Privacy Policy | CHILLI GEEKS LTD

1. Introduction

At CHILLI GEEKS LTD, we recognise that the confidentiality, integrity, and security of personal data are fundamental to our role as a cybersecurity services provider. This Privacy Policy outlines our strict commitment to protecting the personal information of our clients, website visitors, and partners. We handle all data with the highest standards of professional care, ensuring full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

In the course of delivering our enterprise-grade security solutions, we may collect and process the following categories of personal information:

  • Identity Data: Full name and job title.
  • Contact Data: Email address and phone number.
  • Corporate Data: Company name and business registration details.
  • Technical Data: IP address, browser type and version, time zone setting, operating system, and platform information.
  • Engagement Data: Information submitted via security assessment requests, contact forms, and support inquiries.

3. How We Use Information

CHILLI GEEKS LTD utilizes collected information strictly for the following professional purposes:

  • Service Delivery: To execute cybersecurity consulting, penetration testing, and managed security services.
  • Communication: To respond to enquiries, provide customer support, and deliver security assessment reports.
  • Operational Excellence: To maintain, improve, and secure our website infrastructure.
  • Legal Compliance: To satisfy regulatory obligations and establish, exercise, or defend legal claims.

4. Legal Basis for Processing

Under the UK GDPR, we rely on the following lawful bases to process your personal data:

  • Contract Performance: Processing necessary to fulfill our service agreements with your organization.
  • Legitimate Interests: Processing necessary for our legitimate business interests, provided these are not overridden by your fundamental rights.
  • Legal Obligations: Processing necessary to comply with UK statutory and regulatory requirements.
  • Consent: Where explicitly provided, such as for marketing communications (which you may withdraw at any time).

5. Data Sharing

CHILLI GEEKS LTD strictly prohibits the sale of personal information. We operate on a principle of least privilege and may only share data with carefully vetted third parties under strict confidentiality agreements:

  • Hosting and Infrastructure Providers: Facilitating our secure operational environments.
  • Security Vendors: Partners assisting in advanced threat intelligence and mitigation.
  • Professional Advisors: Legal, financial, and insurance professionals bound by confidentiality.
  • Regulatory Authorities: Law enforcement or government bodies when legally mandated.

6. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes outlined in this Privacy Policy, including satisfying any legal, accounting, or reporting requirements. Upon the expiration of the retention period, data is securely and permanently destroyed in accordance with our data sanitization protocols.

7. Data Security

As a cybersecurity firm, we implement industry-leading technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction. Our security posture includes:

  • End-to-end encryption of data in transit and at rest.
  • Strict role-based access controls (RBAC) and multi-factor authentication (MFA).
  • Continuous 24/7 network monitoring and intrusion detection systems.
  • Secure, isolated storage environments.
  • Comprehensive employee confidentiality obligations and continuous security awareness training.

8. User Rights

Under the UK GDPR, you possess significant rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request the deletion of personal data under certain conditions ("Right to be Forgotten").
  • Right to Restriction: Request the suspension of processing your personal data.
  • Right to Data Portability: Request the transfer of your data to another organization.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing.

9. Cookies

Our website utilizes cookies to ensure optimal performance and security. For comprehensive details on how we deploy these technologies, please refer to our dedicated Cookie Policy.

10. Updates to This Policy

CHILLI GEEKS LTD reserves the right to update this Privacy Policy periodically to reflect changes in our operational practices or regulatory requirements. Material changes will be communicated via our website. We encourage you to review this policy regularly.

11. Contact Information

If you have any questions, concerns, or wish to exercise your data rights, please contact our Data Protection Officer at:

CHILLI GEEKS LTD
6 Selbourne Drive
Dewsbury, England
WF12 9PB

+44 7411 573179