Privacy Policy
This policy explains how CyberSight Forensics (a trading name of Phishermans Ltd) handles personal data when you use this website or contact us. We are the data controller for the information described here.
What we collect
- Enquiry details you provide through our contact form: your name, organisation, email address, optional phone number, area of interest and message.
- Technical logs generated automatically by our hosting and content-delivery providers, such as IP address, browser type and pages requested, kept for security and to keep the service running.
- Local preferences (your theme and language choices) stored in your browser only. These never reach our servers.
Separately from this website, we hold business contact details for staff at UK schools and similar organisations for our business-to-business marketing; see 'Business-to-business marketing to schools' below.
How we use it and our lawful bases
Under the UK GDPR we rely on the following lawful bases:
- Legitimate interests — to respond to your enquiry, run and secure our website, and prevent misuse.
- Steps prior to a contract / performance of a contract — where you ask us to provide services.
- Legal obligation — where the law requires us to retain or disclose information.
- Consent — where we ask for it specifically; you may withdraw it at any time.
- Business-to-business marketing to schools — legitimate interests (UK GDPR Article 6(1)(f)); see the dedicated section below.
Sharing your information
We do not sell your personal data. We share it only with trusted service providers who help us operate (for example, hosting and email), with professional advisers where necessary, and where we are required to by law. Any data handled as part of a forensic engagement is governed by the separate agreement for that engagement.
International transfers
We aim to keep data within the UK or European Economic Area. Where a provider processes data elsewhere, we put appropriate safeguards in place, such as the UK International Data Transfer Agreement or equivalent.
How long we keep it
We keep enquiry information only for as long as needed to deal with your request and for a reasonable period afterwards, then delete it. Engagement records are retained in line with the relevant contract and our legal obligations.
Business-to-business marketing to schools
CyberSight Forensics is a trading name of Phishermans Ltd (company number 15312330), which is the data controller for the marketing described here. We hold business contact details for staff and role-holders at UK schools and similar organisations — name where published, role, organisation and work email address — which we collected from the organisations' own public websites, where they are published as contact details. We record the source and date of collection for every record and we do not buy marketing lists. We use these details to send occasional business-to-business emails about our own services relevant to schools. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)); direct marketing is recognised in the UK GDPR as a purpose that may be a legitimate interest, and we have carried out and documented an assessment which concluded that occasional, relevant emails to published organisational contacts, with an easy way to stop, do not override the rights of the people concerned. You can ask us for a summary of it. We send marketing emails only to organisations that are corporate subscribers under the Privacy and Electronic Communications Regulations, such as maintained schools, academy trusts and incorporated bodies, and not to sole traders or unincorporated bodies unless they have consented. We do not share your details with anyone else; our emails are sent for us by Amazon Web Services, which hosts the data in the UK. We do not collect information about your device, location or email software, and we do not use open-tracking pixels unless you have expressly agreed, which we would only ever ask for separately and which you could withdraw at any time. If you click a link in one of our emails we record that a click occurred, and nothing about which link, your IP address or your device. We keep contact details for up to 24 months from collection or last verification against the source, campaign-event data for 12 months and then anonymised, our suppression list for as long as we operate the service, and complaint and objection records for six years. You have the right to object to direct marketing at any time and we will stop: use the Unsubscribe link in any email or write to privacy@cybersightforensics.com. You also have the rights of access, rectification, erasure, restriction and portability described elsewhere in this notice. If you ask us to erase your details, we keep only your email address on our suppression list so that we never contact you again; we rely on our legal obligation to honour your objection for that.
Your rights
You have the right to access, correct, erase, restrict or object to our use of your personal data, and to data portability where applicable. To exercise any of these, email support@cybersightforensics.com.
Complaints
If you are unhappy with how we have handled your personal data, please tell us first at privacy@cybersightforensics.com — we will acknowledge your complaint within 30 days and respond as quickly as we can. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) at any time.
Contact
Questions about this policy or your data? Email support@cybersightforensics.com. Our data protection contact is privacy@cybersightforensics.com.