Privacy Policy

Who we are

This website is operated by CYVEHX Ltd ("CYVEHX", "we", "us"). CYVEHX is the data controller for the personal data described here. You can reach us at hello@cyvehx.com.

What we collect

When you submit the contact form, we collect the name, email address, company name (if you choose to provide it), subject, and message you enter. Our spam protection also keeps a short-lived, hashed record of your IP address on our server (for around ten minutes) to rate-limit submissions, and our hosting processes limited technical data — see "Third-party services" below.

If you apply for a job via our careers page, we also collect the application details and the CV you upload, and use them to assess your application and deal with any follow-up queries. If your application is unsuccessful, we delete it within six months of the role being filled or closed, unless you ask us to keep your CV on file for future openings or to delete it sooner. Please do not include sensitive personal details (for example health information) in your CV unless you consider them relevant.

Why we collect it, and our lawful basis

We use the information you submit only to respond to your enquiry and to follow up about the products, services, or training you asked about. Our lawful basis under UK GDPR is our legitimate interest in responding to enquiries directed to us, and our legitimate interest in protecting this website from abuse. For job applications, our lawful basis is taking steps at your request before entering into a contract, together with our legitimate interest in assessing candidates; you can ask us to stop and delete your application at any time by emailing hello@cyvehx.com.

How it is stored and how long we keep it

Contact-form submissions and job applications (including CVs) are delivered to us by email and handled in our mailbox, which is provided by our hosting provider. They are not stored in a database on this website, and we do not create user accounts. We keep enquiry emails for no longer than needed to handle your request and any follow-up, unless we are doing business with you or need to keep them to deal with a legal matter.

Third-party services

Some parts of this site rely on third parties that may receive your IP address and technical data when a page loads:

• Cloudflare Turnstile — protects our contact and job-application forms from abuse. When you visit the contact or careers pages or submit either form, Cloudflare, Inc. processes your IP address and browser signals to distinguish humans from bots.
• Google Fonts — fonts are served by Google; your IP address is sent to Google when pages load.

These providers may process this technical data outside the UK, relying on safeguards recognised under UK GDPR. We do not sell your data or use it for advertising, and this site sets no marketing or analytics cookies of its own.

No payments or accounts

This website does not process payments, does not host user accounts, and does not store submissions in a database.

Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict, or object to our processing of your personal data, and the right to data portability. To exercise any of these, or to ask what we hold about you, email hello@cyvehx.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Website terms & disclaimer

The content of this website is general information about CYVEHX and its products. It is not consulting, legal, or compliance advice. Our tools and training support your work towards standards and regulations such as ISO/SAE 21434, UN R155, ISO/DIS 24882 and the EU Cyber Resilience Act, but audit, certification and type-approval outcomes always remain the responsibility of you, your assessors and the relevant authorities. Standards names are used to describe scope and compatibility only and do not imply endorsement by, or affiliation with, any standards body or regulator. While we work to keep this site accurate and current, we make no warranties about its completeness, and to the extent permitted by law we accept no liability for loss arising from reliance on the information on this site. This site and this policy are governed by the laws of England and Wales.