Privacy Policy

Last updated: 2 May 2026

CT Cyber Defence ("we", "us", "our") respects your privacy. This policy explains what personal data we collect, how we use it, and your rights under UK GDPR, EU GDPR, and India's Digital Personal Data Protection Act (DPDPA) 2023.

1. Data we collect

2. Why we process your data

Lawful basis (GDPR Art. 6): consent (form submissions), legitimate interest (security & logging), contract (active client engagements).

3. How we store and protect your data

Form submissions are delivered via FormSubmit (formsubmit.co) directly to sandeep@cybertechnology.in over TLS-encrypted channels. We do not store form data in any external database. Email correspondence is held in encrypted business email systems with MFA enforced.

4. Who we share your data with

We do not sell, rent, or trade personal data. We may share limited data with:

5. International transfers

Data may be processed in the UK, EU, India, and US (FormSubmit servers). Transfers rely on Standard Contractual Clauses (SCCs) or equivalent safeguards.

6. How long we keep your data

Enquiry data: kept for 24 months from last contact, unless you become a client. Active-client data: retained for the duration of the engagement plus 7 years (UK accounting / regulatory requirement).

7. Your rights

Under GDPR you have the right to: access your data, request correction, request deletion, object to processing, restrict processing, request portability, and withdraw consent. To exercise these rights, email sandeep@cybertechnology.in. We respond within 30 days.

8. Complaints

You may complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or the relevant supervisory authority in your jurisdiction.

9. Updates

We may update this policy. Material changes will be highlighted on the homepage for 30 days.

10. Contact

Data Controller: CT Cyber Defence Ltd
Email: sandeep@cybertechnology.in
Address: Nanakramguda, Hyderabad, Telangana 500032, India
UK Phone: +44 7379 766797