Privacy Policy

 

Effective Date: March 2025

 

Cyber Wheelhouse ("we", "our", "us") is committed to safeguarding your privacy.

​

This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with applicable laws including the UK GDPR, EU GDPR, UAE Federal Decree-Law No. 45 of 2021 (PDPL), California Consumer Privacy Act (CCPA), and other relevant data protection regulations.

 

1. Who We Are

 

Cyber Wheelhouse is a global cybersecurity and data privacy consultancy that provides:

• Security and privacy assessments (e.g., ISO 27001, SOC 2, PCI DSS, GDPR)

• Virtual CISO (vCISO) services

• Virtual Data Protection Officer (vDPO) services

• Risk and maturity assessments

• Incident readiness and advisory services

 

2. Information We Collect

 

We may collect and process the following personal information:

 

• Contact Data: Name, email, phone, job title

• Business Data: Organisation name, size, industry

• Technical Data: IP address, browser, operating system, device type

• Service Data: Information you share with us as part of engagements

• Marketing Data: Preferences, event registrations, and feedback

 

We do not knowingly collect data from children under the age of 18.

 

3. How We Use Your InformationWe use your personal data to:

 

• Deliver and manage our services and contracts

• Communicate with you regarding your enquiries or projects

• Send thought leadership content and event invitations (with your consent)

• Monitor website performance and analytics

• Comply with applicable legal and regulatory requirements

 

4. Legal Basis for Processing

 

• Our lawful basis for processing personal data includes:

• Consent (for marketing and cookies)

• Contractual necessity (to deliver services)

• Legitimate interests (business development and quality improvement)​

• Legal obligations (compliance with global privacy frameworks)

 

5. International Data Transfers

 

We are based in the UK and operate globally.

 

Where data is transferred internationally (including to the UAE, EU, and US), we ensure appropriate safeguards such as:

• Standard Contractual Clauses (SCCs)

• Adequacy decisions

• Binding Corporate Rules (BCRs) where applicable

 

6. Your Rights

 

Depending on your jurisdiction, you may have rights to:

• Access your data

• Correct or erase your data

• Restrict or object to our use of your data

• Data portability

• Withdraw consent at any time

• Lodge a complaint with your local data protection authority

 

For UAE residents, rights are granted under the UAE PDPL, which includes:

• Right to be informed

• Right of access and correction

• Right to restrict or stop processing

 

To exercise any of these rights, contact us at: privacy@cyberwheelhouse.com

 

7. Data Security

 

We implement strong technical and organisational controls to protect personal data, including:

• Encryption and access controls

• Network security and secure communications

• Internal policies and staff training

 

8. Data Retention

 

We retain data only for as long as necessary:

 

• To fulfil our contractual obligations

• As required by law or regulations

• In accordance with best practices in information governance

 

9. Third Parties and Processors

​

We may share your information with third parties such as:

• Cloud hosting and analytics providers

• Marketing and CRM platformsLegal or regulatory authorities

• All third parties are contractually bound to maintain the confidentiality and security of your data.

​

10. Cookies

 

We use cookies and similar technologies for website performance and analytics.

You can accept or reject non-essential cookies through our cookie banner or browser settings.

 

For more information, see our Cookie Policy.

 

11. California Residents (CCPA)

 

If you are a California resident, you have specific rights under the CCPA including:

• Right to know what personal information we collect and how we use it

• Right to delete personal information

• Right to opt-out of the sale of personal data (note: we do not sell personal data)

 

To exercise your rights, email us at: privacy@cyberwheelhouse.com

 

12. Changes to This Policy

 

We may update this Privacy Policy to reflect changes in laws or our practices.

 

The updated version will be posted on our website with a revised effective date.

 

13. Contact Us

 

If you have any questions or concerns, please contact: 

• Data Protection Officer: Cyber Wheelhouse

• Email: privacy@cyberwheelhouse.com