How we handle personal data collected through this website. This is a template that must be reviewed before the website goes live.
Last reviewed: 24 June 2026.
This privacy policy explains how Cipher7 handles personal data collected through this website.
Cipher7 Ltd is the data controller for UK website enquiries and UK business contacts. Cipher7 Ltd is registered in England and Wales, company number 09149897, with UK VAT number 470504217. The registered office is 3rd Floor, 45 Albemarle Street, Mayfair, London, W1S 4JL, United Kingdom.
In the United Arab Emirates, services are provided by Cipher7 Management Consultancy LLC, Office 302-190, West Bury Office Tower 1, Business Bay, Dubai, United Arab Emirates.
Cipher7 Ltd is registered with the Information Commissioner's Office, the UK data protection regulator.
We only collect personal data that we need. Depending on how you use the website, this may include the following.
When you use our contact form or contact us about working together, we may collect your name, work email, organisation, phone number, region, the nature of your enquiry and the message you send.
If you choose to attach a brief or other document to your enquiry, we will receive the contents of that file. Please do not include sensitive personal data in an upload unless it is necessary.
We may collect limited information about how visitors use the website, such as pages viewed and general location. Analytics will only run in line with your cookie choices once our cookie banner is in place. Please see our cookie policy.
If you contact us about a role, we may collect the details you choose to send, such as your name, contact details and any career information you provide.
We use personal data to respond to your enquiry, to provide and improve our services, to run and protect this website, and to meet our legal obligations. We do not sell personal data.
Under UK data protection law we must have a lawful basis for using your personal data. Depending on the situation, we rely on our legitimate interests in responding to enquiries and running our business, the steps needed to enter into or perform a contract, your consent where it is required, for example for non essential cookies, and compliance with our legal obligations.
We may share personal data with trusted providers who help us operate this website and our services, only as far as needed and under appropriate agreements. This includes our website hosting provider, GoDaddy. Where we use an external contact form service or an analytics provider, they will be named here once they are confirmed. We may also share data where we are required to by law.
We do not intentionally transfer personal data outside the United Kingdom, except where it is required for the provision of our services, for website hosting, through approved providers, or to meet a legal requirement. Where a transfer does take place, we put appropriate safeguards in place so that your data remains protected.
We keep personal data only for as long as we need it for the purposes described here, and to meet our legal and business record keeping obligations. Enquiry and contact data is kept for as long as is reasonable to deal with your enquiry and any relationship that follows, and is then deleted or anonymised. We review the personal data we hold on a regular basis and remove what we no longer need.
Under UK data protection law you have rights over your personal data. These include the right to be informed, the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object, and rights relating to automated decision making. To exercise any of these rights, please contact us using the details below.
For any privacy question or request, please email us at hello@cipher7.com, or write to Cipher7 Ltd at the registered office above. Our general contact details are also on the contact page.
If you have a concern about how we handle your personal data, please contact us first using the details above and we will do our best to put it right. If you remain unhappy, you have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection. You can find out more at ico.org.uk.
