Privacy Policy
Last updated 21 August 2026
This policy explains how CYBERTAUR LLC ("Cybertaur", "we", "us") collects and handles personal data. It covers our website, our business software services, and our membership platforms.
For personal data we collect about our own customers and website visitors, Cybertaur is the data controller. For personal data our customers place into systems we host on their behalf, the customer is the controller and Cybertaur acts as processor under their instructions.
01What we collect
- Enquiry and contact data — name, email address, company name and the content of your message, when you contact us.
- Customer account data — billing contact details, company details, and records of the services provided to you.
- Payment data — processed entirely by Stripe. We receive confirmation of payment, the last four digits of the card and its expiry. We never receive or store full card numbers.
- Subscriber data — for membership platforms: account email, subscription status, and which content has been accessed.
- Technical data — server logs including IP address, browser type and pages requested, retained for security and diagnostics.
Our website does not use advertising or analytics cookies and does not track visitors across other sites.
02Why we use it
- To respond to enquiries and provide quotations.
- To deliver, host, support and maintain the services you have purchased.
- To invoice you and collect payment.
- To secure our systems, investigate incidents and prevent abuse.
- To meet legal, accounting and tax obligations.
Where the GDPR applies, we rely on performance of a contract for service delivery and billing, our legitimate interest in operating and securing our business for technical and security data, and legal obligation for accounting records. We do not send marketing email without consent.
03Who we share it with
We do not sell personal data. We share it only with service providers necessary to operate, each bound to protect it:
- Stripe — payment processing.
- hosting providers located in the European Union; a current list of subprocessors is available on request.
- Our accountants and professional advisers, and public authorities where required by law.
04Where data is held
Systems we operate are hosted in the European Union unless a customer agreement specifies otherwise. Some of our service providers are established in the United States; where personal data is transferred there, the transfer is made under Standard Contractual Clauses or another lawful transfer mechanism.
Customers who require that their installation and its backups remain within a specific jurisdiction can request this; we will confirm in writing whether we can meet the requirement before the engagement begins.
05How long we keep it
- Enquiries that do not lead to an engagement — twenty-four months.
- Customer records and invoices — for as long as required by tax and accounting law, currently seven years.
- Hosted customer data — for the duration of the service, then thirty days in backup after termination, after which it is permanently deleted.
- Server logs — ninety days.
06Security
Each customer runs on a separate, isolated installation rather than a shared system. Data in transit is encrypted with TLS. Backups are encrypted and stored separately from production. Administrative access is restricted, individually authenticated, and protected by multi-factor authentication.
No system is perfectly secure. If a breach affecting your personal data occurs, we will notify affected customers and, where required, the competent supervisory authority without undue delay.
07Your rights
Depending on where you live, you may have the right to request access to your personal data, correct it, delete it, restrict or object to its processing, receive it in a portable format, or withdraw consent you have given.
To exercise any of these, write to office@cybertaur.com. We respond within thirty days. There is no charge unless a request is manifestly unfounded or excessive.
If your personal data sits inside a system we host for one of our customers, that customer decides how it is used. We will pass your request to them and support them in answering it.
If you are in the European Economic Area or the United Kingdom and believe we have not handled your data properly, you may lodge a complaint with your national data protection authority.
08Children
Our services are intended for businesses and for adults. We do not knowingly collect personal data from children under sixteen. If you believe a child has provided us with personal data, contact us and we will delete it.
09Changes
We may update this policy. The date at the top shows when it last changed. Material changes are notified to active customers by email.
10Contact
Privacy questions and requests: office@cybertaur.com
CYBERTAUR LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States.