Privacy Policy

Who is responsible

L&M Cyber Security B.V. is the controller for personal data collected through this website. For questions about this policy or your personal data, contact us using the details on the contact page.

What we collect

This website has no user accounts, no advertising and no third-party analytics. Personal data reaches us only when you choose to send it through one of the forms:

• Contact form — your name, work email, organisation, optional phone number, subject and message.
• Assessment request — your name, work email, organisation, optional role and phone number, the services you selected, urgency, optional budget indication and any details you add.
• Newsletter — your email address only.

Why we use it

To answer your enquiry, to scope and prepare a proposal, or to send the newsletter you asked for. We do not sell your data, and we do not share it with third parties for their own purposes.

Legal basis

Enquiries and assessment requests are handled on the basis of your request and our legitimate interest in responding to it. The newsletter is sent on the basis of your consent, which you can withdraw at any time.

How long we keep it

Enquiries and assessment requests are kept for as long as needed to handle them and to maintain a record of the engagement, and are deleted on request. Newsletter subscriptions are kept until you unsubscribe.

Your rights

Under the GDPR you can request access to your personal data, correction, deletion, restriction of processing, or a copy in a portable format, and you can object to processing. Contact us and we will action it. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

How it is protected

The site is served over HTTPS only. Form submissions are validated server-side, rate limited and protected against cross-site request forgery. Access to submitted data requires an administrator account with multi-factor authentication. Submitted content is not written to application logs.

Who else is involved

The website is hosted, and email is delivered, by our hosting and mail providers acting on our instructions. No other party receives personal data from this website.