Legal
Privacy Policy
Last updated 1 November 2026
In short: we collect what we need to run your account and keep the service secure. We don't sell personal data, we don't use advertising or analytics, and you can delete your account from the app at any time.
Questions or requests: contact@cybermap.live.
- Who we are
- What we collect
- How we use it
- Sharing and transfers
- How long we keep it
- Security
- Your rights and complaints
Who we are
CyberMap is a cyber risk ratings service for organisations whose staff travel abroad, run from the United Kingdom. "We", "us" and "our" mean the business that operates the CyberMap website (cybermap.live) and app, and we are the controller of the personal data described here. If your organisation arranged your account, it may also hold data about your use of CyberMap under its own privacy notice.
What we collect
- Your account: your work email address and password. Passwords are stored only in hashed form, so we can't read them.
- Your profile and settings: the name, organisation and role you give us, your watchlist, your traveller lens defaults and your alert preferences.
- Messages: support messages you send in the app, requests from the demo form on this website, and emails you send us. These usually contain your name, email address, organisation, role and message.
- Security and technical records: when you sign in and out, your IP address and browser type.
- Website visits: our hosting provider keeps standard request logs (IP address, time, page and browser type). The website has no analytics, advertising or tracking.
We don't ask for special category data, such as health, religion or political opinions, and ask you not to send it.
How we use it
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we need a lawful basis for each use of personal data.
| What we do | Lawful basis |
|---|---|
| Run your account, sign you in, save your settings and send the alerts you switch on | Contract, where the agreement is with you. Legitimate interests, where it is with your organisation: providing the service it arranged for you. |
| Answer support messages, enquiries and demo requests | Legitimate interests: responding to people who contact us. |
| Keep the service secure, prevent misuse and fix faults | Legitimate interests: protecting our users and the service. |
| Keep records the law requires, or respond to lawful requests | Legal obligation. |
We don't send marketing emails, and we don't make decisions about you based solely on automated processing.
How long we keep it
- Account, profile and settings: while your account is open, and deleted within 90 days of it closing, unless the law requires us to keep some of it.
- Security and technical records: normally no more than 12 months.
- Enquiries and demo requests: up to 12 months after our last contact, unless they lead to an account.
Security
Data is encrypted in transit, each account can reach only its own data, and signing in needs both your password and a code sent to your email. If a breach puts your data at risk, we'll tell the Information Commissioner's Office where the law requires it, and tell you without undue delay where your rights are at high risk.
Your rights and complaints
You have the right to a copy of your personal data, and to have it corrected or deleted. You can also ask us to restrict how we use it, object to a use based on legitimate interests, or have data you gave us in a portable format.
You can delete your account and its data yourself in the app, under Settings, Security, Delete my account and data. For anything else, email contact@cybermap.live. There's no charge, and we'll reply within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113. We'd appreciate the chance to put things right first.
We'll update this page when our practices change, and email account holders before any change that materially affects how we use their data.