Privacy Policy | Keekco CE360

1. Introduction

Keekco ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our CE360 Cyber Essentials readiness platform ("Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We may collect personally identifiable information that you voluntarily provide when using our Service, including:

Name and contact information (email address)
Organisation name and details
Account credentials
Assessment responses and compliance data
Communications with our support team

2.2 Automatically Collected Information

When you access our Service, we may automatically collect certain information, including:

Device information (browser type, operating system)
IP address and location data
Usage data (pages visited, features used, time spent)
Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect for the following purposes:

To provide, maintain, and improve our Service
To create and manage your account
To process and store your assessment data
To generate compliance reports and gap analyses
To communicate with you about updates, security alerts, and support
To respond to your enquiries and provide customer support
To detect, prevent, and address technical issues and security threats
To comply with legal obligations

4. Data Storage and Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit and at rest
Secure authentication mechanisms
Regular security assessments and audits
Access controls and monitoring
Employee training on data protection

Your data is stored on secure servers. While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

Service Providers: We may share information with trusted third-party service providers who assist us in operating our Service (e.g., hosting, analytics)
Legal Requirements: We may disclose information if required by law or in response to valid legal requests
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred
With Your Consent: We may share information with your explicit consent

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), if you are a resident of the European Economic Area (EEA) or the United Kingdom, you have certain data protection rights:

Right of Access: You can request copies of your personal data
Right to Rectification: You can request correction of inaccurate or incomplete data
Right to Erasure: You can request deletion of your personal data in certain circumstances
Right to Restrict Processing: You can request restriction of processing in certain circumstances
Right to Data Portability: You can request transfer of your data to another organisation
Right to Object: You can object to processing of your personal data in certain circumstances

To exercise any of these rights, please contact us using the details provided below.

7. Cookies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.

We use the following types of cookies:

Essential Cookies: Required for the operation of our Service (e.g., authentication)
Analytical Cookies: Help us understand how users interact with our Service
Functional Cookies: Enable enhanced functionality and personalisation

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, some parts of our Service may not function properly without cookies.

8. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When your data is no longer needed, we will securely delete or anonymise it.

Assessment data and compliance records may be retained for a longer period to support audit trails and regulatory compliance requirements.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information when transferred internationally, including standard contractual clauses approved by relevant authorities.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Keekco - Data Protection
Email: privacy@keekco.com
Website: www.keekco.com

You also have the right to lodge a complaint with a supervisory authority, such as the Information Commissioner's Office (ICO) in the United Kingdom.