1. Who is responsible for your information
White Label Cyber Limited, company number 17525901, is the controller responsible for the personal information described in this notice. We are registered in England and Wales and are a subsidiary of Vambrace Plc.
Registered office: Suite 29 Airedale House Business Centre, 423 Kirkstall Road, Leeds, United Kingdom, LS4 2EW.For privacy questions or to exercise your rights, email sales@whitelabelcyber.com, with “Privacy request” in the subject, or write to our registered office.
This notice covers this website and business enquiries made to us. Information processed as part of delivering a contracted service, including customer security data, is governed by the relevant service arrangements and any additional privacy information provided for that service.
2. Information we use
- Enquiry information you provide: your name, company, work email, services of interest, timescale, requirements and subsequent correspondence.
- Technical information: information sent when your browser requests a page, such as IP address, browser details, requested URL and time of access. Hosting and security services process this to deliver and protect the website.
- Enquiry context: the website page on which you submit your enquiry. If you choose the email fallback, the draft may also include campaign labels from the link you followed.
We receive enquiry information from you, or from a colleague who contacts us on your organisation’s behalf. Please provide only information relevant to the enquiry and do not include passwords, access credentials or sensitive customer data.
3. How and why we use information
Responding to business enquiries
We use contact details and requirements to answer questions, prepare quotations, arrange discussions and follow up on a request. For contacts acting for a business, our lawful basis is legitimate interests in responding to requests and developing relevant business relationships, balanced against your privacy rights. Where you are personally a party to a contract, processing necessary to take steps you request before entering that contract, or to perform it, may instead rely on the contract basis.
Operating and protecting the website
Our legitimate interests are to deliver a reliable website, diagnose faults and prevent misuse. We use the technical information necessary for those purposes.
Legal obligations and rights requests
We use information where necessary to comply with applicable legal duties, including responding to data protection requests. Records needed to establish, exercise or defend legal claims are handled for our legitimate interests in protecting legal rights.
Making an enquiry does not automatically subscribe you to a newsletter. If we ask for consent for a separate purpose, we explain that purpose when asking. You can withdraw consent at any time without affecting processing that was lawful before withdrawal. You can object to use of your information for direct marketing at any time.
4. How the enquiry form works
When you select Send enquiry, the form submits your details to our enquiry service and stores the enquiry in our CRM database hosted by Supabase. No customer account or sign in is required. If submission cannot be confirmed, the form offers an email fallback for you to review and send yourself.
Our website code does not save the form fields in cookies or local storage. Submitted enquiries are stored in the CRM for authorised team members to manage and may be included in internal email notifications. Your browser, device or email application may retain information under its own settings.
You choose whether to contact us. The form asks for your name, company and email so that we can understand and respond to the request; if you prefer, you can email us directly. Optional fields help us prepare a useful response.
6. Processing outside the United Kingdom
Our hosting, email and customer relationship providers operate internationally. Information may therefore be stored or accessed outside the UK, depending on the service and support arrangements.
Where a transfer is restricted by UK data protection law, it requires an applicable transfer mechanism, such as UK adequacy regulations or approved contractual safeguards. These may include the UK International Data Transfer Agreement or the UK Addendum to the European Commission’s standard contractual clauses. Contact sales@whitelabelcyber.com for details of the arrangements relevant to your information and how to obtain a copy of the applicable safeguards.
7. How long information is kept
Retention depends on why the information is needed. We determine how long enquiry information is needed by considering whether the request is still active, the follow-up you have asked for or would reasonably expect, whether a customer relationship results, and any applicable legal, accounting or dispute-related requirements.
An enquiry that does not lead to business should not be kept indefinitely simply because it was received. Once there is no continuing purpose or requirement to retain it, it should be deleted or anonymised. Technical and security records follow the relevant provider’s operational and security retention arrangements.
For information about retention of a particular enquiry or record, or to request deletion, contact sales@whitelabelcyber.com. Any applicable legal retention requirement may limit when a record can be deleted.
8. Your rights and complaints
Depending on the circumstances and the lawful basis, you can request access to your personal information, correction of inaccurate information, deletion, restriction of use, or transfer of information in a portable format where that right applies.
You can object to processing based on legitimate interests on grounds relating to your particular situation. You also have an unconditional right to object to direct marketing. Where processing relies on consent, you can withdraw it. Contact sales@whitelabelcyber.com to make a request. We may need to confirm your identity before disclosing or changing information, and will respond within the applicable legal time limit.
The enquiry form does not make decisions about you that have legal or similarly significant effects through solely automated processing.
We welcome the opportunity to address concerns, but you can complain directly to the Information Commissioner’s Office, the UK data protection regulator. You do not need our permission to do so.
10. Changes to this notice
We update this notice when our website or the way we handle enquiries changes. The date at the top shows the latest update. Where a change materially affects how your information is used, we will provide further information as appropriate.