Legal
Privacy Notice
Last updated August 2026
Inside the work
Who we are
CyberGipsy is an AI business studio. This notice explains what we do with personal data collected through this website and through client work. Replace this paragraph with your registered legal entity, address and data protection contact before publishing.
What we collect
Information you submit through the audit form: name, business name, city, a description of your business, your chosen bottleneck and your email address. We also collect standard analytics data where you have consented to it.
Why we collect it
To arrange and prepare your audit, to reply to your enquiry, and to improve the site. We do not sell personal data and we do not share it with advertisers.
Legal basis
Where the GDPR or UK GDPR applies, our basis is legitimate interest for responding to a business enquiry, and consent for analytics and marketing email.
Client data
In delivery work, client data stays in accounts owned by the client. We act as a processor under a written data processing agreement, we configure vendors so that client inputs are not used to train models, and we document processing locations.
Retention
Enquiry data is kept for 24 months unless you ask us to delete it sooner.
Your rights
Access, correction, deletion, restriction, portability and objection, where the applicable law provides them. Write to the contact address above.