/…

Safeguarding Measures

As part of Cyberfort’s commitment to your data privacy we take every reasonable measure and precaution to protect and secure your personal data. We work hard to protect you and your information from unauthorised access, alteration, disclosure, or destruction and have several layers of security measures in place.

PeopleHR

We use PeopleHR which is a SaaS based Human Resources Management system. They act in the capacity of a processor on our behalf. A web form is used to capture your details and allows you to upload your C.V, Cover letter, tests (or example work).  The systems are hosted within the UK and subject to UK data protection laws.  Access to the system is via multifactor authentication.

For more information about PeopleHR, please read their Privacy Notice at https://www.peoplehr.com/en-gb/privacy-policy/

Transfers Outside of the EU

Personal data in the European Union is protected by the General Data Protection Regulation (GDPR) but some other countries may not necessarily have the same high standard of protection for your personal data. Cyberfort uses Microsoft Dynamics to capture information as outlined in the Microsoft Dynamics section. All other Cyberfort’s data hosted on Cyberfort systems is held within the UK.

Consequences of Not Providing Your Data

You are not obligated to provide your personal information to Cyberfort however, as this information is required for us to provide you with information about our services, we will not be able to offer some or all our services without it.

How Long We Keep Your Data

We only ever retain personal information for as long as is necessary and we have strict review and retention policies in place to meet these obligations. The information we collect and where you have consented to us using your details are for direct Marketing and Sales purposes. We will keep such data until you notify us otherwise and/or withdraw your consent.

Right to Complain

If you have a complaint about any aspect of data protection or if you feel your privacy has been breached by us, we would like to hear from you. To help us investigate and resolve your concerns as quickly as possible, please contact our Data Protection Officer at:

Venture West

Greenham Business Park

Greenham

Thatcham

England

RG19 6HX

[email protected]

If you are unhappy with the final response you have received from Cyberfort, you have the right to complain to the Supervisory Authority, the Information Commissioner’s Office (ICO) within three months of your last meaningful contact with us. You can call the ICO on 0303 123 1113 or by visiting their website: https://ico.org.uk/.

Links to other Third-Party websites

Please note that this Privacy Notice only applies to the companies listed in this statement and we are not responsible for and have no control over, information that is submitted to or collected by third parties, such as those where our website may provide links and banner advertisements to third-party sites. Since we do not control these websites, you are responsible for reviewing and abiding by the Privacy Policies of those third-party sites to ensure they comply with the applicable Data Protection Regulations.

Security Precautions in Place to Protect the Loss, Misuse or Alteration of your Information

Non-sensitive details (your email address etc.) are transmitted over the Internet, and this can never be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk. Once we receive your information, we make our best effort to ensure its security on our system.

Changes to the Privacy Policy

Due to any further development of our website, changes to Government Regulations, or the implementation of new technologies, this Policy will be reviewed and may change, from time to time. Cyberfort reserves the right to change this Data Protection information at any time with effect for the future. The revised Policy will be posted to this page so that you are always aware of the information we collect, how we use it, and under what circumstances we disclose it. We, therefore, recommend you read the current Data Protection information again from time to time.