Who we are

Get Cyber Ready provides practical preparation and support for businesses working towards Cyber Essentials and Cyber Essentials Plus certification.

For the personal information covered by this notice, Get Cyber Ready is the data controller. You can contact us at [email protected].

Information we collect

We collect information you choose to provide when you contact us, such as:

  • your name and contact details;
  • your organisation and role;
  • information included in your enquiry; and
  • correspondence between you and Get Cyber Ready.

Our web server may also record technical information needed to deliver and protect the site, including an IP address, browser type, requested page, date and time, and response status.

How and why we use information

We use personal information to:

  • respond to enquiries and discuss the services you may need;
  • take steps at your request before entering into a contract;
  • provide and manage services where you become a client;
  • operate, maintain and secure this website; and
  • meet applicable legal, regulatory and accounting requirements.

Depending on the circumstances, our lawful basis is taking steps before or performing a contract, complying with a legal obligation, or our legitimate interests in responding to enquiries, running the business and keeping our systems secure. We do not sell personal information.

Who we share information with

We only share information where necessary. This may include trusted providers that support our email, website hosting and business systems; professional advisers; and public authorities where disclosure is required by law.

Service providers may only use the information to provide their services to us and must protect it appropriately. If personal information is transferred outside the UK, we use an adequacy decision or another legally recognised safeguard where required.

How long we keep information

General enquiry correspondence is normally kept for up to 24 months after the last meaningful contact. Routine server logs are normally retained for no longer than 30 days, unless they are needed to investigate a security incident.

If you become a client, relevant records may be kept for longer where needed to deliver the service, resolve disputes or meet legal, tax and accounting requirements. We periodically review information and delete or anonymise it when it is no longer required.

Cookies and analytics

This website does not currently use cookies, advertising pixels or analytics tools, and it does not store tracking information on your device. Because no non-essential cookies are used, the site does not display a cookie-consent banner.

If this changes, we will update this notice and introduce appropriate controls before setting any non-essential cookies.

Your data protection rights

Depending on the circumstances, you may have the right to ask us for access to your personal information, to correct or delete it, to restrict its use, to object to processing, or to receive information you provided in a portable format.

To exercise a right or ask a privacy question, email [email protected]. We may need to confirm your identity before completing a request.

You can also complain to the Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint for guidance.

External websites and changes

Links to other websites are provided for convenience. Their privacy practices are controlled by their operators, not Get Cyber Ready.

We may update this notice when our services, suppliers or legal obligations change. The latest version will always be published on this page.