Who we are
Invicta Group Cyber is responsible for the personal information described in this policy. This notice covers our public consultancy website at invictagroupcyber.com and information you send when asking about our services.
Client engagements may involve additional information and processing. The relevant proposal, statement of work, data-processing terms or engagement notice will explain that separately.
Information we collect
We collect only the information needed to operate the site and respond to you:
- Enquiry information. Your name, work contact details, organisation and anything you choose to include in an email or subsequent conversation.
- Website and security records. Request information such as an IP address, date and time, requested path, response status, browser or device details and referring page may appear in delivery and security logs.
- Site preference. If you change the colour theme, your browser stores the value light or dark on your device so the site can remember that choice.
The public contact page opens your own email application. It does not submit a hidden web form or store the message in the website itself.
Why we use it
| Purpose | Our reason |
|---|---|
| Answer an enquiry and prepare a proposal | Taking steps at your request and our legitimate business interests |
| Operate, troubleshoot and improve the public site | Our legitimate interests in providing a reliable service |
| Prevent abuse, investigate incidents and protect our systems | Our legitimate interests and, where applicable, legal obligations |
| Keep contractual, tax or compliance records | Contractual necessity and legal obligations |
We do not sell personal information. We do not use the public website for behavioural advertising. At the date of this policy, the public site does not run optional visitor analytics.
We do not make decisions with legal or similarly significant effects using solely automated processing. Providing enquiry information is optional, but without a working contact method and enough context we may be unable to respond or prepare a proposal.
Cookies and browser storage
The public website does not currently use advertising or analytics cookies. The theme switch stores one preference in your browser. Its value is only light or dark and it is used only to preserve the appearance you selected.
You can remove that preference at any time through your browser's site-data controls. If storage is blocked or cleared, the site continues to work and returns to its default light appearance.
International processing
Some service providers may process information outside the United Kingdom. Where that happens, we use an approved legal transfer mechanism or another safeguard recognised by UK data-protection law, and apply appropriate technical and contractual controls.
How long we keep it
We keep personal information only for as long as it is needed for the purpose described above. The period depends on what the information is and why we hold it.
- Routine website and security records follow bounded operational retention schedules.
- Enquiries are kept while we respond and for a reasonable period afterwards so we can understand the conversation and handle any follow-up.
- Records connected to client work, tax, disputes or legal obligations may need to be retained for longer under the relevant agreement or statutory period.
When information is no longer required, we delete it or remove identifying details.
How we protect it
We use proportionate access controls, encrypted connections, monitored infrastructure, controlled deployment and supplier safeguards. No service can promise absolute security. Our Security page explains how to report a concern without placing other people or systems at risk.
Your rights
Depending on the circumstances, UK data-protection law gives you rights to ask for access, correction, deletion, restriction, portability or an objection to how your information is used. Where processing relies on consent, you can withdraw that consent.
Email hello@invictagroupcyber.com to make a request. We may need to confirm your identity before disclosing or changing information.
You can use the same address to make a complaint about our use of personal information. We will acknowledge a data-protection complaint within 30 days, investigate it, keep you informed where appropriate and provide an outcome without undue delay. You may also complain to the Information Commissioner's Office. We would appreciate the opportunity to resolve the issue with you first.
Changes and contact
We update this notice when the website or our information use changes materially. The date at the top shows the latest revision.
Questions about this notice or our use of personal information should be sent to hello@invictagroupcyber.com.