Privacy Policy | SnapCyber

1. Introduction

SnapCyber ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cybersecurity training platform.

We are registered in the United Kingdom and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide

Account information: name, email address, company name
Payment information: processed securely through Stripe
Communications: when you contact us for support

2.2 Information Collected Automatically

Training progress and completion data
Phishing simulation results
Device and browser information
IP addresses and access times

3. How We Use Your Information

To provide and maintain our training platform
To process payments and manage your subscription
To track training progress and generate reports
To send training reminders and important updates
To improve our services and develop new features
To respond to your enquiries and provide support

4. Legal Basis for Processing

We process your personal data under the following legal bases:

Contract: To fulfil our obligations under our service agreement with you
Legitimate interests: To improve our services and communicate with you
Consent: For marketing communications, which you can opt out of at any time

5. Data Sharing

We do not sell your personal data. We may share data with:

Service providers: Stripe (payments), AWS (hosting), and our LMS provider
Your organisation: Training progress reports for account administrators
Legal requirements: When required by law or to protect our rights

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Upon account closure, we retain data for up to 7 years for legal and regulatory compliance, after which it is securely deleted.

7. Your Rights

Under UK GDPR, you have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Object to processing
Data portability
Withdraw consent at any time

To exercise these rights, contact us at test+support@snapcyber.co.uk.

8. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and regular security assessments.

9. Contact Us

For privacy-related enquiries or to exercise your rights:

Email: test+support@snapcyber.co.uk

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.