Privacy Policy

Cyber Spark IT Services Ltd ("Cyber Spark", "we", "us") is a company registered in England and Wales (company number 14891489), with its registered office at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. We are the data controller for the personal data described in this policy. It explains what personal data we collect through www.cyberspark.uk, why, how we protect it, and the rights you have over it under UK GDPR and the Data Protection Act 2018.

• When you contact us: your full name, email address, and any phone number, enquiry type and message you give us through our enquiry form, footer form or "Book a Demo" dialog.
• When you apply for a role: your name, email, phone number, experience, location, portfolio link, cover letter, your answers to any screening questions, and your CV file, submitted through /careers.
• When you browse: if you accept analytics cookies, Google Analytics and Microsoft Clarity collect standard usage data (pages viewed, device and browser type, approximate location from your IP address). Nothing runs unless you accept — see our Cookie Policy.

We don't ask for payment details or special category data (health, religion, and similar) on this website, and we'd ask you not to include them in a form.

• Responding to enquiries: to reply to your enquiry and discuss the work you're asking about — necessary to take steps you request before a contract, or our legitimate interest in running the business.
• Job applications: to assess your suitability for a role and contact you about it — necessary to take steps you request before an employment contract.
• Internal notifications: when you submit a form, a summary is emailed to our team and posted to an internal Slack channel so a person can respond promptly — our legitimate interest in a timely service.
• Analytics, only with consent: to understand how the site is used and improve it, using Google Analytics 4 and Microsoft Clarity — based on your consent, which you can withdraw at any time.
• Fraud and abuse prevention: Cloudflare Turnstile tells people from bots on our forms, and we keep a short-lived, hashed record of submission attempts to prevent spam — our legitimate interest in keeping the site secure.

We don't sell personal data, and we don't share it for other companies' marketing. A small number of service providers process it on our behalf, only on our instructions:

• Cloudflare — hosts the website and stores enquiry and application data (Workers, D1 database, R2 file storage), and provides Turnstile bot protection.
• Google — Google Analytics 4 and Google Tag Manager; Microsoft — Clarity. Both only run after you accept analytics cookies.
• Resend — sends the email notifications and replies described above.
• Slack — receives the internal notification summary described above.

Some of the providers above, including Cloudflare, Google and Microsoft, may process data on servers outside the UK, including in the United States. Where that happens, we rely on the provider's standard contractual clauses or other safeguards recognised under UK data protection law to protect your data to a UK standard.

We keep enquiry and application data only for as long as we need it — enquiries for as long as it takes to respond and a reasonable period afterwards in case you follow up; job applications and CVs for the recruitment process for that role and a reasonable period afterwards in case it reopens. You can ask us to delete your data sooner at any time — see Section 9.

For some roles, our application form calculates an initial score from your answers to help our team sort applications. It's only a sorting aid — a person always reviews your application before any decision is made, and you can ask us how a score was calculated.

This website only sets the cookies it needs to function until you actively accept analytics cookies. Our Cookie Policy explains what we use and how to change your choice at any time.

Under UK GDPR, you have the right to:

• access the personal data we hold about you
• ask us to correct inaccurate data
• ask us to delete your data
• ask us to restrict how we use it
• object to processing based on legitimate interest
• receive your data in a portable format
• withdraw consent at any time, where we rely on it

To use any of these rights, email info@cyberspark.uk. If you're unhappy with how we've handled your data, you can also complain to the UK Information Commissioner's Office (ico.org.uk, 0303 123 1113).

We store enquiry and application data in access-controlled systems (Cloudflare D1 and R2), behind a password-protected admin dashboard used only by our team. No method of transmission or storage is completely secure, but we take reasonable technical and organisational steps to protect your data from unauthorised access, loss or misuse.

Our services are for businesses. We don't knowingly collect personal data from children, and this website isn't directed at them.

We may update this policy as our website or services change. The date at the top shows when it was last revised.

Questions about this policy or your data — email info@cyberspark.uk, or write to Cyber Spark IT Services Ltd, 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.