Privacy
How FreshCyber Ltd collects, uses, and protects your personal data. We keep this plain and honest, the same way we work. Last reviewed 30 September 2026.
About us
- Company
- FreshCyber Ltd
- Company number
- 15056389
- Registered address
- The Granary Barn, Valley Farm, Valley Rd, Newton, Sudbury, Suffolk, CO10 0QQ
What we collect
When you book a scoping call, join the Readiness Platform waitlist, or contact us, we collect the details you give us. That is typically your name, email address, phone number, and company name. On the waitlist form we also ask whether you are an existing Freshcyber client, so we can route your enquiry correctly.
If you become a client, we may also hold technical information needed to run your Cyber Essentials Plus or penetration testing engagement, such as IP ranges and contact details for your team. We only ask for what is required to deliver the work.
How we use it
We use your information to respond to your enquiry, scope and deliver the services you ask for, arrange and manage your certification or testing, and keep you informed about that specific work.
We tag waitlist sign-ups as "Readiness Platform Waitlist" so we can tell you when the platform is ready. We do not sell your data, and we do not send unrelated marketing from this list.
Our legal basis
Under the UK GDPR we rely on your consent for waitlist sign-ups, on the performance of a contract for client engagement data, and on legitimate interests for responding to your initial enquiry. You can withdraw consent for the waitlist at any time, using the contact details below.
How long we keep it
We keep enquiry and waitlist data only as long as needed to respond and follow up, then remove it. Client records are retained for the duration of the engagement and for a reasonable period afterwards to meet accounting, tax, and professional liability obligations. When data is no longer needed, we delete it or anonymise it.
Your rights
You have the right to access your personal data, correct anything inaccurate, ask us to delete it, object to certain processing, and receive a copy in a portable format. You can also withdraw consent where we rely on it, and complain to the Information Commissioner's Office (ico.org.uk) if you are not satisfied with our response.
Changes to this policy
We may update this policy as our services develop. The date below shows when it was last reviewed. If we make a material change, we will update that date so you can tell at a glance.
Questions about your data? Email hello@freshcyber.co.uk or write to us at the registered address above. We will respond within 30 days.
