Trust Centre
How we protect your data, safeguard young people, and operate with transparency.
Last updated: 7 April 2025
At Cyber Heroez CIC, trust is not just a value — it is the foundation of everything we do. We work with schools, families, and communities, which means the highest standards of data protection, safeguarding, and transparency are not optional. This page explains how we put those standards into practice.
Our Commitment to Trust
As a Community Interest Company focused on cybersecurity education, we hold ourselves to a high standard. We teach others about digital safety — so we must practise what we preach.
We collect only the data we need. We keep it only as long as necessary. We never sell it. We never use it for advertising. We are transparent about what we do and why.
Data Security
All data submitted through this website is stored using Supabase, a secure cloud database platform operating within the European Economic Area. Data is encrypted both at rest and in transit using TLS/SSL encryption.
Administrative access to our content management system is protected by authenticated login and restricted to authorised Cyber Heroez personnel only. We regularly review access permissions and revoke credentials when staff roles change.
We do not store payment information — we have no e-commerce functionality on this website.
What Data We Collect
We keep data collection to a minimum:
- Contact enquiries: Name, email, and message — to respond to your request. - Newsletter subscriptions: Email address only — to send programme updates. - Admin sessions: Authenticated session cookie for CMS access — not visible to public visitors.
We do not run analytics tracking, advertising pixels, or behaviour monitoring on this website. Public visitors have no tracking cookies placed on their devices.
Child Safety and Safeguarding
Safeguarding young people is central to our mission. We do not collect personal data directly from children through this website. All school-related enquiries must be made by a teacher, parent, or guardian.
Our programmes are designed to run in partnership with schools. Where a programme runs on school premises, the school’s own safeguarding policy applies and remains the school’s responsibility. Cyber Heroez staff and volunteers who work directly with young people hold current enhanced DBS checks.
If you have a safeguarding concern related to any of our activities, please contact us immediately at hello@cyberheroez.co.uk.
Third-Party Services We Use
We use a small number of third-party services to operate this website:
- Supabase — Database, authentication, and file storage. Operates within the EEA. Data Processing Agreement in place. - Vercel — Website hosting and deployment. Global CDN with UK/EU edge infrastructure. - Google Fonts — Web fonts loaded via next/font (no external requests at runtime; fonts are self-hosted at build time).
We do not use any advertising networks, social media tracking pixels, or third-party analytics services.
Your Rights
Under UK GDPR, you have the right to access, correct, delete, or export any personal data we hold about you. You can also object to how we process your data or withdraw any consent you have given.
To exercise your rights, email us at hello@cyberheroez.co.uk. We will acknowledge your request within 72 hours and respond fully within one month.
If you are not satisfied with our response, you may complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Report a Concern
If you have a concern about our data practices, a safeguarding issue, or a potential security vulnerability on this website, please contact us directly:
Email: hello@cyberheroez.co.uk Subject line: 'Data / Safeguarding / Security Concern'
We take all concerns seriously. A senior member of the Cyber Heroez team will review and respond to your report within two working days.