Skip to content

Legal

Privacy Policy

Last updated 1 October 2025 · Cloudgap, Company No. 09541018

[Client input required · Q13]

This privacy notice predates the AI Governance Readiness Assessment and the split contact forms, and does not yet describe the assessment lead capture: what is collected (email, organisation, twelve answers, UTM campaign parameters), the lawful basis (consent for the assessment report, legitimate interests or pre-contract steps for enquiries), the retention period, and how consent is withdrawn. Drafted delta available for the client's own legal review - it must not be published on our say-so.

At Cloudgap, we take security seriously - both yours and our own. This policy outlines how we handle your data with transparency and care.

This privacy policy ("Policy") explains how Cloudgap ("we," "us," or "our") collects, protects, and uses the personal data of visitors to our website and clients of our services. We are committed to protecting your privacy and ensuring you have a positive experience on our website.

1. Who We Are

Cloudgap is a specialist security consultancy based in the United Kingdom. For the purposes of the General Data Protection Regulation (UK GDPR), we are the Data Controller of your personal information.

  • Registered Address: Avondale House, 262 Uxbridge Road, Hatch End, United Kingdom, HA5 4HS

  • Contact: hello@cloudgap.ai

2. Information We Collect

We may collect and process the following data about you:

  • Registered Address: Avondale House, 262 Uxbridge Road, Hatch End, United Kingdom, HA5 4HS

  • Contact: hello@cloudgap.ai

2.1. Information You Provide

This is information you give us by filling in forms on our site (such as "Book Consultation" or "Contact Us") or by corresponding with us by phone, email, or otherwise. It includes:

  • Identity Data (Name, Job Title)

  • Contact Data (Email address, Telephone number)

  • Business Data (Company Name, Project Requirements)

2.2. Technical Usage Data

When you visit our website, we may automatically collect technical information, including the Internet Protocol (IP) address used to connect your computer to the Internet, your browser type and version, time zone setting, and operating system.

3. How We Use Your Data

We only use your data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • To Perform a Contract: Where we need to perform the consultancy services we are about to enter into or have entered into with you.

  • Legitimate Interests: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

  • Compliance: Where we need to comply with a legal or regulatory obligation.

Security First

As a security company, we treat your data with the highest level of confidentiality. We do not sell your data to third parties. Any data shared with sub-processors (e.g., cloud hosting providers) is done so under strict Data Processing Agreements (DPAs).

4. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, and the applicable legal requirements.

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

  • Request access to your personal data (commonly known as a "data subject access request").

  • Request correction of the personal data that we hold about you.

  • Request erasure of your personal data.

  • Object to processing of your personal data where we are relying on a legitimate interest.

  • Request restriction of processing of your personal data.

  • Request the transfer of your personal data to you or to a third party.

This website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

7. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us at:

hello@cloudgap.ai

Avondale House, 262 Uxbridge Road, Hatch End, United Kingdom, HA5 4HS

Questions about this policy? Email hello@cloudgap.ai or write to Avondale House, 262 Uxbridge Road, Hatch End, HA5 4HS, United Kingdom.