CyberCQRCybersecurity Insight. Boardroom Impact.

Company

Privacy notice

What personal data CyberCQR collects through this website, why, how long we keep it, and your rights.

Who we are

CyberCQR Ltd is the controller of the personal data described here. We are registered in England and Wales, company number 15707861, with our registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. For anything about your data, email info@cybercqr.com.

When you visit the site

This site sets no cookies, uses no website analytics and loads nothing from other companies. The cookie notice explains how you can check.

Our hosting provider, Hostinger, keeps standard server logs: the IP address, the page requested, the browser type and the time. These are used only to run the service and protect it from attack, which is our legitimate interest. They are kept for a limited period under the provider’s standard log retention and then deleted. We do not use them to identify or follow individual visitors.

When you download a paper

We ask for your name, company and work email address. We use them to:

  • check that the address is a working business address;
  • email you a 6-digit code and a download link;
  • keep a record of which paper was downloaded and when.

Our lawful basis is legitimate interests: providing the paper you asked for, and knowing which organisations read our work. We do not add you to a mailing list or send you marketing. We will only contact you if you ask us to.

We keep these details for 30 days, after which they are deleted automatically. The code expires after 15 minutes and the download link after 24 hours.

The exception is when there is a genuine business reason to keep them for longer, for example because you have asked us for a quote, a proposal or further information. We then keep only the details we need to deal with that request, for as long as it takes, as described under When you email us. If you become a client, we keep records for as long as the law requires.

To stop abuse, the download service limits how many requests can come from one connection. To do this it turns your IP address into a scrambled code that cannot be turned back into the address, and deletes it within 24 hours. Your actual IP address is never stored.

When you email us

We use what you send to reply and to deal with your enquiry. Our lawful basis is legitimate interests, or taking steps at your request before entering into a contract. We keep enquiry emails only as long as we need them for that. If you become a client, we keep records for as long as the law requires.

Who else handles your data

We use two service providers, who act only on our instructions:

  • Hostinger hosts this website and the download service.
  • Microsoft provides our email (Microsoft 365), which sends download codes and links.

If either provider processes data outside the UK, it does so under safeguards recognised by UK data protection law, such as the UK International Data Transfer Addendum. We do not sell your data, share it with advertisers or use it for automated decisions about you.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or transfer it to someone else. You can also object to how we use it. Email info@cybercqr.com and we will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113. We would appreciate the chance to put things right first.

Changes to this notice

We will update this page if anything changes. Version 1.0, 23 October 2026.