Privacy notice

Data controller

Amethyst Cyber Group is the data controller for personal data collected through this website. Our registered address is Adamson House, Wilmslow Road, Manchester, M20 2YY. You can contact us about privacy matters at info@amethystcybergroup.co.uk.

What we collect

When you submit an enquiry through this website we collect the details you provide: your name, email address, telephone number (optional), company name, the service you are interested in, and any scope notes you choose to include.

Why we collect it and our lawful basis

We collect this information to respond to your enquiry, arrange a scoping conversation, and manage the prospective engagement. Our lawful basis is legitimate interests — specifically, our interest in responding to business enquiries received at our request, balanced against a low privacy impact because the information is submitted voluntarily for the purpose of receiving a response.

No automated decision-making or profiling takes place. No automated quote is generated.

How long we keep it

Enquiry records are retained for up to 12 months from the date of last contact. If an engagement proceeds, data relevant to that engagement is retained in accordance with our contractual obligations and applicable legal requirements. You may request earlier deletion at any time (see your rights below).

Who we share it with

Enquiry submissions are delivered to our Microsoft 365 mailbox and are not stored in any website database. Microsoft acts as a data processor on our behalf under their standard data processing terms. This website is hosted on Cloudflare Pages; Cloudflare also provides bot-protection (Turnstile) on our enquiry form. Cloudflare's privacy policy governs any data processed as part of their infrastructure services.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Cookies and storage

This website uses the following cookies and storage:

• Essential: a cookie to remember that you have acknowledged this cookie notice (acg_cookie_notice, expires after 180 days), and a Cloudflare Turnstile token used during form submission to verify the request is not automated — not retained after submission.
• Analytics (with consent): Google Analytics 4 sets cookies to measure how visitors use this site — pages visited, session duration, and general traffic patterns. No personally identifiable information is collected by analytics. Analytics cookies are only set after you click Accept on the cookie notice. Google Analytics is operated by Google LLC and data may be processed in the United States under Google's standard contractual clauses. Google's privacy policy is available at policies.google.com/privacy.

You can withdraw analytics consent at any time by clearing your cookies. We do not use marketing or advertising cookies.

Your rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — ask us to delete your data where there is no longer a legitimate reason to retain it
• Restriction — ask us to pause processing while a dispute is resolved
• Object — object to processing based on legitimate interests; we will stop unless we can demonstrate compelling legitimate grounds
• Portability — receive a copy of data you provided to us in a structured, machine-readable format

To exercise any of these rights, contact us at info@amethystcybergroup.co.uk. We will respond within one calendar month.

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.