Privacy Policy

1. Who we are

Cyberou is a trading name of Daniel Kelley, based in England, United Kingdom. We provide content creation, security research, and influencer marketing services to cybersecurity companies. For the purposes of data protection legislation, Cyberou is the data controller.

2. What data we collect

We collect and process the following personal data:

• Name, email address, and company name when you subscribe, enquire, or contact us
• Billing information (processed securely through our payment provider)
• Communications sent via email or Trello in the course of delivering services
• Website usage data including IP address, browser type, and pages visited (collected via analytics tools)

3. How we use your data

We use personal data to:

• Deliver the services you have subscribed to or purchased
• Communicate with you about your account, content requests, and deliverables
• Process payments and send invoices
• Improve our website and services
• Send occasional updates about Cyberou services (you can opt out at any time)

4. Legal basis for processing

We process your data on the following legal bases:

• Contract: Processing necessary to deliver the services you have purchased
• Legitimate interest: Improving our services, website analytics, and business communications
• Consent: Marketing communications, which you can withdraw at any time

5. Data sharing

We do not sell, rent, or trade your personal data. We may share data with:

• Payment processors to handle billing securely
• Trello (Atlassian) for project management and service delivery
• Email service providers for communication
• Analytics providers to understand website usage

All third-party providers are contractually required to protect your data and process it only as instructed.

6. Data retention

We retain your personal data for as long as necessary to provide our services and fulfil legal obligations. Client communications and project files are retained for the duration of the engagement plus 12 months. Billing records are retained for 6 years in accordance with UK tax requirements.

7. Your rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal obligations)
• Object to or restrict processing of your data
• Request data portability
• Withdraw consent for marketing communications at any time

To exercise any of these rights, contact us at [email protected].

8. Cookies

Our website uses essential cookies for functionality and analytics cookies to understand how visitors use the site. Analytics data is aggregated and does not identify individual users. You can control cookie preferences through your browser settings.

9. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All communications are encrypted in transit and payment data is handled by PCI-compliant processors.

10. International transfers

Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including standard contractual clauses or adequacy decisions.

11. Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Material changes will be communicated to active subscribers via email.

12. Contact

For questions or requests regarding your personal data, contact us at [email protected].

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Last updated: February 2026