Privacy Policy

1. Who we are

LinqTechub Limited ("LinqTechub", "we", "us" or "our") is a cybersecurity services company registered in England and Wales (Company No. 08412345). Our registered address is 3rd Floor, 86-90 Paul Street, London, England, EC2A 4NE.

We act as a data controller for personal data we collect in connection with our website and marketing activities. Where we process personal data on behalf of clients during security engagements, we act as a data processor under a Data Processing Agreement.

2. Data we collect

We may collect and process the following personal data:

• Identity data — first name, last name, job title, company name
• Contact data — email address, telephone number, business address
• Technical data — IP address, browser type and version, time zone, operating system, device information collected automatically via cookies and analytics tools
• Usage data — information about how you use our website, including pages visited, time spent and referral source
• Communications data — records of correspondence when you contact us via our website forms, email or telephone
• Marketing preferences — your preferences for receiving marketing communications from us

We do not collect any special category data (such as health, biometric or criminal record data) through our website. Where special category data may be encountered during a security engagement, this is governed separately by a Data Processing Agreement.

3. How we use your data

We use your personal data for the following purposes:

• To respond to enquiries and provide the services you have requested
• To manage our contractual relationship with you or your organization
• To send service-related communications (such as engagement reports and invoices)
• To send marketing communications where you have given consent or where we have a legitimate interest
• To improve our website and services through analytics
• To comply with legal obligations, including fraud prevention and regulatory requirements
• To defend or enforce our legal rights

4. Lawful basis for processing

We rely on the following lawful bases under UK GDPR Article 6:

5. Sharing your data

We do not sell your personal data. We may share it with:

• Service providers — cloud hosting, CRM, email delivery, analytics and payment processing providers acting as data processors under contractual obligations
• Professional advisors — lawyers, accountants and insurers where necessary
• Regulatory authorities — the ICO, HMRC or law enforcement where required by law
• Business transfers — in connection with a merger, acquisition or sale of assets, where your data may be transferred to the acquiring entity

6. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected:

• Client data — 7 years after the end of the client relationship (for legal and regulatory compliance)
• Prospect and marketing data — 3 years from last meaningful interaction, or until you withdraw consent
• Website analytics data — 26 months in aggregated, anonymised form
• Enquiry correspondence — 2 years if no engagement commences

7. Your rights

Under UK GDPR, you have the following rights:

• Right of access — to receive a copy of the personal data we hold about you
• Right to rectification — to correct inaccurate or incomplete data
• Right to erasure — to request deletion in certain circumstances
• Right to restrict processing — to limit how we use your data in certain circumstances
• Right to data portability — to receive your data in a machine-readable format
• Right to object — to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making — we do not use solely automated decision-making that produces legal effects

To exercise any of these rights, contact our DPO at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the ICO (ico.org.uk).

8. Cookies

We use the following categories of cookies:

• Strictly necessary — essential for the website to function (no consent required)
• Analytics — to understand how visitors interact with our website (consent required)
• Marketing — to measure the effectiveness of our campaigns (consent required)

You can manage cookie preferences at any time via our cookie preference centre. Withdrawing consent for non-essential cookies will not affect the usability of our core website.

9. International transfers

Where we transfer personal data outside the UK or EEA, we ensure appropriate safeguards are in place, including:

• UK International Data Transfer Agreements (IDTAs) or standard contractual clauses
• Transfers to countries with UK adequacy decisions
• Binding Corporate Rules where applicable

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on our website or, where appropriate, by contacting you directly. The "last updated" date at the top of this page will always reflect the most recent version.

11. Contact & Data Protection Officer

For any privacy-related queries or to exercise your rights, please contact our Data Protection Officer: