Privacy Policy | Cyprion Security Consultancy

Cyprion Security Consultancy
Last updated: 17/08/2025

Click here, for more information on the services we provide!

1. Introduction

Cyprion Security Consultancy (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website www.cyprionsecurity.com, contact us via forms, or engage with us through third-party marketing and lead generation platforms.

We comply with the EU General Data Protection Regulation (GDPR) and the Cyprus Data Protection Law (Law 125(I)/2018).

2. Data We Collect

We may collect and process the following personal data:

Contact information: name, email address, phone number, organisation, job title.
Communication data: details you provide via website forms, third-party forms, or direct correspondence.
Technical data: IP address, browser type, and website usage analytics (cookies/consent-based).
Business information: information relevant to the provision of our consultancy services.

We do not intentionally collect sensitive personal data unless it is directly relevant to the agreed consultancy engagement and with your explicit consent.

3. How We Collect Data

Directly from you (via website contact forms, email, phone, or in person).
Through third-party platforms used for marketing or lead generation (such as professional networking sites, advertising platforms, or event registration tools).
Via analytics tools (cookies and tracking technologies, only where consent is provided).

4. Purpose & Legal Basis for Processing

We process personal data only where permitted by law. Our purposes include:

Responding to enquiries and providing requested information (legitimate interest).
Delivering contracted consultancy services (contract performance).
Maintaining client records and compliance documentation (legal obligation).
Marketing and business development (consent or legitimate interest).

5. Sharing of Personal Data

We do not sell your personal data. Information may be shared only with:

Our trusted subcontractors or service providers (bound by confidentiality and GDPR compliance).
Regulatory or legal authorities, where required by law.
Third-party service providers used for marketing, lead generation, or secure data hosting (for example, networking platforms, online form providers, or digital advertising services).

6. International Data Transfers

Where data is transferred outside the European Economic Area (EEA), we ensure it is protected by appropriate safeguards, such as EU Standard Contractual Clauses (SCCs) or equivalent legal mechanisms.

7. Data Retention

We retain personal data only as long as necessary:

Website/third-party enquiries: until consent is withdrawn or no longer relevant.
Client engagement records: up to 7 years (for legal, tax, and compliance purposes).
Marketing data: until consent is withdrawn or no longer relevant.

8. Data Security

We implement strict security measures, including encryption, two-factor authentication, and secure cloud storage, to prevent unauthorised access, loss, or misuse of your data.

9. Your Rights (under GDPR)

You have the right to:

Access your data and request a copy.
Correct inaccurate or incomplete data.
Request deletion (“right to be forgotten”).
Restrict or object to processing.
Withdraw consent at any time (without affecting prior lawful processing).
Data portability (receive your data in a structured format).
Lodge a complaint with the Office of the Commissioner for Personal Data Protection (Cyprus). Their website can be found at www.dataprotection.gov.cy.

10. Communication with You

We may use your contact details to communicate with you in the following ways:

Service-related communications: to respond to your enquiries, deliver contracted services, provide reports, or share important updates relevant to your engagement with us.
Administrative communications: such as invoices, legal notices, or compliance updates.
Marketing communications: where you have provided consent, we may occasionally send you information about our services, insights, or resources. You may opt out of marketing communications at any time by using the unsubscribe link or contacting us directly.

We will not send you marketing without your prior consent, and we will never share your details with third parties for their own marketing purposes.

11. Cookies

Our website uses cookies and similar technologies to enhance user experience and gather analytics. You can manage or disable cookies via your browser settings or our cookie banner. Non-essential cookies (analytics/marketing) are only used with prior consent.

12. Third-Party Platforms

If you provide information through third-party platforms used by us for marketing or lead generation (such as professional networking sites, advertising platforms, or event registration tools), their respective privacy policies will also apply. We only process the information you provide in accordance with this Privacy Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. Any updates will be published on our website with the date of the latest revision. Where material changes are made, we will take reasonable steps to inform you, such as by email or website notice.

14. Contact Us

For any privacy-related queries, or if you would like to access, correct, amend, or delete any personal information we hold about you, please contact us by clicking here.

Cyprion Security Consultancy
Email: info@cyprionsecurity.com
Website: www.cyprionsecurity.com
Registered Address: [Insert Cyprus Address]