General Data Protection Regulation (GDPR) Policy

General Data Protection Regulation (GDPR) Policy for Nanorisk Limited

Last updated: December 10, 2023
‍
At Nanorisk, we are committed to protecting and respecting your privacy. This Privacy Statement explains how we collect, use, and safeguard your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller
‍
Nanorisk is the data controller for the personal information we process, unless otherwise stated.

2. Types of Personal Data Collected

We may collect and process the following types of personal data:
- Contact Information: Names, addresses, email addresses, and phone numbers.
- Professional Information: Job titles, employer details, and professional affiliations.
- Technical Information: IP addresses, browser types, and other technical information related to your use of our website and services.
- Assessment Data: Information provided to us during cyber security assessments.
‍
3. Purposes of Processing

We process personal data for the following purposes:
- Providing Cyber Security Assessments: Conducting and delivering cyber security assessments and related services.
- Communication: Responding to inquiries, providing information, and communicating updates about our services.
- Marketing: Sending relevant information about our services, events, and industry insights, if you have opted to receive such communications.
- Legal Compliance: Complying with legal obligations and regulatory requirements.
‍
4. Legal Basis for Processing

We process personal data based on the following legal bases:
- Contractual Necessity: Processing necessary for the performance of a contract with you.
- Legitimate Interests: Processing necessary for our legitimate interests, such as improving our services and communicating with our clients.
‍
5. Data Sharing and Transfers

We may share your personal data with third parties, such as our service providers, only when necessary for the purposes outlined in this Privacy Statement. We do not sell or rent your personal data to third parties.

6. Data Security

We implement appropriate technical and organisational measures to ensure the security and confidentiality of your personal data.

7. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law.

8. Your Rights

You have the right to:
- Access your personal data.
- Rectify inaccuracies in your personal data.
- Erase your personal data.
- Restrict processing of your personal data.
- Object to processing of your personal data.
- Data portability.
‍
To exercise these rights or for any inquiries regarding your personal data, please contact us at:

Email: info@nanorisk.co.uk

9. Changes to this Privacy Statement

We may update this Privacy Statement from time to time to reflect changes in our practices or for legal reasons. We encourage you to review this Privacy Statement periodically.

Thank you for choosing Nanorisk for your cyber security needs.