Privacy Policy for Positive Cyber Solutions

At Positive Cyber Solutions, we are committed to protecting and respecting your privacy. This privacy statement explains how we collect, use, store, and protect your personal data, as well as your rights regarding that data. 

What Information We Collect 

We may collect and process the following personal data about you: 

• Personal Identification Information: Name, email address, phone number, and postal address 
• Business Contact Information: Job title, company name, and contact details 

How We Use Your Information 

We process your personal data for the following purposes: 

• Providing services to you 
• Managing our relationship with you, including responding to inquiries or complaints 
• Improving our services based on your feedback 
• Complying with legal and regulatory obligations 

Lawful Basis for Processing 

We process your personal data based on one or more of the following lawful grounds: 

• Consent: Where you have given us clear consent to process your personal data 
• Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering a contract 
• Legal Obligation: We need to process your data to comply with legal obligations 
• Legitimate Interests: Processing is necessary for our legitimate interests (unless overridden by your rights), such as improving our services and maintaining cybersecurity 

How We Share Your Information 

We will not share your personal data with third parties unless: 

• It is necessary for the performance of a contract with you 
• We are required to do so by law or regulatory authorities 
• We have your consent to do so 

How We Store and Protect Your Data 

Your data is stored securely within the UK on our systems, including Microsoft 365 cloud services and backup hard drives. We implement strong encryption, access controls, and regular audits to protect your personal data from unauthorised access or breaches. 

Website Contact Forms and Communication 

If you contact us via email or phone, we will process your contact details, and any information provided to respond to your inquiry. 

Data Retention 

We retain personal data for the following periods: 

• General inquiries: 12 months after resolution 
• Client records: 7 years (for legal and compliance reasons) 

Data Breach Notification 

In the unlikely event of a data breach, we will assess the impact and notify affected individuals and the ICO, as required by UK GDPR. 

Your Rights 

Under the UK GDPR, you have the following rights regarding your personal data: 

• Right of Access: You can request a copy of your personal data we hold 
• Right to Rectification: You can request that we correct any inaccurate or incomplete data 
• Right to Erasure: You can request that we delete your personal data, subject to certain conditions 
• Right to Object: You can object to our processing of your personal data 
• Right to Data Portability: You can request that we transfer your data to another service provider 
• Right to Restrict Processing: You can request a temporary halt to processing your data. 
• Right to Complain to the ICO 

To exercise any of these rights, please contact us at: 

Email: enquiries@positivecybersolutions.co.uk 
Address: Severn House, Hazell Drive, Newport, NP10 8FY. 

Complaints and Queries 

If you have any concerns about how we handle your data, you can contact us using the details above. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection supervisory authority. 

Changes to Our Privacy Statement 

We may change our Privacy Statement from time to time in line with legislation and industry standards. We will not be explicitly notifying all website users about these changes and therefore recommend that you check this statement occasionally for any policy updates. 

Change Log 

• 01/10/2024 – Privacy Statement Created 
• 19/11/2024 – Privacy Statement Reviewed 
• 12/02/2025 – Privacy Statement Updated (clarifications on data retention, website contact, cookies, and payment processing)