CYBUNKR

Legal

GDPR Policy

Last updated 10 October 2026

Our commitment

CYBUNKR processes personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains the principles we follow and the rights you have. How we use data collected through this website is set out in our Privacy Policy.

Data protection principles

We make sure personal data is:

  • processed lawfully, fairly and transparently;
  • collected for specified, explicit and legitimate purposes;
  • adequate, relevant and limited to what is necessary;
  • accurate and kept up to date;
  • kept no longer than necessary;
  • protected by appropriate security;
  • handled accountably, with records to show we comply.

Client engagements

When delivering services such as penetration testing, Cyber Essentials, connectivity or digital transformation, we may have access to personal data held in our clients’ systems. In those cases we act as a processor: we handle that data only on the client’s documented instructions and under a written agreement, keep it confidential, and return or delete it when the engagement ends.

Your rights

  • Be informed about how your data is used.
  • Access the personal data we hold about you.
  • Rectification of inaccurate or incomplete data.
  • Erasure of your data in certain circumstances.
  • Restrict how we process your data.
  • Data portability: receive your data in a reusable format.
  • Object to processing based on legitimate interests or for direct marketing.
  • Not to be subject to decisions based solely on automated processing. We do not make such decisions.

Exercising your rights

Email hello@cybun.kr with your request. We may need to verify your identity. We will respond within one month, as required by law, and there is normally no charge.

Data breaches

If a personal data breach occurs, we will notify the Information Commissioner’s Office and affected individuals where required, within the statutory deadlines.

Complaints

If you are unhappy with how we have handled your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office.