Privacy Policy for Positive Cyber Solutions

At Positive Cyber Solutions, we are committed to protecting and respecting your privacy. This privacy statement explains how we collect, use, store, and protect your personal data, as well as your rights regarding that data. 

What Information We Collect 

We may collect and process the following personal data about you: 

• Personal Identification Information: Name, email address, phone number, and postal address 
• Business Contact Information: Job title, company name, and contact details 

Course Enrolment and Learning Records
When you enrol in a course through PCS Training (hosted via LearnWorlds), we collect your registration details, course progress, and certification history. LearnWorlds securely processes this information on our behalf in accordance with UK GDPR and relevant data protection standards.

How We Use Your Information 

We process your personal data for the following purposes: 

• Providing services to you 
• Managing our relationship with you, including responding to inquiries or complaints 
• Improving our services based on your feedback 
• Complying with legal and regulatory obligations 

Marketing and communications
If you opt in to receive updates from us, we may contact you by email with information about new courses or services. You can unsubscribe at any time by clicking the link in our emails or contacting us directly.

Lawful Basis for Processing 

We process your personal data based on one or more of the following lawful grounds: 

• Consent: Where you have given us clear consent to process your personal data 
• Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering a contract 
• Legal Obligation: We need to process your data to comply with legal obligations 
• Legitimate Interests: Processing is necessary for our legitimate interests (unless overridden by your rights), such as improving our services and maintaining cybersecurity 

How We Share Your Information 

We will not share your personal data with third parties unless: 

• It is necessary for the performance of a contract with you 
• We are required to do so by law or regulatory authorities 
• We have your consent to do so 

Payments
All payments made through our training site are handled securely by third-party payment processors such as Stripe or PayPal. We do not store or have access to your card details. Please refer to the privacy policies of these providers for more information on how your payment data is processed.

How We Store and Protect Your Data 

Your data is stored securely within the UK on our systems, including Microsoft 365 cloud services and backup hard drives. We implement strong encryption, access controls, and regular audits to protect your personal data from unauthorised access or breaches. 

Website Contact Forms and Communication 

If you contact us via email or phone, we will process your contact details, and any information provided to respond to your inquiry.

Cookies and Tracking
Our website may use cookies and similar technologies to enhance your browsing experience. These may include functional cookies for website performance and analytics cookies to understand how visitors interact with our site. You can manage your cookie preferences through your browser settings.
We also use anonymised analytics to track user engagement, such as course views and time spent on content, to help improve the quality of our training platform.

Data Retention 

We retain personal data for the following periods: 

• General inquiries: 12 months after resolution 
• Client records: 7 years (for legal and compliance reasons) 

Data Breach Notification 

In the unlikely event of a data breach, we will assess the impact and notify affected individuals and the ICO, as required by UK GDPR. 

Your Rights 

Under the UK GDPR, you have the following rights regarding your personal data: 

• Right of Access: You can request a copy of your personal data we hold 
• Right to Rectification: You can request that we correct any inaccurate or incomplete data 
• Right to Erasure: You can request that we delete your personal data, subject to certain conditions 
• Right to Object: You can object to our processing of your personal data 
• Right to Data Portability: You can request that we transfer your data to another service provider 
• Right to Restrict Processing: You can request a temporary halt to processing your data. 
• Right to Complain to the ICO 

To exercise any of these rights, please contact us at: 

Positive Cyber Solutions

Email: info@positivecybersolutions.co.uk 
Address: Severn House, Hazell Drive, Newport, NP10 8FY. 

Complaints and Queries 

If you have any concerns about how we handle your data, you can contact us using the details above. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection supervisory authority. 

Changes to Our Privacy Statement 

We may change our Privacy Statement from time to time in line with legislation and industry standards. We will not be explicitly notifying all website users about these changes and therefore recommend that you check this statement occasionally for any policy updates. 

Change Log 

• 01/10/2024 – Privacy Statement Created 
• 19/11/2024 – Privacy Statement Reviewed 
• 12/02/2025 – Privacy Statement Updated (clarifications on data retention, website contact, cookies, and payment processing) 
• 30/7/2025 – Privacy Statement Updated (included LearnWorlds, analytics, payment processing, and marketing consent wording)