Privacy Policy

Who we are

This site is operated by Andy Amos, trading as SimpleCyber ("we", "us"). We are registered with the Information Commissioner's Office (ICO), registration number ZB411656. If you have any questions about this policy or how we handle your data, contact us at hello@simplecyber.co.uk.

The Cyber Essentials self-assessment tool (check.simplecyber.co.uk)

We built this tool so you can check your organisation against Cyber Essentials requirements without giving us any personal details. We do not ask for your name, email address, company name, or phone number as part of the assessment, and your answers are not linked to you personally.

Our website hosting may record your IP address in standard technical logs, as most websites do. We don't use this to identify you or link it to your assessment answers.

We use Google Analytics to understand how the site is used, so we can improve it. Google Analytics uses cookies and processes IP addresses, which UK data protection law treats as personal data. We are reviewing whether our current cookie set-up needs a consent banner under UK cookie law — we recommend checking this with someone who does this day-to-day, since the rules changed under the Data (Use and Access) Act 2025 and we want to get this right rather than guess.

The contact form on simplecyber.co.uk

If you get in touch with us through our contact form, we collect the details you give us (such as your name, email address, and your message) so we can respond to your enquiry. We keep this information for as long as reasonably needed to deal with your enquiry and for a reasonable period afterwards.

We don't sell your information or share it with anyone else for their own marketing purposes.

Who processes data on our behalf

We use the following third-party services to run our website and tools. Each only processes data as needed to provide their service to us:

• Lovable — website hosting and platform
• Supabase — database used by the self-assessment tool
• Resend — sending emails
• Google Analytics — website usage analytics

Some of these providers may process data outside the UK (Google Analytics, in particular, is a US company). Where this happens, it's covered by their own data protection safeguards, such as standard contractual clauses.

Your rights

Under UK data protection law, you have the right to ask us for a copy of any personal data we hold about you, to correct it if it's wrong, to ask us to delete it, to restrict or object to how we use it, and to ask us to move it elsewhere. To use any of these rights, email andy.amos@simplecyber.co.uk.

If you're unhappy with how we've handled your data, you have the right to complain to the ICO at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.