The short version:
We collect your data in the following ways and for the following reasons:
- Using Amazon Web Services Cloudfront logging to identify technical issues on the website. Logged data includes IP and user agent data and is deleted after 14 days.
- Using Google Analytics so that we can see which parts of our website are helpful and which aren’t. This is done anonymously.
- Using our contact forms so that we can get in touch with you but only when you explicitly ask us to.
- Using our email signup form so we can email you with content updates and to ask for feedback about our services and content.
We do not offer any personalised adverts on our page nor do we sell any of your data to third parties.
The long version:
Who we are?
Clear Cut Cyber Ltd is a private limited company registered in the UK. We can be contacted at email@example.com.
What information do we collect and how do we use it?
We use Amazon Web Services Cloudfront to distribute our website. We collect technical logs of activity on the website. This information includes the IP address of the requester and their user agent. This information is collected so that we can diagnose when something is not working on the website (e.g. when a user receives an error message). These logs are securely stored and deleted after 14 days.
We use a third party service, Google Analytics (GA4), to provide us with information about how our website is used. This allows us to understand which areas of the website are useful and which are not so that we can make improvements. GA4 collects session statistics, approximate geolocation and browser and device information. GA4 does not collect IP addresses.
We may collect personal details such as name, email address and phone number if you submit these through one of our contact forms. We use this data to get in contact with you. This data is processed by Amazon Web Services and stored in Google’s Cloud. Outside of our data processors we do not share your data with any other parties.
We collect email addresses if submitted through our registration form. We use this email for feedback (e.g. "what do you think of our content?") and marketing (e.g. "would you be interested in X?"). With the exception of Amazon Web Services operating in a data processor capacity, these email addresses are not shared outside of Clear Cut Cyber Ltd. We do not sell them.
What legal basis do we have for processing your personal data?
We only process your data when you submit it via our contact or registration form. By submitting this data you consent to us using it solely for the purposes of contacting you. Data processed by Google Analytics has been anonymised and so is not personally identifiable. Data processed by Amazon Web Services is essential to the operation of our website, or has been explicitly submitted by you through one of our contact forms.
When do we share personal data?
We do not share your personal data for any commercial reasons. We use Google Analytics and Amazon Web Services to process your data for security, performance and functionality reasons. See “What information do we collect and how do we use it?” for details of why we do this.
Google Analytics data is only collected after you have accepted the cookie prompt.
Where do we store and process personal data?
We store our data using Google’s Cloud services. This data may be stored in data centres both inside and outside the European Economic Area.
We process and in some cases store user data submitted via our contact forms using Amazon Web Services. This data is collected by Amazon Web Services Cloudfront edge locations near to the requester but stored and analysed in UK based data centres.
We collect and store technical logs of website users on Amazon Web Services. This data is collected by Amazon Web Services Cloudfront edge locations near to the requester but stored and analysed in UK based data centres.
How do we secure personal data?
Personal data is secured using Google’s Cloud services and/or Amazon Web Services. This information is not shared with anyone outside of Clear Cut Cyber Ltd. Details of how Google comply with GDPR can be found at https://cloud.google.com/security/gdpr/.
Personal data transmitted to us using one of our contact forms is encrypted during transit and when stored to disk.
How long do we keep your personal data for?
We keep the personal data you submit via the contact form only as long as it takes to get in contact with you. If we cannot get in contact with you within 1 month we will delete your data. Email addresses submitted through the registration form are kept indefinitely, or until you request for the email address to be deleted (www.clearcutcyber.com/unsubscribe).
Anonymised Google Analytics data is retained for 36 months.
Technical website logs are automatically deleted after 14 days.
Your rights in relation to personal data
You have the right to access all information held about you by us, request corrections to this data or to request it be deleted. You have the right to use any data received from us concerning you for your own purposes. You have the right to request that we restrict the processing of your information – for more details refer to https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-restrict-processing/.
You can exercise your rights at any time by emailing us at firstname.lastname@example.org.
Use of automated decision-making and profiling
We do not use automated decision making or profiling.
How to contact us?
If you’ve any questions please contact us at email@example.com.
Cookies are text files placed on your computer to collect standard Internet log information and visitor behaviour information. When you visit our website, we may collect information from you automatically through cookies or similar technology. For further information, visit allaboutcookies.org.
We use the following cookies for the following reasons:
- Google Analytics (cookie names = _ga, _gat, _gid). These are used by Google Analytics to see how you use our website. This data is anonymised.
- CloudFront restricted content (cookie names = CloudFront-Policy, CloudFront-Signature, CloudFront-Key-Pair-Id). These are set after you register to watch our video content and click on the link in the email you receive. They are valid for 30 days and allow you to return to the website and view restricted content without submitting your email address again.