23 February 2021

What is personal data?  

Personal data is information that can be used to identify an individual living person, either through use of a single or combination of data sets. You have the right of control over who uses your personal data, what it is used for, and what the legal basis for this processing is.

Who are we?  

Cyber Mutual Ltd. (Cyber Mutual) is a business that provides insurance backed cyber security services to industries with that rely on industrial control systems, such as energy and utility sectors.

How do we process your personal data?  

Cyber Mutual take an approach of data minimisation and as such will only collect and process personal data required to deliver services to you. The personal data that we collect includes:

Name – to create a unique record for you, and against which to log contact activity.

Email address – to allow us to send you product information, invitations to events and notify you of other Cyber Mutual benefits and resources.

Phone number – to provide a less transient contact method than an email address, and to be able to provide a personal invitation to consume ICS cyber risk information we feel might be of interest to you based on your preferences.

Employer – to ensure we can provide you with appropriate information aligned to your industry and to enable legal contracts and services to be agreed.

What is the legal basis for processing your personal data?  

The legal basis we use for processing your personal data is to provide you with appropriate information for events, contractual agreements and delivery of cyber risk insurance services. These would include notifying individuals of risks, methods of mitigating them, insurance quotations and upcoming mutual events. You may unsubscribe from Cyber Mutual’ mailings by using the unsubscribe link at the bottom of any of our emails.

Sharing your personal data?  

Any personal data supplied to Cyber Mutual as part of the sign-up process for receiving communications is not shared. Cyber Mutual may share data with prospective partners in the form of anonymised data relating to your level of engagement and renewal of cyber insurance. In providing cyber risk insurance services, Cyber Mutual partner with a range of brokers and underwriters and we share data with them on a contractual basis. That said, we will not share any identifying personal data with any partner, or 3rd party unless we have secured your approval in writing to do so and then the information will will be shared only with the named parties.

Cyber Mutual conducts occasional anonymous surveys of the industries it targets in order to improve its services; this data is not shared and any opinions expressed are not attributable to an individual data subject.

From time-to-time we may offer a prize draw as an incentive to those completing a Cyber Mutual survey, and as such will need to identify you for the purpose of selecting a winner. In such instances we will notify you at the time and point of data collection if your submission will not be anonymous and provide an alternative means by which you may submit your response anonymously without entering the prize draw.

How long do we keep your personal data for?  

We only retain and process your data for the duration of your employment with a Cyber Mutual target company. If at any point you decide not to maintain your communication subscription, or we deem you are no longer a suitable business target, or that we deem you have become inactive, we may remove your personal data from our systems. We will only keep records of the activities which you and we have conducted for the purposes of business development and account management.

How to access and control your personal data  

Please visit www.cybermutual.co.uk/individual-rights to view and exercise your rights around your personal data; how you may submit a Subject Access Request to understand what data we hold on you and how we use it; or to lodge a complaint about our use of your data.

Use of cookies  

Please visit www.cybermutual.co.uk/cookie-notice to read about the cookies used on our website, their purpose, and how you may manage use of them across various browsers (including blocking them altogether).

Data Protection Officer

For any questions or complaints about the processing of your personal data by Cyber Mutual, or to make a subject access request, please send details of your enquiry to our Data Protection contact at privacy@cybermutual.co.uk