Privacy Policy

How we use and protect your data (our Privacy Notice)

Our website and marketing are operated by Cyber Security Associates Ltd registered in England and Wales with company number 10124305 and whose registered office address is at 5 Hatfields, London, England, SE1 9PG. At Cyber Security Associates Ltd we are committed to protecting and preserving the privacy of our visitors when visiting our site or communicating electronically with us.

This Privacy Notice explains when and why we collect personal information about people who visit our website, how we use it, the conditions under which we may disclose it to others and how we keep it secure. Whilst we will keep all of your personal information confidential, we reserve the right to disclose this information in the circumstances as set out within this Privacy Notice. We confirm that we will keep the information on a secure server and that we will comply fully with all applicable UK Data Protection legislation and regulations always.

We may change this Privacy Notice from time to time so please check this page occasionally to ensure that you're happy with any changes. By using our website, you're agreeing to be bound by this Privacy Notice.

Any questions regarding this Privacy Notice and our privacy practices should be sent by email to the Cyber Security Associates Ltd Data Controller (hello@csa.limited) or by writing to Cyber Security Associates Ltd, 5 Hatfields, London, England, SE1 9PG.

Who are we?

We are Cyber Security Associates Ltd, a privately owned Cyber Security Company.

What is personal data?

Personal data is defined by the General Data Protection Regulation (EU Regulation 2016/679) (the “GDPR”) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’.

Personal data is, in simpler terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers (such as your IP address).

The personal data that we use for our own purposes as a data controller is set out below.

Use of your information

We use personal data about you for various purposes connected with our Site and our Services as described below. In order to use your information we must have a legal basis for doing so. The legal basis that we rely upon is explained further below. We will only use your information where it is necessary:

• to fulfil our contract for Services with you (or the customer whom you represent);
• to comply with a legal obligation to which we are subject; or
• for our legitimate business interests that are not overridden by your interests, rights and freedoms.

Where none of the above applies, we will request your consent (which we will ask for before we process your information).

How do we collect information from you?

We obtain information about you when you use our website, for example, when you contact us about services, if you directly give us any information via forms and if you make any purchases. In addition, we will collect information about you when purchasing our cyber services (eg elearning courses).

What type of information is collected from you?

In running and operating the business, we may collect and process certain data and information relating to you and your use of this site. Your privacy is important to us and we confirm that we will never release your personal details to any third party for their mailing or marketing purposes.

The data that we collect is detailed below:

• Information you provide to report a problem with the site.
• Details of visits to our website and the pages and resources that are accessed, including but not limited to, traffic data, location data and other communication data that may assist us in understanding how visitors use the website. This may also include the resources that you access, and information about where you are on the internet including the domain type, IP address and URL that you came from. This information is collected and used for our internal research purposes and to improve our customer service.
• The personal information we collect might include your name, address, email address, IP address, and information regarding what pages are accessed and when.
• Information you provide to us by sending us a message through our website and information provided to us when you communicate with us electronically for any reason. If you contact us, we may keep a record of your email and other correspondence.
• Information that you provide us as a result of filling in forms on our website, such as registering for information or making a purchase.

IP addresses

We may collect information about your computer, including but not limited to (where available), your IP address, operating system and browser type for administration purposes and to produce internal reports. This is statistical data relating to a web user's browsing actions and patterns and does not specifically identify you as an individual.

How is your information used?

• to ensure that the content on the site is presented in the most efficient way for you and the computer that you are using;
• to enable you to participate in interactive features of the site;
• to provide you with information relating to our website, product or our services that you request from us;
• to provide you with information on other products that we feel may be of interest to you in line with those you have previously expressed an interest in via our website;
• to meet our obligations arising from any contracts entered into by you and us;
• to seek your views or comments on the services we provide;
• to notify you about any changes to our website, including improvements, and service or product changes;
• for our internal purposes including statistical or survey purposes, quality control, site performance and evaluation in order to improve our website;
• to administer this website; and " if you consent, to notify you of products or special offers that may be of interest to you;
• to update our direct partners to help consolidate what other services may be of interest to you.

How do we store your information?

We take the security of your information very seriously and have put physical, technical, operational and administrative strategies, controls and measures in place to help protect your personal information from unauthorised access, use or disclosure as required by law and in accordance with accepted good industry practice. Access to personal data is always restricted to our employees for whom it is necessary to have such access. We will always keep these under review to make sure that the measures we have implemented remain appropriate.

We do not transfer your personal data to any countries or International Organisations outside of the European Union. However, your personal data may be processed outside the EU by one of our service providers.

Where we process your personal data outside of the EU, we will ensure that your personal data is protected by implementing appropriate safeguards, such as a European Commission adequacy decision, the EU-US Privacy Shield Certification or the EU Commission approved Standard Contractual Clauses. If you would like more information about any of the data transfer safeguards we implement you can get in touch with us using the details provided in the section Contact Us section.

How long do we keep hold of your data?

We retain processed personal data for as long as is considered necessary for the purpose for which it was collected (including as required by applicable law or regulation). In the absence of specific legal, regulatory or contractual requirements, our baseline retention period for your personal data and other documentary evidence is 7 years.

Who has access to your information?

Only Cyber Security Associates Ltd and its core partners will have access to your information. We will not sell or rent your information to third parties. We will not share your information with third parties for marketing purposes.

Automated decision making and profiling

We do not make any decisions in relation to your personal data, solely by automated means without any human involvement. Nor do we conduct any automated processing of personal data to evaluate certain things about you.

How do you contact us about your data?

If you have any questions, would like to exercise any of your rights in relation to your information or need further information about our privacy practices, please contact our , Data Controller (hello@csa.limited),telephone +44 (0)300 3034691 or write to us at: Cyber Security Associates Ltd, 5 Hatfields, London, England, SE1 9PG and we will process your request within 30 days.

Your rights

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

The accuracy of your information is important to us. If you change email address, or any of the other information we hold is inaccurate or out of date, please email the Data Controller (hello@csa.limited), or write to us at: Cyber Security Associates Ltd, 5 Hatfields, London, England, SE1 9PG. Alternatively, you can telephone +44 (0)300 3034691.

Further information about your rights can also be obtained from the Information Commissioner’s Office or your local Citizens Advice Bureau. If you have any cause for complaint about our use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office. You can contact the Information Commissioner’s Office at telephone number 0303 123 1113 or https://ico.org.uk/.

Use of ‘cookies’

This website uses cookies to better the user’s experience while visiting the website. Where applicable this website uses a cookie control system allowing the user on their first visit to the website to allow or disallow the use of cookies on their computer / device. This complies with recent legislation requirements for websites to obtain explicit consent from users before leaving behind or reading files such as cookies on a user's computer / device.

You can find out more about our cookies by visiting the following page:

Cookie Policy

Cookies are small files saved to the user's computers hard drive that track, save and store information about the user's interactions and usage of the website. This allows the website, through its server to provide the users with a tailored experience within this website. Users are advised that if they wish to deny the use and saving of cookies from this website on to their computers hard drive they should take necessary steps within their web browsers security settings to block all cookies from this website and its external serving vendors.

Social media platforms

Communication, engagement and actions taken through external social media platforms that this website and its owners participate on are custom to the terms and conditions, as well as the privacy policies, held with each social media platform respectively.

Users are advised to use social media platforms wisely and communicate / engage upon them with due care and caution in regard to their own privacy and personal details. This website nor its owners will ever ask for personal or sensitive information through social media platforms and encourage users wishing to discuss sensitive details to contact them through primary communication channels such as by telephone or email.

This website may use social sharing buttons which help share web content directly from web pages to the social media platform in question. Users are advised before using such social sharing buttons that they do so at their own discretion and note that the social media platform may track and save your request to share a web page respectively through your social media platform account.

Shortened links in social media

This website and its owners through their social media platform accounts may share web links to relevant web pages. By default some social media platforms shorten lengthy urls [web addresses] (this is an example: http://bit.ly/zyVUBo). Users are advised to take caution and good judgement before clicking any shortened urls published on social media platforms by this website and its owners. Despite the best efforts to ensure only genuine urls are published many social media platforms are prone to spam and hacking and therefore this website and its owners cannot be held liable for any damages or implications caused by visiting any shortened links.

Links to other websites and partners

Our website and cyber services may contain links to other websites and services operated by our partners. This privacy policy applies only to Cyber Security Associates Ltd services‚ so we encourage you to read the privacy statements on the other websites/ partners you visit. We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our website.

In addition, if you were referred to our website from a third-party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third-party site and recommend that you check the policy of that third party site.

Those aged 16 or under

We are concerned to protect the privacy of children aged 16 or under. If you are aged 16 or under‚ please get your parent/guardian’s permission beforehand whenever you provide us with personal information.

Transferring your information outside of Europe

As part of the services offered to you through this website, the information which you provide to us may be transferred to countries outside the European Union (“EU”). By way of example, this may happen if any of our servers are from time to time located in a country outside of the EU. These countries may not have similar data protection laws to the UK. By submitting your personal data, you’re agreeing to this transfer, storing or processing. If we transfer your information outside of the EU in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this Policy.

If you use our services while you are outside the EU, your information may be transferred outside the EU in order to provide you with those services.

Cyber Security Associates Ltd are registered with the Information Commissioner’s Office (ICO) under the number ZA556808

Review of this policy

We keep this Policy under regular review. This Privacy Notice is v5.0 and was last updated in December 2024.