Legal

Privacy

How FreshCyber Ltd collects, uses, and protects your personal data. We keep this plain and honest, the same way we work. Last reviewed 30 September 2026.

About us

Company
FreshCyber Ltd
Company number
15056389
Registered address
The Granary Barn, Valley Farm, Valley Rd, Newton, Sudbury, Suffolk, CO10 0QQ
hello@freshcyber.co.uk

What we collect

When you book a scoping call, join the Readiness Platform waitlist, or contact us, we collect the details you give us. That is typically your name, email address, phone number, and company name. On the waitlist form we also ask whether you are an existing Freshcyber client, so we can route your enquiry correctly.

If you become a client, we may also hold technical information needed to run your Cyber Essentials Plus or penetration testing engagement, such as IP ranges and contact details for your team. We only ask for what is required to deliver the work.

How we use it

We use your information to respond to your enquiry, scope and deliver the services you ask for, arrange and manage your certification or testing, and keep you informed about that specific work.

We tag waitlist sign-ups as "Readiness Platform Waitlist" so we can tell you when the platform is ready. We do not sell your data, and we do not send unrelated marketing from this list.

Our legal basis

Under the UK GDPR we rely on your consent for waitlist sign-ups, on the performance of a contract for client engagement data, and on legitimate interests for responding to your initial enquiry. You can withdraw consent for the waitlist at any time, using the contact details below.

Who we share with

We share data with the certification bodies and auditors needed to issue your Cyber Essentials Plus certificate, and with the platform we use to deliver network penetration tests, only where it is necessary to carry out the engagement.

We also use trusted providers for booking, email, and form handling. They process data on our behalf as processors and only under contract. We never sell personal data to third parties.

How long we keep it

We keep enquiry and waitlist data only as long as needed to respond and follow up, then remove it. Client records are retained for the duration of the engagement and for a reasonable period afterwards to meet accounting, tax, and professional liability obligations. When data is no longer needed, we delete it or anonymise it.

Your rights

You have the right to access your personal data, correct anything inaccurate, ask us to delete it, object to certain processing, and receive a copy in a portable format. You can also withdraw consent where we rely on it, and complain to the Information Commissioner's Office (ico.org.uk) if you are not satisfied with our response.

Cookies and analytics

Our site uses minimal cookies for basic functionality and anonymous analytics that help us understand how the page is used. We do not use cookies to build advertising profiles. You can control cookies in your browser settings at any time.

Changes to this policy

We may update this policy as our services develop. The date below shows when it was last reviewed. If we make a material change, we will update that date so you can tell at a glance.

Questions about your data? Email hello@freshcyber.co.uk or write to us at the registered address above. We will respond within 30 days.