Legal
Privacy Policy
How we handle your personal data under UK GDPR.
Who we are
CyberReady 365 is the data controller for account information and a data processor for assessment data you enter on behalf of your organisation.
What we collect
Account details (name, email), organisation details, assessment answers, evidence you upload and basic usage logs.
How we use it
To provide the service, secure your account, calculate your results, and communicate service updates. We do not sell personal data.
Retention
We keep data while your account is active and delete it within 90 days of a verified deletion request, unless law requires otherwise.
Your rights
You may request access, correction, deletion or export of your data, and may complain to the Information Commissioner's Office.