Skip to main content
  • Home
    • SaaS Security Assessment Web, API, access control, and cloud configuration testing for a SaaS product.
    • Continuous Security Retainer Ongoing review of new features, fixes, and infrastructure changes.
    • AI Application Security Review Security testing for LLM features, agents, RAG pipelines, and tool access.
  • Methodology
  • Sample Report
  • Research
  • No Hack, No Pay
Request a Scope Review
  • Home
Services
  • SaaS Security Assessment
  • Continuous Security Retainer
  • AI Application Security Review
  • Methodology
  • Sample Report
  • Research
  • No Hack, No Pay
Request a Scope Review
  1. Home
  2. Privacy Policy
Legal

Privacy Policy

How the Company handles personal data relating to this website and business enquiries.

Effective date: 25 October 2026· Applies to: Cyber Cache LTD

1. Who this policy is about

Cyber Cache LTD, trading as CyberCache (the Company), is the controller of personal data used for this website and business enquiries. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Contact: info@cybercache.cc.

2. What this website does not do

The website application does not use advertising or analytics tracking, browser cookies or storage, or automated decision-making about visitors. Infrastructure services process technical request information as described below.

3. What the Company collects

3.1 Business enquiries

The Company receives the information supplied through the Request a Scope Review form or by email, including names, business contact and organisation details, website details, engagement preferences and enquiry content. Required form fields are needed to assess and respond to the request; without them, the form cannot be submitted. Direct email remains available.

Do not send credentials, live customer records or sensitive personal data through the form or ordinary email.

3.2 Website visits

Website infrastructure processes technical information such as IP addresses, request times, requested resources and browser information to deliver the website, diagnose faults and prevent abuse. Form requests also involve technical information used to prevent abusive or duplicate submissions.

3.3 Engagement-related data

Where a proposed engagement involves personal data, the parties must address the applicable roles, handling requirements and any required data-processing terms in the engagement documents before that processing begins.

4. Purposes and lawful bases

The Company uses business contact and enquiry information to assess requests, respond and follow up, relying on its legitimate interest in communicating with prospective business clients. Website delivery, fault diagnosis and abuse prevention rely on its legitimate interest in maintaining an available and secure website.

Business relationship administration relies on the Company's legitimate interests. Steps requested before a contract, or performance of a contract, apply where the individual is the contracting party. Processing required by applicable law relies on the relevant legal obligation.

The Company may use relevant business contact details to promote its own services where lawful, relying on consent where required or otherwise on its legitimate interest in relevant business promotion. An enquiry is not marketing consent. The Company does not sell enquiry contact details or provide them to unrelated parties for independent marketing.

5. Recipients and international transfers

Relevant data is processed by website infrastructure and business communications service providers. Information may be disclosed to competent authorities where required by law, or to professional advisers where necessary for legal advice or claims.

Business communications may involve processing outside the UK or EEA. The accepted data-processing terms for these services provide for recognised transfer mechanisms, including standard contractual clauses and UK supplementary terms where applicable. Information about relevant transfer arrangements and copies of applicable safeguards can be requested at info@cybercache.cc.

6. Security

The website uses HTTPS. The Company must meet its applicable data-security and breach-notification obligations. No website or communication method is entirely risk-free.

7. Retention

Enquiry correspondence is retained while needed to assess and respond to the enquiry and any agreed follow-up. When that purpose ends, information no longer needed is deleted. Records needed for an applicable legal obligation or a specific legal claim are retained only for that purpose and reviewed when that reason ends.

Retention of technical request information is limited to website delivery, fault diagnosis and abuse prevention, taking account of the nature and duration of a specific fault or incident and any applicable legal preservation requirement. Information no longer needed for these purposes must be deleted or anonymised.

If contact details are used for lawful promotion, their continued relevance and permission for that use must be considered separately from enquiry correspondence. Minimal records of objections may be retained to prevent further marketing.

8. Your rights

Subject to applicable conditions, you may request access to, correction or erasure of your personal data, restriction of processing, or data portability. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

Contact info@cybercache.cc to exercise your rights. The Company will handle requests within the applicable statutory time limits.

Your right to object

You may object at any time, on grounds relating to your particular situation, to processing based on the Company’s legitimate interests. The Company must stop that processing unless it demonstrates compelling legitimate grounds overriding your interests, rights and freedoms, or the processing is necessary for establishing, exercising or defending legal claims.

Send an objection to info@cybercache.cc.

Your right to object to direct marketing

You may object at any time, without giving a reason, to use of your personal data for direct marketing, including related profiling. The Company must stop that processing. Reply to a promotional email or contact info@cybercache.cc to opt out or withdraw marketing consent.

Complaints

You may complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/ or another competent supervisory authority. You do not have to contact the Company first.

9. Children

The Company's services are intended for businesses. This website is not directed at children.

10. Changes

The Company will update this policy when relevant processing changes and identify the effective date. New uses of personal data require appropriate privacy information before they begin.

11. Contact

Privacy enquiries and requests: info@cybercache.cc.

Other legal documents

  • Authorized Testing Policy
  • Terms of Service
  • Refund and Cancellation Policy

Security assessments for B2B SaaS and AI product teams across Web, API, Cloud, and AI attack surfaces.

  • info@cybercache.cc

Services

  • SaaS Security Assessment
  • Continuous Security Retainer
  • AI Application Security Review

Research

  • Research
  • Sample Report
  • Methodology

Company

  • Request Scope Review
  • No Hack, No Pay

Follow

  • LinkedIn
  • X (Twitter)
  • Telegram
  • YouTube

Cybersecurity testing is provided only with written authorization and within an agreed scope.

© 2026 Cyber Cache LTD. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

  • Company Information
  • Authorized Testing Policy
  • Terms of Service
  • Refund and Cancellation Policy
  • Privacy Policy