Home

Privacy Policy

1. Who we are

CyberTestify (“we”, “us”) is an automated security pre-assessment service. We process personal data in accordance with the UK GDPR and the Data Protection Act 2018 when offering services to customers in the United Kingdom, and with the EU GDPR when offering services to customers in the European Union.

2. What data we collect

We may collect and process:

  • Email address and name (when you create an account or place an order)
  • Domain name / URL you submit for scanning
  • Payment information (processed by our payment provider; we do not store full card details)
  • Technical data (IP address, browser type, device information) for security and fraud prevention
  • Scan-related data strictly limited to the target you have authorised

3. How we use your data

We use the data to:

  • Provide the security scan and deliver the encrypted report
  • Verify domain ownership
  • Process payments and prevent fraud
  • Communicate with you about your order
  • Improve and secure our service

We do not sell your personal data.

4. Legal bases

  • Contract performance (to deliver the service you ordered)
  • Legitimate interests (security, fraud prevention, service improvement)
  • Legal obligation where applicable

5. Data retention

  • Account and order data: kept for as long as your account is active and for a reasonable period afterwards for legal and accounting purposes
  • Scan data and reports: retained only for the time necessary to deliver the report and for a limited period for support; reports are end-to-end encrypted
  • We apply data minimisation and do not keep data longer than needed

6. Sharing of data

We may share data with:

  • Payment processors
  • Infrastructure and email service providers (under data processing agreements)
  • Authorities if required by law

We do not share data with third parties for their own marketing.

7. International transfers

Data may be processed outside the UK/EU. Where this happens we use appropriate safeguards (such as Standard Contractual Clauses) where required.

8. Your rights

Under UK GDPR / EU GDPR you have the right to:

  • Access your data
  • Rectification
  • Erasure (in certain circumstances)
  • Restriction of processing
  • Data portability
  • Object to processing
  • Lodge a complaint with the ICO (UK) or your local supervisory authority

To exercise these rights, contact: support@cybertestify.com

9. Security

We use technical and organisational measures including encryption of reports, access controls and isolation of scanning environments.

10. Contact

For privacy-related requests: support@cybertestify.com