Privacy notice
This notice explains how Investgao Cyber Ltd collects and uses personal data when you use investgao.com, and the rights you have.
Who we are
Investgao Cyber Ltd is the data controller. Registered in England and Wales, company number 16079138. Registered office: 128 City Road, London EC1V 2NX, United Kingdom. For any privacy question or request, email contact@investgao.com.
What we collect and why
| When | What we collect | Why we use it | Lawful basis | How long we keep it |
|---|---|---|---|---|
| Contact form or email | Name, email, organisation (optional), topic, your message, country (from your connection) | To reply to your enquiry and discuss our services | Legitimate interests (responding to enquiries); steps before entering a contract | 12 months after your enquiry, unless it leads to an engagement |
| Free guide download | First and last name, business email, organisation (optional), marketing preference, country | To provide the guide and, where relevant, follow up about it | Legitimate interests | 24 months |
| Insights emails (only if you tick the box) | Name and email | To send occasional insights on cyber security, post-quantum and AI readiness | Consent, which you can withdraw at any time | Until you unsubscribe or withdraw consent |
| Questions to Sleuth, our AI assistant | The question you type, the date and your country. We do not record your name or IP address. | To generate an answer, and to understand which topics are useful so we can improve the service | Legitimate interests | 12 months |
Please don't include confidential case details, client names or other personal information in questions to Sleuth or in the contact form.
Who we share it with
We don't sell your data. We use a small number of trusted service providers who process data on our behalf:
- Cloudflare: hosts this website, runs the contact and download forms, stores form submissions and forwards email.
- Anthropic: provides the AI model that generates Sleuth's answers. Your question is sent to Anthropic to produce the answer.
- Google (Gmail): where we receive and manage email.
- IONOS: our domain registrar and outgoing email service.
Some of these providers process data outside the UK, including in the United States. Where they do, we rely on appropriate safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement or Addendum, or the UK-US data bridge where it applies.
Cookies and similar technologies
We don't use advertising or tracking cookies. Your browser may store your light or dark display preference on your own device; this is not shared with us.
Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you
- ask us to correct inaccurate data
- ask us to delete your data
- ask us to restrict or object to how we use it
- receive your data in a portable format
- withdraw consent at any time, where we rely on consent
To use any of these rights, email contact@investgao.com. We'll respond within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. We'd appreciate the chance to resolve your concern first.
Keeping your data secure
We use encrypted connections (HTTPS) across the site, limit access to personal data, and use reputable providers with strong security practices.
Changes to this notice
We may update this notice from time to time. The date at the top shows when it was last changed.