Privacy Policy

1. Who We Are

Cyberloggie is a cyber security assessment platform operated by Cyberloggie Ltd. We provide consultant-led cyber posture reviews to small and medium-sized organisations. References to "we", "us", or "our" refer to Cyberloggie Ltd.

2. What Data We Collect

• Account information: name, email address, and role when you register.
• Organisation profile: company name, industry, size, country, and business details you provide.
• Assessment responses: answers, notes, and evidence files you upload during the assessment.
• Payment information: transaction records (payment card details are processed by Stripe and not stored by us).
• Usage data: page views, actions, and session identifiers collected via platform analytics.

3. How We Use Your Data

• To deliver and manage your cyber posture assessment.
• To communicate with you about your account, assessment status, and results.
• To process payment and issue receipts.
• To improve our platform and services.
• To comply with legal and regulatory obligations.

4. Lawful Basis for Processing

We process your data on the basis of contract performance (to deliver the service you have purchased), legitimate interests (to operate and improve the platform), and legal obligation where applicable.

5. Data Sharing

We do not sell your data. We share data only with: our cloud infrastructure provider (Base44), payment processor (Stripe), and consultants assigned to your assessment. All processors are bound by appropriate data processing agreements.

6. Data Retention

We retain your account and assessment data for up to 3 years after your last active use, or as required by law. You may request deletion at any time by contacting us.

7. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the right to: access your data, correct inaccuracies, request deletion, object to processing, and data portability. Contact us at privacy@cyberloggie.com to exercise any of these rights.

8. Security

We apply technical and organisational security measures appropriate to the sensitivity of the data, including encryption in transit, access controls, and role-based permissions.

9. Cookies

We use essential session cookies required to operate the platform. We do not use advertising or tracking cookies.

10. Contact

For privacy enquiries: privacy@cyberloggie.com