This page describes, in plain language, how ondcyber.com actually handles data. It is not a substitute for legal advice, and should be reviewed by counsel before being relied on as a binding legal commitment.
What we collect
Contact form. When you submit the enquiry form, we collect your name, work email, company, role (optional), the service you're interested in, your message, and an optional timeline. This is sent directly to our team by email to respond to your enquiry — it is not stored in a database or shared with any third party for marketing purposes.
Admin access. A small number of O&D Cyber staff can sign in to a private admin area to manage this site's published content. Signing in requires an email address on an allowlist and records a login timestamp. This has no bearing on visitors browsing the public site.
Site assistant. The assistant in the corner of each page answers questions about O&D Cyber from the content published on this site. Each question you type is sent to our server to be answered; some questions are passed to Anthropic's Claude model, along with the relevant site content and your recent questions in that conversation, to phrase the answer. We do not store your questions or the conversation: it is held only in the open page in your browser, and is cleared when you refresh the page or close the tab. Please do not enter passwords, credentials, or confidential information.
Analytics. We use Vercel Web Analytics to understand aggregate traffic to this site (for example, which pages are visited). This analytics service does not use cookies and does not collect personally identifiable information.
How we use it
Contact form details are used solely to understand and respond to your enquiry. We do not sell, rent, or share your information with third parties for their own marketing purposes.
Third-party processors
This site is hosted on Vercel, uses Neon (Postgres) for its database, Resend for transactional email delivery (sending enquiry notifications and admin login codes), and Anthropic to generate some of the site assistant's answers. These providers process data on our behalf as part of operating the site.
Data retention
Contact form submissions exist as an email in our inbox — we retain these for as long as needed to respond to and, where relevant, follow up on your enquiry. Admin login records (email and last login time) are retained for as long as that person remains an authorised administrator.
Your rights
You can ask us what information we hold about you, or ask us to delete it, by emailing info@ondcyber.com.
Contact
Questions about this policy can be sent to info@ondcyber.com.