Privacy Policy

This privacy policy explains how Fourarmed Cyber Ltd ("we", "us", "our") collects, uses and protects your personal data when you visit our website or get in touch with us. We handle your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Fourarmed Cyber Ltd is the data controller for the personal data described in this policy. We are a company registered in England and Wales, company number 16120197, with our registered office at Castlemead House, St Johns Road, Bristol BS3 1AL.

For any privacy question or request, contact us at info@fourarmed.com or on 0117 945 3900.

What data we collect

• Information you give us. When you complete our contact form or email us: your name, company, email address, phone number, company size, the type of enquiry and anything you tell us in your message.
• Technical data. Like almost every website, our hosting provider records basic technical details of each visit in its server logs, such as your IP address, browser type and the pages requested. These logs are used to keep the site running and secure, not to profile visitors.

We do not use analytics or tracking tools, and we do not build profiles of visitors to our website.

How we use your data

We use your personal data to:

• respond to your enquiry and provide the services you have asked for;
• arrange and carry out a cyber security assessment or engagement;
• keep our business records and meet our legal and regulatory obligations; and
• keep our website running securely.

Our lawful bases for this are our legitimate interests in responding to enquiries and running our business, taking steps towards and performing a contract with you, and your consent, which you give when you submit the contact form. You can withdraw consent at any time by contacting us.

Who processes your data for us

We do not sell your personal data. We use a small number of service providers to run our website and email, who process data on our behalf and only on our instructions:

• Vercel hosts our website and runs the contact form. Form submissions are processed in its London region.
• Brevo delivers contact form submissions to our inbox by email.
• Microsoft and Mimecast provide our email hosting and email security, so they handle any enquiry that reaches our inbox.
• Google Fonts supplies the typefaces our website uses. When a page loads, your browser requests the fonts from Google, which means Google receives your IP address.

We may also share information with professional advisers, or with regulators and law enforcement where we are legally required to. Where a cyber security engagement involves our insurance partners, we only share information with your knowledge and where it is relevant to the service.

International transfers

Some of these providers are based in, or may process data in, countries outside the UK, including the United States. Where that happens, the transfer is protected by safeguards recognised under UK data protection law, such as the International Data Transfer Addendum to the EU Standard Contractual Clauses.

How long we keep your data

We keep personal data only for as long as we need it for the purposes above, including any legal, accounting or reporting requirements. Enquiries that do not lead to an engagement are deleted in line with our internal retention schedule.

Your rights

Under UK data protection law, you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data in certain circumstances;
• object to, or ask us to restrict, how we process your data;
• ask us to transfer your data to another organisation; and
• withdraw your consent at any time, where we rely on it.

To exercise any of these rights, contact us at info@fourarmed.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we would appreciate the chance to put things right first.

Cookies

Our website does not set any cookies. We use no analytics, advertising or tracking cookies, so there is nothing to accept or decline.

Keeping your data secure

Our website is served only over an encrypted connection, including the contact form. Access to the systems that handle your data is limited to the people who need it.

Changes to this policy

We may update this policy from time to time. Any changes will be published on this page with a revised "last updated" date.