Privacy Policy

Last updated: May 2026  ·  Cyber Threat Defense Consulting Ltd

This policy explains how Cyber Threat Defense Consulting Ltd (“CTDC”, “we”, “us”), a company registered in England and Wales, collects, uses, and protects personal data when you use ctd-consulting.co.uk or contact us directly.

Data Controller

Cyber Threat Defense Consulting Ltd, 1 Kings Avenue, London N21 3NA, United Kingdom.
Contact: contact@ctdc.io

What we collect

When you submit an enquiry or book a call we collect your name, email address, phone number (if provided), and the content of your message. We also collect standard web server logs (IP address, browser type, pages visited) for security and performance monitoring. We do not use third-party analytics trackers.

How we use your data

We use your contact details to respond to your enquiry and, where you have requested it, to provide our services. We may retain correspondence as part of our engagement records. We do not use your data for marketing without separate consent.

Lawful bases (UK GDPR / GDPR)

• Responding to enquiries — legitimate interests (Article 6(1)(f))
• Providing contracted services — performance of a contract (Article 6(1)(b))
• Legal obligations — compliance with applicable law (Article 6(1)(c))

Retention

Enquiry records are kept for up to 2 years from last contact unless an engagement follows. Engagement and contract records are retained for 7 years in accordance with UK accounting and regulatory requirements. Security assessment reports are retained in accordance with the terms agreed in each engagement.

Data sharing

We do not sell personal data. We may share data with vetted sub-processors (e.g. cloud hosting, scheduling software) under data processing agreements. We may disclose data where required by law or a competent authority.

International transfers

Where data is processed outside the UK or EEA, we ensure appropriate safeguards are in place (UK adequacy decisions or Standard Contractual Clauses).

Your rights

Under UK GDPR you have the right to access, correct, erase, restrict processing of, and port your personal data. You may also object to processing based on legitimate interests. To exercise any right, contact contact@ctdc.io. We will respond within one calendar month.

Cookies

This site uses only essential cookies required for functionality. No advertising or tracking cookies are set. We use Atlassian Jira Service Management (support widget) and Calendly (appointment booking) as essential service processors — both operate under data processing agreements and process only the data necessary to deliver the respective function.

Complaints

You have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO), at ico.org.uk or by calling 0303 123 1113.

This policy will be reviewed annually and updated as our processing activities change. Material changes will be notified via this page.