top of page

PRIVACY NOTICE

Blue Ark Cyber Customer Privacy Notice

​

Registered Name: Blue Ark Cyber

​

This privacy notice outlines how we handle your personal information, including:

  • Contact details

  • What information we collect, use, and why

  • Lawful bases and data protection rights

  • Where we get personal information from

  • How long we keep information

  • Who we share information with

  • How to complain

​​

Contact Details

 

What Information We Collect, Use, and Why

 

We collect and use your personal information as follows:

 

To provide services and goods, including delivery:

  • Names and contact details

  • Payment details (e.g., card or bank information for transfers and direct debits)

  • Website user information (e.g., user journeys, cookie tracking)

​​

To operate customer accounts and guarantees:

  • Names and contact details

  • Payment details

  • Security-related information

​

For service updates or marketing purposes:

  • Names and contact details

  • Addresses

  • IP addresses

  • Website and app user journey information

​​

To comply with legal requirements:

  • Names and contact information

  • Financial transaction information

​​

Lawful Bases and Data Protection Rights

​

We process your data under the following lawful bases:

  • Consent: You have given permission for us to use your information. You can withdraw this consent at any time.

  • Contract: We require your data to enter into or fulfill a contract with you.

  • Legal Obligation: We process data to comply with applicable laws.

  • Legitimate Interests: We use your data when it benefits you, our business, or others, without causing undue harm. Examples include improving services, fulfilling customer requests, and ensuring operational security.

​

Your Data Protection Rights

​

Under UK GDPR, you have the following rights:

  • Right to Access: Request copies of your personal data.

  • Right to Rectification: Request corrections to inaccurate or incomplete data.

  • Right to Erasure: Request deletion of your data (with some exceptions).

  • Right to Restrict Processing: Ask us to limit the use of your data.

  • Right to Object: Object to specific uses of your data.

  • Right to Data Portability: Request that your data be transferred to another organization.

 

To exercise these rights, contact us at info@bluearkcyber.com. We will respond within one month.

 

Where We Get Personal Information From

  • Directly from you

  • Publicly available sources

  • Suppliers and service providers

  • Website forms and emails

 

How Long We Keep Information

 

RETENTION SCHEDULE

 

Who We Share Information With

 

We may share personal data with:

  • External auditors or inspectors

  • Professional consultants

  • Publicly on our website, social media, or marketing materials (only with your explicit consent)

 

Our Security Measures

 

At Blue Ark Cyber, we prioritize the protection of your data and systems. Key security measures include:

  • HTTPS Encryption: Secures all communications.

  • Identity & Access Management (IAM): Enforces strict access controls and strong passwords.

  • Multifactor Authentication (MFA): Adds an additional layer of user verification.

  • Session Time-Outs: Logs out inactive sessions automatically.

  • Data Encryption: Protects sensitive data both in transit and at rest.

  • Up-to-Date Systems: Ensures vulnerabilities are patched promptly.

  • Endpoint Detection & Response (EDR): Monitors endpoints for malware and threats.

  • Firewalls: Safeguard networks by managing traffic.

  • Regular Patching: Ensures systems are always up to date.

 

Data Transfers

  • UK-Based Infrastructure: All data stored on Blue Ark Cyber’s infrastructure is located within the UK. Our infrastructure is fully owned and operated by us.

  • Cloud Providers: For third-party cloud services like Microsoft, we maintain data tenants within the country where we operate. These providers adhere to all applicable data protection laws, such as UK GDPR, to ensure data security.

 

Public Data Sharing

We never share or publish your personal information publicly without your explicit consent. If data is needed for public purposes, such as testimonials or marketing materials, we will seek your clear, informed agreement beforehand.

 

​

How to Complain

If you have concerns about how we use your data, contact us:

 

If you are unsatisfied with our response, you can complain to the Information Commissioner’s Office (ICO):

​

​

 

Last Updated

10 January 2025

​

​

bottom of page