Privacy notice
CyberProtect health check · Last updated [date]
Who we are
This health check is provided by CyberProtect and delivered by Onecom Partners, part of [Onecom Group Ltd, company number …, registered address …] ("we", "us"). We are the data controller for the information described here.
What we collect
- Your work email address, which you give us to receive a verification code and open your report.
- How you use your report: when you open it, how long it's on screen, which sections you expand, whether you download the PDF or click to book a review, and which link or QR code brought you here.
- A one-way hash of your IP address, used only to stop abuse of the verification codes. We can't turn it back into your IP address.
The report itself is based on publicly available and third-party threat intelligence about your company's domain. It doesn't come from your systems.
Why we use it
- To check you work at the company the report is about, and show it only to people who do.
- To follow up with you about the findings and about CyberProtect and other Onecom Partners services that may help.
- To understand which parts of the report are useful, so we can improve it.
Our lawful basis is our legitimate interest in providing the report you asked for and discussing it with you as a business contact. You can object at any time (see below).
Who we share it with
Your information is seen only by the Onecom Partners and CyberProtect team members working with your company. We use trusted processors to run the service: Cloudflare (hosting and storage) and [email provider] (sending verification codes). We don't sell your information.
How long we keep it
We keep your email and activity for [12 months] after your last visit, then delete it. Verification codes expire after 10 minutes and are stored only as a one-way hash.
Your rights
You can ask to see, correct or delete your information, or object to us using it, by emailing [privacy@onecom.co.uk]. You can also complain to the Information Commissioner's Office at ico.org.uk.
Cookies
We set one essential cookie after you verify your email, so you can come back to your report without a new code. It lasts 30 days. We don't use advertising or analytics cookies.