Privacy Policy

1. Who we are

Golden Valley Cyber is a trading brand of Soft Innovators UK Ltd. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Soft Innovators UK Ltd is the data controller responsible for personal information collected through this website.

Soft Innovators UK Ltd
Frogmore House
6 Ormond Place
Cheltenham, GL50 1JD, United Kingdom

Registered in England & Wales, company number 06890751.

2. Information we collect

We collect only the information necessary to respond to enquiries, deliver services and operate this website securely. This may include:

• Your name and contact details when you use our contact form.
• Your email address when you contact us directly.
• The subject and content of any message you send us.
• Technical information such as IP address, browser type and pages visited, collected through strictly necessary cookies and analytics.

3. How we use your information

We use personal information to:

• Respond to enquiries and provide requested services.
• Communicate with you about security audits, ISO 27001 implementation, application security, vulnerability scanning and penetration testing.
• Maintain the security and integrity of this website.
• Meet our legal and regulatory obligations.

We do not sell personal information to third parties.

4. Legal basis for processing

We process personal information on the following legal bases:

• Consent — where you have given consent for optional cookies or marketing communications.
• Contract — where processing is necessary to respond to an enquiry or provide a service.
• Legitimate interests — where processing is necessary to operate and secure our business, and does not override your rights.
• Legal obligation — where we are required to retain information by law.

5. Cookies

We use strictly necessary cookies to keep this website secure and functional. With your consent, we may also use analytics and customisation cookies. You can manage your preferences at any time through the cookie banner and withdraw consent for non-essential cookies.

6. Sharing your information

We do not sell or trade personal information. We may share information with trusted service providers who help us operate this website and deliver services, under contracts that require them to protect your information and process it only on our instructions.

7. Data retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law.

8. Your rights

Under UK data protection law, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request erasure of your information.
• Object to or restrict certain processing.
• Withdraw consent at any time.
• Lodge a complaint with the Information Commissioner's Office (ICO).

9. Security

We apply appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure or destruction.

10. Contact

To exercise your rights or ask about this policy, contact us at hello@gvcyber.com or write to the registered address above.