Privacy Policy

This policy covers cyberdesserts.com, blog.cyberdesserts.com, and the AI Maturity Assessment form.

1) Who we are

CyberDesserts is an informational website focused on cybersecurity and AI. Contact: [email protected].

2) What we collect

• Contact details: name and email (e.g., newsletter signups, contact forms, receiving assessment results).
• Assessment responses: your answers used to generate a score/report.
• Technical & usage data: IP address, device/browser, referrer, and page interactions (standard logs/analytics).
• Cookies: for basic functionality and analytics (if enabled).

3) How we use data

• Provide the assessment score/report and optional email delivery you request.
• Run the blog/newsletter you opt into and respond to messages.
• Improve performance, reliability, and security of the site.
• Prevent abuse and troubleshoot issues.

We do not sell personal data or use it for third-party advertising.

4) Hosting & Data Processing

We operate using reliable, security-focused service providers in regions that meet privacy standards (e.g., UK/EU or equivalent safeguards). To protect security and proprietary information, we do not publicly list providers or architecture. Where required by law or regulator, additional details can be provided on legitimate request under confidentiality. All processors act under contract and follow appropriate security measures.

5) Legal bases (UK GDPR/GDPR)

• Consent: newsletters/subscriptions; sending assessment results by email; non-essential cookies.
• Legitimate interests: basic analytics, site security, and platform operation.

6) Retention

• Assessment responses: up to 12 months (for benchmarking/follow-ups), then deleted or anonymised. You can request earlier deletion.
• Contact/subscription data: kept until you unsubscribe or request deletion.
• Analytics/logs: typically 12–24 months (provider defaults may apply).

7) Your rights

Subject to your location, you may request access, correction, deletion, restriction, portability, or object to processing; and withdraw consent at any time. You may complain to your local data authority (e.g., ICO in the UK). Requests: [email protected].

8) Children

This site is not directed to children. Please don't submit children's data.

9) Security

We use HTTPS and reputable infrastructure. No internet transmission is 100% secure; you use the site at your own risk.

10) International transfers & Proprietary Systems

Where data is transferred outside your region, we rely on lawful mechanisms (e.g., Standard Contractual Clauses). Some infrastructure, analytics methods, and assessment logic are proprietary intellectual property and not publicly disclosed.

11) Updates

We may update this policy periodically. The latest version will be posted here with the date above.