01Who we are
All Safe Cybersecurity Ltd is a company incorporated in 2025 and registered in England and Wales, trading as All Safe (IT · Digital · Technology). We are the data controller for personal data collected through this website. You can reach us at support@allsafecybersecurity.co.uk.
02Personal data we collect
We keep data collection to a minimum. We collect:
- Contact form submissions: your name, email address, company name if you choose to provide it, and the content of your message.
- Direct correspondence: any information you include when you email us.
- Technical and usage data: information such as approximate location, browser type, device type, pages viewed and referring source, collected in aggregate to keep the site secure and understand how it is used.
We do not collect special category data through this website, and we do not buy personal data from third parties.
03Why we process it and our legal basis
- To respond to your enquiry and discuss potential work. Legal basis: legitimate interests, namely responding to people who contact us, and steps taken at your request prior to entering a contract.
- To provide and administer services under a signed agreement. Legal basis: performance of a contract.
- To keep the site secure, prevent abuse and maintain records. Legal basis: legitimate interests and, where relevant, legal obligation.
- To measure site performance through analytics. Legal basis: consent, where analytics cookies are used.
04How long we keep it
Contact form submissions and related correspondence are retained for up to 24 months from the last contact, unless the enquiry becomes a client engagement, in which case records are retained for the duration of that engagement and for six years afterwards to meet legal, accounting and contractual requirements. Aggregate analytics data is retained for up to 14 months. We delete or anonymise personal data once it is no longer needed.
06International transfers
Some of our providers may process data outside the United Kingdom. Where that happens, we rely on UK adequacy regulations or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with additional safeguards where appropriate, so that your data receives an equivalent level of protection.
07How we protect your data
Security is our discipline as well as our obligation. The site is served over TLS, form submissions are validated on the server, stored records are protected by row level access controls, and access to stored enquiry data is restricted to the people who need it. We apply secure development practices to our own products and review our controls as the site changes. No system can be guaranteed completely secure, so we also maintain procedures for handling any suspected personal data breach.
09Your rights
Under UK GDPR and the Data Protection Act 2018 you have the right to:
- Access the personal data we hold about you.
- Have inaccurate data corrected.
- Request erasure of your data where there is no continuing reason for us to hold it.
- Restrict or object to processing, including processing based on legitimate interests.
- Receive your data in a portable format where processing is based on consent or contract.
- Withdraw consent at any time, without affecting processing carried out before withdrawal.
To exercise any right, email support@allsafecybersecurity.co.uk. We respond within one month. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, although we would welcome the chance to resolve the matter first.
10Children's privacy
Our website and services are directed at businesses and adult consumers. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.
11Changes to this policy
We may update this policy to reflect changes to our services, technology or legal obligations. The current version is always published on this page with its last updated date.