How we look after your information.

Who we are

CtrlAltCyber provides cyber security, IT, cloud, AI, training and technology services to small and medium-sized businesses and individuals across the UK. In this policy, "we" and "us" means CtrlAltCyber. We are responsible for the personal information described here.

Questions about this policy or your information: admin@ctrlaltcyber.co.uk.

What information we collect

• When you contact us: your name, email address, phone number, business name and anything you tell us in your message.
• When we work with you: contact details for you and your staff, invoices and payment records, and the information needed to deliver the service you've asked for.
• During security work: we may see information held on your systems. We only access what the agreed work needs, and we treat everything we see as confidential.
• When you visit this website: our hosting provider, Cloudflare, processes technical data such as your IP address to deliver and protect the site. We don't use advertising or tracking cookies.

How we use it

• To reply to your enquiry and arrange a free cyber chat.
• To deliver, invoice and support the services you've agreed.
• To keep our records accurate and meet legal, tax and insurance obligations.
• To send occasional updates about our services or local events, only if you've agreed. You can opt out at any time.

We never sell your information.

Our lawful basis

Under UK GDPR we rely on: contract (to deliver the work you've asked for), legitimate interests (to answer enquiries and run our business), legal obligation (for tax and accounting records) and consent (for optional updates).

Who we share it with

Only trusted providers who help us run the business, such as our email provider (Google), website host (Cloudflare), accountant and insurer, and only what they need. If we bring in a specialist partner for your work, such as a Cyber Essentials certification body, we'll tell you first. We'll also share information if the law requires it.

How long we keep it

Enquiries that don't lead to work: up to 12 months. Client records: for the length of our work together plus 6 years, to meet tax and legal requirements. Data from your systems gathered during security work is securely deleted when the engagement ends, unless you ask us to keep it.

How we protect it

We practise what we preach: multi-factor sign-in on every account, encrypted devices, strong access controls and secure deletion. If a breach ever affected your information, we'd tell you and the ICO where the law requires.

Your rights

You can ask to see, correct or delete your information, ask us to limit how we use it, object to us using it, or ask for a copy to take elsewhere. Email admin@ctrlaltcyber.co.uk and we'll respond within one month.

If you're unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page.

Last updated: October 2026.