Privacy Policy

Viktrix Cyber Limited ("Viktrix", "we", "our", "us") is a company registered in England and Wales (Company No. 15XXXXXX), with registered offices at [address]. We provide managed cybersecurity services to businesses in the United Kingdom.

We are the data controller for personal data collected via this website. Where we process personal data on behalf of our clients (e.g. endpoint telemetry), we act as a data processor under the terms of a Data Processing Agreement.

When you use this website or contact us, we may collect:

• Identification data: your name, job title, company name
• Contact data: email address, telephone number
• Technical data: IP address, browser type, pages visited, referral source
• Communication data: the content of messages you send us
• Contract data: billing information, service configuration, and account records

When we provide managed SOC services, we may process endpoint telemetry, identity logs, and network data on behalf of our clients. This data is processed under a separate Data Processing Agreement and is not used for any purpose beyond service delivery.

We process your personal data under the following legal bases:

• Contract performance: to provide the services you have contracted with us
• Legitimate interests: to respond to enquiries, improve our platform, and prevent fraud
• Legal obligation: to comply with applicable UK law and regulatory requirements
• Consent: where you have provided explicit consent (e.g. marketing emails)

We do not use your data for automated decision-making or profiling in ways that produce legal or similarly significant effects.

We retain personal data only for as long as necessary for the purposes described above, or as required by law. In general:

• Service providers acting as processors: hosting infrastructure (UK/EU data centres), email platforms, analytics tools — all under data processing agreements
• Professional advisors: solicitors, accountants, under obligations of confidentiality
• Regulatory bodies and law enforcement: where required by law

We do not transfer personal data outside the UK or EEA except under appropriate safeguards (UK adequacy decisions or Standard Contractual Clauses).

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your data (subject to legal retention obligations)
• Object to processing based on legitimate interests
• Restrict processing in certain circumstances
• Data portability for data you provided under consent or contract
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact us at privacy@viktrix.co.uk. We will respond within one month.

We use cookies and similar technologies to operate this website. For detail on what cookies we use and how to control them, see our Cookie Policy.

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include encryption in transit (TLS 1.3), encryption at rest (AES-256), access controls, and regular security testing.

No internet transmission is completely secure. If you believe your data has been compromised, contact us immediately at security@viktrix.co.uk.

We may update this policy from time to time. We will notify existing clients of material changes by email. The version date at the top of this page reflects when the policy was last updated.

For data protection queries: privacy@viktrix.co.uk

If you are not satisfied with our response, you have the right to complain to the Information Commissioner"s Office (ICO):

Information Commissioner's Office Wycliffe House, Water Lane Wilmslow, Cheshire SK9 5AF www.ico.org.uk