Legal

Privacy Policy

NEXTGEN CYBER LTD  ·  LAST UPDATED: SEPTEMBER 2026

This Privacy Policy explains how NextGen Cyber Ltd collects, uses, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read it carefully before using our website or services.

01 // Who We Are

NextGen Cyber Ltd ("we", "us", "our") is a company registered in England and Wales. We provide IT and cybersecurity training courses delivered live online to learners in the UK and internationally.

We are registered with the Information Commissioner's Office (ICO) under registration number ZC129669.

For any questions about this policy or how we handle your personal data, please contact us at:

✉️

02 // What Personal Data We Collect

We collect the following categories of personal data when you enquire about or enrol on one of our courses:

  • Full name
  • Email address
  • Phone number
  • Country of residence
  • Course interest or enrolment details
  • Payment information (processed securely by our payment provider — we do not store card details)
  • Any additional information you provide voluntarily when contacting us

We also collect technical data automatically when you visit our website. See Section 7 (Cookies) for details.

03 // How We Collect Your Data

We collect personal data through:

  • Our online enquiry form
  • Our online enrolment form
  • Direct email or telephone contact with us
  • Automatic collection via cookies and analytics tools when you visit our website

04 // Why We Use Your Data

We use your personal data for the following purposes, each supported by a lawful basis under UK GDPR:

Purpose Lawful Basis
Process your enrolment and deliver your course
We need your details to confirm your place, send joining instructions, and deliver the training you have purchased.
Performance of a contract
Respond to your enquiry
When you submit an enquiry, we have a legitimate interest in contacting you with relevant course information.
Legitimate interests
Send course-related communications
We will send you reminders, course materials, and follow-up information related to your enrolment.
Performance of a contract / Legitimate interests
Process payments
Payment information is collected and processed to fulfil your purchase.
Performance of a contract
Comply with legal obligations
We may be required to retain certain records for financial or regulatory compliance purposes.
Legal obligation
Improve our website
We use analytics data to improve the performance and content of our website.
Legitimate interests

05 // Who We Share Your Data With

We do not sell your personal data. We may share your data with the following third parties where necessary to deliver our services:

  • Payment processing provider — to securely process course payments.
  • CRM and email platform — to manage communications and learner records.
  • Website analytics providers — to understand how our website is used (see Section 7).
  • IT support and platform providers — who assist in operating our systems under data processing agreements.

All third parties who process personal data on our behalf are required to handle it securely and in accordance with UK data protection law.

We do not transfer your personal data outside the United Kingdom.

06 // How Long We Keep Your Data

We retain personal data for as long as necessary to fulfil the purposes set out in this policy and to comply with our legal obligations:

  • Learner enrolment records: up to 6 years from the date of course completion
  • Enquiry records: up to 12 months from the date of enquiry if no enrolment follows
  • Marketing contact preferences: until you unsubscribe or request deletion

When data is no longer needed, we delete or anonymise it securely.

07 // Cookies & Website Tracking

Our website uses cookies and similar tracking technologies. We use the following tools:

Google Analytics

To understand how visitors use our website and to help us improve it.

Google Search Console

To monitor how our website performs in search results.

HubSpot

Our CRM and marketing platform, used to track form submissions and manage communications with enquirers and learners.

You can manage or withdraw your cookie consent at any time using the cookie preference tool on our website. For more information about cookies generally, visit www.aboutcookies.org.

08 // Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

Right of Access

Request a copy of the personal data we hold about you.

Right to Rectification

Ask us to correct inaccurate or incomplete data.

Right to Erasure

Request deletion of your data, subject to legal retention requirements.

Right to Restriction

Ask us to limit how we use your data in certain circumstances.

Right to Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to processing based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please email us at info@nextgencyberlimited.co.uk. We will respond within one calendar month.

09 // Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

ICO

Website: www.ico.org.uk
Helpline: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns directly before you contact the ICO. Please get in touch with us first at info@nextgencyberlimited.co.uk.

10 // Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your information.