Privacy Policy

ACT CyberTech is committed to protecting your personal data and handling it responsibly in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws.

This Privacy Policy explains how we collect, use, disclose, store, and secure your personal data when you interact with our website, products, and services.

1. Who We Are

ACT CyberTech Ltd
5 Goodge Place
London, W1T 4SD
United Kingdom
Phone: 020 8363 4905
Email: info@actcybertech.com

We provide IT, AI/ML, Cybersecurity, Software Development, DevOps, and Digital Transformation services to clients in the UK and worldwide.

2. What Personal Data We Collect

A. Information You Provide Directly

• Name, address, email, phone number
• Company name and business information
• Login details and account credentials
• Documents, instructions, and project requirements
• Payment information (processed through secure third-party providers)

B. Technical & Usage Data

• IP address
• Browser type and version
• Device information
• Operating system
• Log data, cookies, and web behaviour
• Access times and pages viewed

C. Project & Interaction Data

• Content you upload
• Chat, email, and call communications
• Technical environments and server details
• Datasets for AI/ML development
• Security or access logs for cybersecurity services

D. Sensitive or Special Category Data

We do not intentionally collect special category data unless explicitly required for a project and agreed in writing.

3. How We Use Your Personal Data

A. To Provide and Deliver Our Services

• Software development, DevOps, AI/ML, Cybersecurity
• Technical support and troubleshooting
• Processing orders and contracts
• Project communication and collaboration

B. To Improve Our Website & Services

• Analytics and performance measurement
• UX improvements
• Identifying bugs or technical issues

C. For Business Operations

• Invoicing and financial processing
• Legal compliance and audits
• Internal reporting and management

D. Marketing & Communication

• Sending service updates
• Informing you about new features or services
• Responding to enquiries and requests

We do not send marketing communications without your consent (where required by law).

4. Legal Basis for Processing

• Contractual Necessity: To fulfil a contract or provide a service.
• Legitimate Interest: To operate, secure, and improve our services.
• Consent: For marketing and optional activities.
• Legal Obligation: For tax, compliance, and regulatory purposes.

5. How We Share Your Data

A. Internal Teams

Employees and contractors who need access for service delivery.

B. Approved Third Parties

• Cloud hosting providers (AWS, Azure, Google Cloud, DigitalOcean)
• SaaS tools (CRM, analytics, productivity platforms)
• Payment processors
• Cybersecurity and monitoring partners

All third-party processors comply with UK GDPR.

C. Legal & Regulatory Bodies

Shared only where required by law.

We never sell or lease your personal data.

6. International Data Transfers

Some processing may occur outside the UK. We use safeguards such as:

• UK GDPR Standard Contractual Clauses
• International Data Transfer Agreements (IDTA)
• Binding corporate rules
• Secure encrypted transfers

7. Data Retention

We retain data only as long as necessary for:

• Contract delivery
• Legal obligations
• Security requirements

After retention periods expire, data is securely deleted.

8. Data Security

We apply strong security measures, including:

• Encryption
• MFA
• Secure development lifecycle
• Firewalls & intrusion detection
• Access control & audit logging
• Security assessments

No system is fully secure. Users must also follow best practices.

9. Your Rights Under UK GDPR

• Access
• Rectification
• Erasure
• Restriction
• Objection
• Data portability
• Withdraw consent
• Complain to the ICO

10. Cookies

We use cookies to improve performance, analytics, security, and personalisation.

Cookies can be disabled, but some features may not work properly.

11. Children’s Data

We do not provide services to individuals under 18.

12. Links to Third-Party Sites

We are not responsible for external sites or their privacy practices.

13. Changes to This Policy

We may update this policy. Continued use means you accept updates.

14. Contact Us

ACT CyberTech
5 Goodge Place
London, W1T 4SD
United Kingdom
Phone: 020 8363 4905
Email: info@actcybertech.com