Noor Cyber Security Ltd ("Noor Cyber Security", "we", "us") is a company registered in England and Wales with company number 16242217. Our registered office is 28 Queens Drive, London W3 0HA, United Kingdom. We are registered with the Information Commissioner's Office (ICO) under registration number ZB981731.

We are the data controller for the personal data described in this policy. We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you wish to request information about your personal data, or believe we may hold inaccurate personal data about you, please contact info@noorcybersecurity.com.

If you have any questions about this policy or how we handle your personal data, please contact us at info@noorcybersecurity.com.

You can unsubscribe from our marketing communications at any time by using the unsubscribe link in any marketing email, or by emailing info@noorcybersecurity.com. We will add you to our do-not-contact list.

We may collect, use, store and transfer different kinds of personal data about you, including information you give us when you contact us, request a quote or assessment, place an order, subscribe to our communications, register for an event or apply for a job.

We may also collect business contact details from publicly available sources (for example company websites or professional networking profiles) where this supports our legitimate interest in offering our services to organisations. If we do, we will tell you where we obtained your details when we first contact you.

We may receive your details from a third party, such as a partner you have shared them with, so that we can provide services that may benefit you. In these cases we will tell you where we obtained your details when we first contact you.

When you visit our website, our website platform (Wix) automatically collects technical information such as your IP address and browser type so the site can work securely. See the Cookies Policy below.

• Identity Data: includes first name, last name, title.

• Contact Data: includes billing address, email address and phone numbers.

• Transaction Data: includes details about payments and the products and services you have purchased.

• Profile Data: includes preferences, feedback and survey responses.

• Marketing and Communications Data: includes your marketing and communication preferences.

• Technical Data: includes IP address, browser type and version, device information, and how you use our website.

We use your personal data to:

• Respond to your enquiries and provide quotes and assessments.

• Register you as a customer, deliver our services, and manage invoicing and renewals.

• Manage events you register for, including sending details before, during and after the event.

• Understand how our website is used so we can improve it.

• Carry out market research where you take part in surveys or give feedback.

• Send you information about our products and services that may interest you (see "Marketing" below).

• Process job applications.

We rely on the following lawful bases under UK GDPR Article 6:

​

• Contract: where we need to perform a contract we are about to enter into, or have entered into, with you or your organisation.

• Legitimate interests: to respond to enquiries, run and improve our business and website, and market our services to business contacts, where these interests are not overridden by your rights.

• Consent: where you have given consent, for example to non-essential cookies or to marketing sent to a personal email address. You can withdraw consent at any time.

• Legal obligation: where we need to comply with a legal or regulatory obligation, such as keeping financial records.

​

Marketing: we send marketing emails to business contacts (people at companies) under our legitimate interests, as allowed for corporate subscribers under the Privacy and Electronic Communications Regulations 2003 (PECR). We will only send marketing to a personal email address with your consent or where you are an existing customer. Every marketing email includes an unsubscribe link.

We may disclose your personal data to:
• Third-party service providers, partners, subcontractors, agents, distributors, vendors, and
other collaborators for the purposes outlined in this privacy policy.
• In cases where we are legally required to share data, for example, if involved in legal
proceedings or to comply with court orders, government instructions, or legal obligations.
If we share your data with third parties, we will ensure that appropriate steps are taken to
protect your personal information and handle it securely, in line with legal requirements.

We prefer to use service providers based in the UK. Some of our providers (for example email, website hosting and payment providers) may process personal data outside the UK. Where this happens, we make sure the transfer is protected by UK adequacy regulations (for example to the EU/EEA) or by appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

If you would like more information about where your personal data is held, please contact us at info@noorcybersecurity.com.

We have implemented appropriate security measures to prevent the accidental loss,
unauthorized use, access, alteration, or disclosure of your personal data. Access is
restricted to employees, agents, contractors, and other third parties who have a business
need to know. These individuals will only process your data under our instructions and are
subject to confidentiality obligations.
We have procedures in place to address any suspected personal data breaches and will
notify you and the relevant authorities as required by law.

We keep personal data only for as long as necessary for the purposes we collected it for, including to meet legal, accounting or reporting requirements. For example, we keep financial and transaction records for six years to meet UK tax requirements. When we no longer need personal data we securely delete or anonymise it.

Under UK data protection law you have the right to:

​

1. Be informed about how we use your personal data

2. Access your personal data

3. Have inaccurate data corrected

4. Have your data erased

5. Restrict processing

6. Data portability

7. Object to processing, including an absolute right to object to direct marketing

8. Rights in relation to automated decision-making and profiling (we do not make decisions about you based solely on automated processing)

9. Withdraw consent at any time, where we rely on consent

To exercise any of these rights, email info@noorcybersecurity.com. We will respond within one month, and there is normally no charge.

Your right to complain: if you are unhappy with how we handle your personal data, you can complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline: 0303 123 1113. Website: www.ico.org.uk. We would appreciate the chance to resolve your concern first, so please contact us beforehand if you can.

This policy was last updated on 08/11/2026. We may update it from time to time; the latest version will always be on this page, and where changes are significant we will tell you.

It is important that the personal data we hold about you is accurate and up to date. Please let us know if your details change.