Privacy notice

Who we are

The Cyber Assurance is a trading name of TCA Consulting Limited, a company registered in England and Wales. Our registered office is 124 City Road, London, EC1V 2NX. For the purpose of UK and EU data protection law, we are the data controller for personal data you share with us through this website, by email, or in the course of an engagement.

What we collect

When you contact us, request a consultation, or download a resource, we collect what you give us. Typically that's:

• Your name and work email address.
• Your company name and role.
• The service you're enquiring about, and any details you choose to share in your message.

When you browse the site, we collect a minimal set of analytics. Page views, referrer, country-level location, browser type. To understand which pages are useful. We don't use third-party advertising trackers.

Why we collect it

We rely on the following lawful bases under UK GDPR:

• Legitimate interest. To respond to your enquiry and follow up on the work you've asked us to scope.
• Contract. To deliver an engagement you've agreed to.
• Consent. For non-essential cookies and any marketing emails (which you have to opt into; we don't buy lists).
• Legal obligation. To keep client records for the periods required by accounting, tax, and audit law.

Who we share it with

We don't sell your data and we don't share it with third parties for marketing purposes. We do use a small set of operational tools (email, calendar, accounting, document storage) that process data on our behalf as processors. All are bound by GDPR-compliant data-processing agreements. We can provide a sub-processor list on request.

How long we keep it

Contact-form enquiries that don't lead to a project are deleted within 12 months. Client records (contracts, deliverables, invoices) are retained for the period required by HMRC and our professional indemnity insurer. Typically 7 years from the end of the engagement. Analytics data is anonymised after 26 months.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data deleted (subject to our legal retention obligations above).
• Restrict or object to processing.
• Receive your data in a portable format.
• Lodge a complaint with the ICO at ico.org.uk.

To exercise any of these, email us at privacy@thecyberassurance.co.uk and we'll respond within 30 days.

Cookies

This site uses essential cookies for the site to function. Analytics cookies only fire after you accept on the cookie banner. Full details on our cookies page.

Contact us

Questions about this notice or how we handle your data? Email privacy@thecyberassurance.co.uk or write to us at TCA Consulting Limited, 124 City Road, London, EC1V 2NX.