Privacy Policy - United Kingdom

1 Who We Are

CyberPolicyFinder is operated by Expert Insights Tech Ltd, a company registered in England and Wales.

Company number: 11425031
Registered address: Higher Mill, Buckfast Abbey, Buckfastleigh, England, TQ11 0EE
ICO registration reference: ZB060024
Contact: contact@cyberpolicyfinder.com

We are an information and introduction service and the data controller for your personal information under UK GDPR. We do not sell, arrange, advise on, or intermediate insurance policies.

2 What Data We Collect

When you use our quote form, we collect the following information:

Contact information: Your name, email address, and phone number
Business information: Company name, industry sector, company size, and annual revenue
Insurance requirements: Current cover status, specific concerns, and coverage preferences
Technical data: IP address, browser type, pages visited, and location information
Security data: Google reCAPTCHA v3 signals (to prevent bot abuse)

3 How We Use Your Data

We use your data for the following purposes:

To match you with a specialist insurance broker
To send your enquiry to broker partners for quote provision
To communicate about your enquiry
To improve our service and user experience
To prevent fraud and abuse

          Important: We do NOT sell your data to third parties for marketing. We do NOT use your data for marketing unless you explicitly opt in.
        

4 Who We Share Your Data With

We share your data only with the following parties:

Specialist insurance brokers: Your contact and business information to fulfil your quote request. All brokers are contractually required to process data in accordance with UK GDPR.
Google (reCAPTCHA): Interaction data for security purposes under Google's privacy policy
Resend: Your email address to send confirmations and communications
Cloudflare: Technical data (IP, browser info) as part of CDN services

5 Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your data on the following legal bases:

Consent: You submit our form voluntarily, providing explicit consent to process your data
Legitimate interest: We process data to prevent fraud and abuse, and to continuously improve our service
Contractual necessity: Processing is necessary to fulfil your request for a broker introduction

6 Your Data Subject Rights Under UK GDPR

Under UK GDPR, you have the following rights:

Right to access: You can request a copy of the data we hold about you (Subject Access Request)
Right to rectification: You can ask us to correct inaccurate or incomplete data
Right to erasure: You can request deletion of your data in certain circumstances (the "right to be forgotten")
Right to restrict processing: You can ask us to limit how we use your data
Right to data portability: You can request your data in a portable, machine-readable format
Right to object: You can object to certain types of processing, including for legitimate interests
Right to withdraw consent: You can withdraw your consent to processing at any time

To exercise any of these rights, contact us at contact@cyberpolicyfinder.com. We will respond within 30 days. If you are unhappy with our response, you can lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.

7 Data Retention

Enquiry data: We retain your contact and business information for 24 months from submission, after which it is securely deleted
Technical logs: Server logs and IP data are retained for 12 months
After deletion: Data shared with broker partners may be retained by them in accordance with their retention policies

8 International Data Transfers

Your data may be processed in the United Kingdom, United States, European Union, and other countries where our service providers operate. We ensure all transfers include appropriate safeguards, such as Standard Contractual Clauses, to protect your data in accordance with UK GDPR requirements.

9 Cookies

We use minimal cookies on CyberPolicyFinder:

Essential cookies: Required for website function
reCAPTCHA: Google reCAPTCHA v3 uses cookies for bot detection

We do NOT use advertising cookies, tracking cookies, or analytics cookies. We respect your privacy and do not participate in retargeting.

10 Contact Us & Complaints

If you have questions about this Privacy Policy or our data practices, please contact us at:

contact@cyberpolicyfinder.com

We will respond within 30 days. If you wish to lodge a complaint with the ICO, visit www.ico.org.uk or contact them by phone on 0303 123 1113. Last updated: April 2026