Privacy Policy

Who we are

CyberReport UK is a trading name operated as a sole trader business based in the United Kingdom. We operate the website cyberreport.uk. For any privacy-related queries, contact us at: privacy@cyberreport.uk

What data we collect and why

We collect the minimum data necessary to provide our service:

• Assessment answers — the responses you provide during the questionnaire are used solely to generate your security report. They are processed in memory and are not stored on our servers after your PDF has been generated.

• Payment information — we use Stripe to process payments. We do not see or store your card details. Stripe may retain transaction records as required by financial regulations. See stripe.com/gb/privacy for Stripe's privacy policy.

• Technical data — our hosting provider (Vercel) automatically logs standard web server data including IP addresses and browser information for security and performance purposes. We do not use this data to identify individual users.

What we do not do

• We do not store your assessment answers after your report is generated

• We do not create user accounts or retain personal profiles

• We do not sell, share, or rent your data to third parties

• We do not send marketing emails (we have no email list)

• We do not use advertising trackers or third-party analytics

Legal basis for processing

We process your payment data on the basis of contractual necessity — you have entered into a contract with us by purchasing a report. Technical log data is processed on the basis of our legitimate interest in operating a secure and reliable service.

Data retention

Assessment answers are not retained after your report is generated. Stripe retains payment transaction records for up to 7 years as required by financial regulations. Server logs are retained by Vercel for a limited period for security purposes.

Your rights under UK GDPR

As a UK resident, you have the following rights:

• Right of access — you can request a copy of any personal data we hold about you

• Right to erasure — you can request deletion of your personal data

• Right to rectification — you can request correction of inaccurate data

• Right to object — you can object to processing of your data

• Right to complain — you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact us at privacy@cyberreport.uk. We will respond within 30 days.

Cookies

We use only essential cookies necessary for the website to function (such as session management during the assessment). We do not use advertising, analytics, or tracking cookies. You do not need to accept any optional cookies to use our service.

Third-party services

We use the following third-party services to operate our business:

• Stripe (stripe.com) — payment processing. Stripe is PCI-DSS compliant and processes payments under their own privacy policy.

• Vercel (vercel.com) — website hosting. Vercel processes technical log data as a data processor on our behalf.

• Google Fonts — we load fonts from Google's CDN. Google may log this request. See Google's privacy policy at policies.google.com/privacy.

Security

Our website is served over HTTPS. We do not store assessment answers or sensitive personal data. Payment processing is handled entirely by Stripe and never passes through our servers.

Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date. We recommend checking this page periodically.

Contact

For any privacy-related queries or to exercise your data rights, contact us at: privacy@cyberreport.uk

For complaints, you can also contact the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.