Privacy policy
What we collect, and why
- Analytics: first-party, cookieless and aggregate. We measure pages, referrers, device class and tool usage server-side; no cookies are set for measurement, no identifiers are stored, and nothing is shared with third parties. This is why this site shows no cookie banner: there is nothing to consent to.
- Enquiry forms: if you send an enquiry, we store the details you enter (with a timestamp and the page you sent it from) to answer it and, where you ask us to, to pass it to a relevant provider. The lawful basis is your consent, recorded with the form; the privacy-notice version you saw is stored with it.
- Email: replies to enquiries are stored with the enquiry.
Where it lives, and for how long
- All personal data is stored in the EU (Cloudflare EU jurisdiction storage).
- Enquiries: 24 months from last activity, then deleted.
- Raw inbound email: 12 months, then deleted.
- Consent records: for the life of the relationship plus 6 years (legal basis evidence).
- Aggregate, anonymous analytics: kept indefinitely (they identify no one).
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it, at any time: email enquiries@cyberessentialscost.co.uk with the address you used. We respond within one month. You can also complain to the ICO (ico.org.uk). Ellul Solutions Ltd's EU establishment is in Malta; EU residents may use the same contact for Article 27 purposes.
Sharing
Enquiries are shared only with the provider(s) you ask to be connected to, named at the point you submit. We never sell data, run third-party advertising, or load third-party scripts on this site.