Privacy Policy

Data Controller

The data controller responsible for your personal data is Cyberstaff Ltd, a company registered in England and Wales. If you have any questions about this Privacy Policy or how we handle your data, please contact us at [email protected].

Information We Collect

We may collect and process a variety of information when you interact with our Services. This may include personal information that you provide directly, such as your name, email address, business information, or any other details you choose to supply when creating an account, contacting us or submitting forms. It may also include communications you send to us, such as support requests or feedback. In addition, we automatically collect certain technical and behavioural information, such as your IP address, browser type, operating system, device identifiers, log data, and details of your visits to our Services including traffic data, location data, and other communication data. Furthermore, where you choose to connect your account through a third-party service such as Google via OAuth, we may obtain information directly from that provider, which may include your Google profile information (for example, your name, email address and profile picture) and any other data for which you have granted explicit consent. Our access to and use of such Google user data is strictly limited to the operation of the features you enable and is managed in accordance with the Google API Services User Data Policy, including the Limited Use requirements.

How We Use Information

The information collected is used for the purpose of providing, maintaining and improving our Services, ensuring security and preventing fraud, verifying your identity and allowing you to access features you have requested, personalising your experience, and communicating with you regarding updates, service changes or support matters. We may also use the data for analytical and statistical purposes in order to better understand how our Services are used and to improve functionality. Where you connect your Google account, the associated data is used only to enable the integration features you have chosen and is not employed for advertising or unrelated profiling. All processing is carried out on the basis of legitimate interests, contractual necessity or legal obligation, depending on the context.

Sharing of Information

We do not sell, trade or rent your personal information to third parties. However, we may share your data with carefully selected service providers and business partners who assist us in operating the Services, such as hosting companies, analytics providers, payment processors and customer support platforms, but only to the extent necessary to allow them to perform the services we require. We may also disclose information where required to do so by law or regulatory authority, in order to enforce our agreements or protect the rights, property or safety of ourselves, our users or others. In the event of a merger, acquisition, restructuring or sale of assets, personal data may be transferred to the relevant successor organisation, subject to the same protections set out in this policy.

International Data Transfers

Some of our service providers are located outside the United Kingdom. Where we transfer personal data to countries that have not been deemed to provide an adequate level of data protection, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the relevant authorities, to protect your information in accordance with applicable data protection laws.

Data Storage and Security

We store personal data securely and retain it only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or for the period required by applicable law or regulation. Once the data is no longer needed, it will be deleted or anonymised. We employ appropriate technical and organisational measures designed to protect your data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. While we take these precautions, no system is entirely secure and we cannot guarantee the absolute security of your data.

Cookies and Tracking Technologies

Our Services may use cookies and similar technologies in order to distinguish you from other users, provide certain core functions, enhance your experience, monitor usage patterns and generate analytics that help us to improve the Services. Cookies are small files that are placed on your device and may contain identifiers, preferences or other data. Our analytics services may also record information about how you interact with our Services, including mouse movements and clicks, to help us understand usage patterns and improve functionality. You can configure your browser to refuse some or all cookies, or to alert you when websites set or access cookies. Please note, however, that disabling or refusing cookies may impact the functionality and performance of our Services.

Your Rights

Under data protection legislation including the UK General Data Protection Regulation (UK GDPR), you have rights in relation to the personal data we hold about you. These rights include the ability to request access to your information, to have inaccurate or incomplete data corrected, to request the erasure of your personal data in certain circumstances, to restrict or object to certain processing activities, and to obtain a copy of your data in a portable format. You may also have the right to withdraw consent where processing is based on consent. Requests to exercise your rights should be sent to us at [email protected], and we will respond in line with our legal obligations.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been infringed. You can contact the ICO at ico.org.uk or by post at Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Children's Privacy

Our Services are not directed at individuals under the age of 13 (or the relevant minimum age of consent in your jurisdiction), and we do not knowingly collect personal data from children. If we become aware that such information has been collected, we will delete it as soon as reasonably practicable.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, in legal requirements, or in the functionality of our Services. Any changes will be posted on this page with an updated "Last Updated" date. In some cases, we may notify you by email or within the Services, but we encourage you to review this page periodically to remain informed. Continued use of the Services after such changes will constitute your acceptance of the revised Privacy Policy.