Privacy policy
Last updated: 11 November 2026
This policy explains how Zero Boundary Cyber Limited (“we”, “us”) uses personal information when you visit this website or contact us. We keep it short because we collect very little.
1. Who we are
Zero Boundary Cyber Limited is the controller of your personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
- CompanyZero Boundary Cyber Limited, registered in England and Wales, company number 16830863
- Registered officeUnit A, James Carter Road, Bury St Edmunds, IP28 7DE, United Kingdom
- Contacthello@zeroboundarycyber.com
We are a small company and have not appointed a data protection officer, as the law does not require us to. Please send any privacy question to the email address above.
2. What we collect
When you contact us. The contact form on this website does not send anything to us directly. It opens your own email app with your message filled in, and you choose whether to send it. When you email us, by the form or directly, we receive:
- your name and email address;
- anything you include in your message, such as your job title, organisation, phone number and details of what you would like help with; and
- the technical details that come with any email, such as the date and time sent.
Please don’t send passwords, access keys or sensitive personal information (for example, about health) in an enquiry. If we need technical details to help you, we will agree a secure way to share them.
When you visit the website. We do not use analytics, advertising or tracking tools, and we do not set cookies. Like any website, our hosting provider automatically receives technical information when your browser requests a page, such as your IP address, browser type, the page requested and the time. This is used to deliver the website and keep it secure (see section 5).
LinkedIn. If you contact us on LinkedIn, LinkedIn’s own privacy policy covers its use of your information. We use the messages you send us in the same way as an email enquiry.
3. Why we use it, and our lawful basis
| What we do | Lawful basis under UK GDPR |
|---|---|
| Reply to your enquiry and keep a record of our conversation | Legitimate interests: responding to people who contact us and running our business. Where you are asking about our services, also taking steps at your request before entering into a contract. |
| Prepare a proposal or contract if you want to work with us | Taking steps at your request before entering into a contract. |
| Keep business and accounting records | Legal obligation (for example, company and tax record-keeping). |
| Deliver and secure this website (hosting logs) | Legitimate interests: making the website available and protecting it from misuse and attacks. |
| Establish, exercise or defend legal claims | Legitimate interests: protecting our legal rights. |
We do not sell your information, use it for profiling, or make automated decisions about you. We will not add you to a marketing list or send you marketing emails unless you ask us to. You don’t have to give us any information, but we can’t reply to an enquiry without a way to contact you.
If a consultancy engagement involves us handling personal information on a client’s behalf (for example, in the client’s cloud systems), that is covered by our written agreement with the client, not by this policy.
4. How long we keep it
Our policy is to:
- keep enquiries that don’t lead to work for 24 months after our last contact, then delete them;
- keep correspondence and records about clients for as long as we work together and then for 6 years after the engagement ends, to meet tax and accounting requirements and to deal with any legal claims; and
- leave website hosting logs to our hosting provider’s standard short-term retention. We do not keep copies of them ourselves.
We may delete information sooner if you ask and we don’t need to keep it.
5. Who we share it with
We only share personal information with service providers who help us run the business, and only as needed:
- Our email provider, Microsoft (Microsoft 365), stores and delivers our email, including your enquiry.
- Cloudflare, Inc. hosts this website through Cloudflare Pages and protects it from attacks. Cloudflare processes IP addresses and other technical request data to deliver pages and provide security. See Cloudflare’s privacy policy.
- Professional advisers, such as our accountant, insurer or lawyers, when needed for those services.
- Authorities, such as HMRC or the police, if the law requires us to.
This website does not load fonts, scripts or other content from Google or any other third party. All of it is served from our own hosting.
6. International transfers
Some of our providers, including Cloudflare, are based in the United States or use servers outside the UK. Where personal information is transferred outside the UK, we rely on a UK adequacy regulation (such as the UK Extension to the EU–US Data Privacy Framework, where the provider is certified) or on the UK International Data Transfer Agreement or Addendum that the provider includes in its data processing terms. You can ask us for more information about these safeguards.
7. Cookies and similar technologies
This website does not set any cookies and does not use analytics, advertising or tracking technologies, so we do not show a cookie banner. If we ever add anything that stores or reads information on your device and isn’t covered by an exception in the Privacy and Electronic Communications Regulations 2003 (PECR), we will update this policy and ask for your consent first where the law requires it.
8. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- ask us to restrict how we use it;
- ask us to transfer information you gave us to you or another organisation, where this applies; and
- withdraw any consent you have given, at any time.
Your right to object. Where we rely on legitimate interests, you can object to us using your information at any time. We will stop unless we have a compelling reason to continue, such as defending a legal claim.
To use any of these rights, email hello@zeroboundarycyber.com. It’s free, and we will normally respond within one month. We may need to confirm your identity first.
9. Complaints
If you are unhappy with how we have used your information, please tell us first at hello@zeroboundarycyber.com. We will acknowledge your complaint within 30 days, look into it promptly and tell you the outcome.
You also have the right to complain to the UK data protection regulator, the Information Commission (known as the ICO):
- Websiteico.org.uk/make-a-complaint
- Helpline0303 123 1113
- PostInformation Commission, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
10. Changes to this policy
We may update this policy, for example if we change providers or add features to the website. The date at the top shows when it last changed.