Privacy Policy

Cycubix Limited

This policy explains how Cycubix Limited collects, uses, shares and protects personal information. We have written it in plain language. If anything is unclear, please contact us using the details in section 13.

1. Who we are

Cycubix Limited is a company registered in Ireland under company number 502946, with its registered office at Block 4, Harcourt Centre, Harcourt Road, Dublin 2, D02 HW77, Ireland.

We are the data controller for the personal information described in this policy. This means we decide how and why it is used.

We have not appointed a Data Protection Officer, because we are not required to appoint one. Responsibility for data protection rests with our directors. Privacy queries are handled through the contact details in section 13.

2. What this policy covers

This policy applies when you:

  • visit cycubix.pro
  • contact us by email, telephone or through our website;
  • subscribe to our newsletter or download our resources;
  • register for or attend one of our training courses, including through Cycubix Academy;
  • engage us for consultancy services; or
  • deal with us as a supplier, professional adviser or business contact.

It does not cover websites operated by other organisations that we link to. Those sites have their own privacy policies, and we are not responsible for them.

3. The personal information we collect, and why

What we collectWhy we use itOur legal basisHow long we keep it
Enquiries and correspondence
Your name, email address, telephone number and the content of your message.
To answer your question and give you the information or support you have asked for.Our legitimate interests in running our business and responding to people who contact us.24 months after your last contact with us.
Newsletter and marketing
Your name, email address, and whether you click links in the emails we send.
To send you our newsletter, updates and information about our training and services.Your consent.Until you unsubscribe, and in any event after 24 months without engagement.
Training courses
Your name, email address, employer, registration details, attendance records, course progress, coursework and assessment results.
To register you, give you access to course materials, deliver the training and issue certificates.Performance of our contract with you, or with the organisation that registered you.24 months after the course ends.
Consultancy engagements
Your name, job title, employer, contact details, and information contained in engagement records, findings and reports.
To deliver the services we have been engaged to provide.Performance of our contract.24 months after the engagement ends.
Billing and payments
Your name, billing address, contact details, and invoice and payment records.
To raise and settle invoices, and to keep the financial records the law requires us to keep.Performance of our contract, and compliance with our legal obligations under the Companies Act 2014 and the Taxes Consolidation Act 1997.6 years from the end of the financial year the records relate to.
Contracts and agreements
Names, contact details and signatures of the people who sign or manage contracts with us, including non-disclosure and data processing agreements.
To manage our contractual relationships, and to establish, exercise or defend legal claims.Performance of our contract, and our legitimate interests in protecting our legal position.6 years after the contract or relationship ends.
Website use
IP address, browser and device information, operating system, approximate location based on your IP address, and the pages you visit.
To keep the website secure and available, and to understand how it is used so that we can improve it.Security and availability: our legitimate interests. Analytics: your consent.Security records: no longer than 12 months. Analytics information: no longer than 14 months.

Where we hold personal information that is not listed above, we keep it only for as long as we need it for the purpose we collected it for. After that we delete it or make it anonymous.

Do you have to give us this information?

Contacting us and subscribing to our newsletter are entirely optional. If you choose to do either, we need your name and email address in order to reply or to send you what you have asked for. Without them we cannot respond.

If you register for a course, engage us for consultancy, or enter into a contract with us, the information listed above is needed to enter into and carry out that contract. Without it we cannot register you, deliver the service, issue a certificate or raise an invoice. Once a contract is in place, Irish company and tax law also require us to keep records of invoices and payments.

Information about how you use our website is collected automatically when you visit. You are not obliged to provide it, and you can decline non-essential cookies at any time.

4. Where we get your information from

We collect personal information directly from you, or from the organisation that registers you for a course or engages us on its behalf.

5. Cookies and similar technologies

Cookies are small files placed on your device when you visit a website. We also use similar technologies, such as scripts and pixels.

When you first visit cycubix.pro, a consent banner appears. You can accept all cookies, reject all non-essential cookies, or choose which categories to allow. Essential cookies are always active, because the site cannot work without them. Everything else stays switched off until you turn it on.

You can change your choice at any time using the preferences option in the banner, or by clearing cookies in your browser.

CategoryWhat it is forProviders
Necessary
Always active
Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.Cloudflare, Active Campaign, Cookiebot
Statistics
Consent required
Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.Google
Preferences
Consent required
Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.None currently in use
Marketing
Consent required
Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.None currently in use

6. Who we share your information with

We use third-party providers to run our business and deliver our services. Where they process personal information on our behalf, they act as our processors under a written agreement. That agreement requires them to keep your information confidential, to use it only on our instructions, and to apply appropriate security measures.

Our current providers are:

Category of providerWhat we use them for
Business productivity and collaborationEmail, calendar, document storage and collaboration.
Learning platformsDelivery and administration of our training courses, including learner registration, course access, progress and completion records.
Marketing and email communicationsSending our newsletter and updates, and managing contact lists and subscription preferences.
Accounting and financial administrationInvoicing, payments and financial record keeping.
Business records and work managementInternal documentation, business records and management of our work.
Website hosting, security, analytics and consent managementHosting our website, protecting it against malicious traffic, measuring how it is used, and recording your cookie choices. The providers setting cookies are named in section 5.

We may also share personal information with:

  • our accountants, auditors, legal advisers and other professional advisers;
  • our bank and other financial institutions, in connection with payments;
  • marketing, IT, security and other operational service providers; and
  • anyone we are required to share it with by law, or where it is necessary to establish, exercise or defend legal claims.

We do not sell your personal information, and we do not share it for other organisations' marketing purposes.

Our suppliers change from time to time. Where that happens, the categories of recipients and the purposes described in this policy remain the same. You can ask us for the current list at any time.

7. Sending information outside the European Economic Area

Some of our providers are based outside the European Economic Area, or store information outside it. Where that happens, we rely on one of the following safeguards:

  • a decision by the European Commission that the country concerned offers an adequate level of protection;
  • for providers in the United States, certification under the EU-US Data Privacy Framework; or
  • standard contractual clauses approved by the European Commission, together with any additional measures needed in the circumstances.

You can ask us for details of the safeguard that applies to a particular transfer by contacting privacy@cycubix.pro.

8. How we protect your information

We are a cybersecurity company, and we apply the standards we advise our clients to meet. We operate an information security management system aligned to ISO/IEC 27001. Our measures include:

  • encrypting information in transit, and at rest where the systems we use support it;
  • access controls and multi-factor authentication on the systems that hold personal information;
  • selecting providers on the basis of their security and data protection arrangements; and
  • reviewing our security arrangements and the risks we face on a regular basis.

No system can be made completely secure. If a breach occurs that is likely to result in a high risk to your rights and freedoms, we will tell you without undue delay.

9. Automated decision-making and profiling

We do not make decisions about you by automated means alone, and we do not build profiles or scores about you.

We do record whether links in our marketing emails are clicked, so that we can see which content readers find useful. We use this to improve what we send, not to make decisions about individuals.

10. Your rights

You have the following rights in relation to your personal information. Some apply only in certain circumstances, and some are subject to exemptions.

  • Access (Article 15): to obtain a copy of the personal information we hold about you, together with information about how we use it.
  • Rectification (Article 16): to have inaccurate information corrected, or incomplete information completed.
  • Erasure (Article 17): to ask us to delete your personal information.
  • Restriction (Article 18): to ask us to limit how we use your information.
  • Portability (Article 20): to receive information you have given us in a structured, commonly used, machine-readable format, and to have it sent to another organisation.
  • Objection (Article 21): to object to our use of your information. Where you object to direct marketing, we will always stop.
  • Withdrawal of consent (Article 7(3)): where we rely on your consent, to withdraw it at any time. This does not affect anything we did before you withdrew it.

To exercise any of these rights, email privacy@cycubix.pro, or write to us at the address in section 13.

We will respond within one month. If your request is complex, or if you have made several requests, we may extend that period by up to two further months. We will tell you within the first month if we need to do so. We may ask you to confirm your identity before we act, so that we do not disclose your information to someone else. There is no charge for making a request.

11. How to make a complaint

If you are unhappy with how we have handled your personal information, please contact us first at privacy@cycubix.pro. We will do our best to resolve the matter.

You also have the right to complain to the Data Protection Commission:

Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland

Telephone: (01) 765 0100 or 1800 437 437

Website: www.dataprotection.ie

The Data Protection Commission does not accept complaints by telephone. Complaints are made in writing, using the webform on its website.

12. Changes to this policy

We review this policy periodically, and whenever there is a material change to how we use personal information, to the providers we use, or to the law that applies to us. The current version is always available at www.cycubix.pro/privacy-policy. Where a change materially affects you, we will tell you.

13. How to contact us

Cycubix Limited, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, D02 HW77, Ireland

Privacy and data protection queries: privacy@cycubix.pro

General enquiries: info@cycubix.pro

Telephone: +353 1 477 3265

} } } }) } }