Privacy Policy

Last updated: 22 September 2026

ICT Resilience Ltd (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what personal data we collect through this website, why we collect it, and how we use, store and protect it, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are — ICT Resilience Ltd provides consultancy services relating to digital operational resilience, DORA and EU AI Act compliance, and third-party and cloud risk management. We are the data controller for the personal data described in this policy. You can contact us using the contact form on this website.

What data we collect — When you use our contact form or book a consultation, we may collect your name, email address, organisation, phone number (if provided) and any information you include in your message. We also collect limited technical and usage data automatically through cookies and analytics tools when you browse this website, such as your IP address, browser type, device information and pages visited.

How we use your data — We use your data to respond to enquiries, provide requested information or proposals, manage any client relationship that follows, and to understand how visitors use this website so we can improve it. We do not use your data for automated decision-making or profiling.

Legal basis for processing — We process contact form data on the basis of your consent and our legitimate interest in responding to enquiries. Where a client engagement proceeds, we process data as necessary to perform that contract. Non-essential cookies and analytics are only used with your consent, given through our cookie banner.

Sharing your data — We do not sell your personal data. We may share data with trusted service providers who help us run this website and our business, such as website hosting and analytics providers, who are required to protect your data and only use it as we instruct. We do not share your data with third parties for their own marketing purposes.

Data retention — We retain enquiry and client data only for as long as necessary to fulfil the purposes described in this policy, to provide our services, and to meet legal, accounting or regulatory requirements, after which it is securely deleted.

Your rights — Under UK GDPR you have the right to access, correct, delete or restrict the personal data we hold about you, to object to processing, and to data portability. To exercise any of these rights, please contact us using the contact form on this website. You also have the right to lodge a complaint with the Information Commissioner’s Office (ico.org.uk) if you believe your data has been mishandled.

Cookies — This website uses cookies. Please see our Cookie Policy for details of the cookies we use and how to manage your preferences.

Security — We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or misuse.

Changes to this policy — We may update this policy from time to time. The date above shows when it was last revised.

Contact us — If you have any questions about this policy or how we handle your data, please get in touch using the contact form on this website.