Privacy Policy

Last updated: 10 February 2026

CyberXpert Ltd is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website or contact us.

This policy is provided in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are (Data Controller)

CyberXpert Ltd
128 City Road
London
EC1V 2NX
United Kingdom

Website: https://cyberxpert.co.uk
Privacy contact email: [email protected]

For the purposes of data protection law, CyberXpert Ltd is the data controller of any personal data processed via this website.

2. Personal data we collect

We may collect and process the following categories of personal data.

Information you provide directly

• Name
• Email address
• Information you provide when booking an online consultation
• Any information you include when contacting us via email or contact forms

Technical and usage data

• IP address
• Browser type and version
• Operating system
• Date and time of access
• Pages visited and interactions

This information is collected for security, operational, and performance purposes. It is not used for advertising, behavioural profiling, or direct marketing.

Cookies and similar technologies

We use cookies that are strictly necessary for the operation of the website and, where you have provided consent, statistical cookies used to understand how visitors interact with the website.

Statistical technologies may collect information such as page views, interaction events, and approximate location derived from IP address. This data is processed in aggregated or pseudonymised form and is not used for advertising or marketing purposes.

Full details are provided in our Cookie Policy, which should be read alongside this Privacy Policy.

3. How we use your personal data

We process personal data only where permitted by law and for the following purposes:

• Responding to enquiries and communications

• Operating, maintaining, and securing our website

• Preventing fraud, misuse, and unauthorised access

• Ensuring website functionality and performance

• Complying with legal and regulatory obligations

We do not use personal data for:

• Marketing communications

• Behavioural profiling

• Automated decision-making

4. Legal bases for processing

Under UK GDPR, we rely on the following legal bases:

• Legitimate interests
  To respond to enquiries, operate the website securely, and prevent misuse, provided these interests are not overridden by your rights and freedoms.
• Consent
  Where you have actively provided consent, including for the use of statistical and analytics cookies via our cookie management controls.
• Legal obligation
  Where processing is necessary to comply with applicable legal or regulatory obligations.

5. Cookies

Our website uses cookies to ensure proper operation, security, and performance.

Details of cookie categories, purposes, retention periods, and how to manage or withdraw consent are provided in our Cookie Policy.

You can change or withdraw your cookie preferences at any time using the cookie management controls available on our website.

6. Sharing your data

We do not sell or rent personal data.

We may share limited personal data with trusted service providers who act as data processors on our behalf, strictly for operational purposes, including:

• Website hosting and infrastructure providers

• Security and content delivery services

• Email and communication service providers

Online meeting scheduling

We use an online appointment scheduling service (Koalendar) to allow visitors to book consultations directly through our website.

When you book a meeting, Koalendar processes the information you provide (such as your name, email address and any details you choose to submit) for the purpose of scheduling and managing the appointment. This processing is carried out at your request and is necessary to provide the booking service.

Koalendar acts as a data processor on our behalf. We do not use this service for marketing, tracking, or profiling, and it does not place advertising or analytics cookies on your device as part of the booking process.

Koalendar’s privacy policy is available at: https://koalendar.com/privacy

The legal basis for this processing is Article 6(1)(b) UK GDPR (performance of a contract or steps taken at your request prior to entering into a contract).

All such providers are required to implement appropriate technical and organisational security measures and to process data only in accordance with our instructions.

Analytics and website usage services

We use the following analytics services to understand how our website is used and to improve its performance and content:

• Google Analytics

• Mixpanel

These services process technical and usage data such as page views, interaction events, and device information. Data is processed in accordance with our instructions and is not used for advertising or profiling.

Where required, these services are only activated after you have provided consent via our cookie management controls.

7. International data transfers

Some service providers may process data outside the United Kingdom.

Where this occurs, we ensure appropriate safeguards are in place, including:

• UK-approved International Data Transfer Agreements

• Standard Contractual Clauses

• Other equivalent safeguards recognised under UK GDPR

8. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected.

• Enquiry and contact data: retained for up to 12 months

• Security and technical logs: retained for limited periods in line with operational and legal requirements

Data may be retained longer where required by law or for the establishment, exercise, or defence of legal claims.

9. Your rights

Under UK GDPR, you have the right to:

• Request access to your personal data

• Request correction of inaccurate or incomplete data

• Request erasure of your personal data

• Restrict or object to processing

• Withdraw consent where processing is based on consent

• Request data portability, where applicable

To exercise your rights, please contact us using the details above.

10. Complaints

If you have concerns about how we handle your personal data, we encourage you to contact us first.

You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner’s Office (ICO)
Website: https://www.ico.org.uk

11. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our practices. Any updates will be published on this page.