SCYR / PRIVACY & DATA PROTECTION
Privacy. By design.
Privacy. By design.
Privacy. By design.
Privacy. By design.
We believe trust begins with clarity. This notice explains how SCYR handles personal information when you visit our website or contact us about our services.
We believe trust begins with clarity. This notice explains how SCYR handles personal information when you visit our website or contact us about our services.
We believe trust begins with clarity. This notice explains how SCYR handles personal information when you visit our website or contact us about our services.
EFFECTIVE / 27 OCTOBER 2026
HOW WE HANDLE YOUR INFORMATION
01
CONTROLLER
Who we are
Who we are
SCYR Limited (registered in Ireland under company number 755676; “SCYR”, “we”, “us”) is an Irish cybersecurity consultancy and the controller of personal data received through this website. Our registered office is Spring Garden, Dromard, Sligo, F91 AF86, Ireland. For privacy enquiries, contact sales@scyr.io or use our contact form and select “Privacy enquiry” as the topic.
SCYR Limited (registered in Ireland under company number 755676; “SCYR”, “we”, “us”) is an Irish cybersecurity consultancy and the controller of personal data received through this website. Our registered office is Spring Garden, Dromard, Sligo, F91 AF86, Ireland. For privacy enquiries, contact sales@scyr.io or use our contact form and select “Privacy enquiry” as the topic.
02
INFORMATION
Information we collect
Information we collect
When you use our contact form, we collect your name, work email address, optional organisation, enquiry topic and message. Name, email, topic and message are required to submit the form; the organisation field is optional. Sending an enquiry is voluntary and is not a statutory obligation, but without the required information we cannot receive or respond to the enquiry. Our website infrastructure may also process IP addresses, request information, browser or device details and relevant security logs to deliver and protect the site. We do not create visitor accounts.
When you use our contact form, we collect your name, work email address, optional organisation, enquiry topic and message. Name, email, topic and message are required to submit the form; the organisation field is optional. Sending an enquiry is voluntary and is not a statutory obligation, but without the required information we cannot receive or respond to the enquiry. Our website infrastructure may also process IP addresses, request information, browser or device details and relevant security logs to deliver and protect the site. We do not create visitor accounts.
03
PURPOSES & BASIS
Why we use this information
Why we use this information
We use enquiry details to respond and discuss potential services. For business enquiries, our main lawful basis is our legitimate interests under GDPR Article 6(1)(f) in communicating with prospective clients, preparing proposals and operating our consultancy, balanced against individuals’ rights. Where an individual asks us to take steps before personally entering a contract, Article 6(1)(b) may apply. We process limited technical data for website delivery, reliability and protection against abuse on the basis of our legitimate interests in keeping the website available and secure. Where processing is needed to comply with legal obligations, Article 6(1)(c) applies. We do not use contact form details for unsolicited marketing.
We use enquiry details to respond and discuss potential services. For business enquiries, our main lawful basis is our legitimate interests under GDPR Article 6(1)(f) in communicating with prospective clients, preparing proposals and operating our consultancy, balanced against individuals’ rights. Where an individual asks us to take steps before personally entering a contract, Article 6(1)(b) may apply. We process limited technical data for website delivery, reliability and protection against abuse on the basis of our legitimate interests in keeping the website available and secure. Where processing is needed to comply with legal obligations, Article 6(1)(c) applies. We do not use contact form details for unsolicited marketing.
04
CONTACT ENQUIRIES
Contact forms and communication
Contact forms and communication
Our native Framer contact form sends enquiries to sales@scyr.io, a mailbox hosted on Microsoft 365. We do not use a separate enquiries database, Google Sheets destination or webhook for this form. Framer and its delivery providers may process submission information, spam-protection signals and operational delivery records; their separate operational retention periods depend on the relevant provider arrangements. Please do not submit passwords, credentials, sensitive security findings or confidential infrastructure details through this form.
Our native Framer contact form sends enquiries to sales@scyr.io, a mailbox hosted on Microsoft 365. We do not use a separate enquiries database, Google Sheets destination or webhook for this form. Framer and its delivery providers may process submission information, spam-protection signals and operational delivery records; their separate operational retention periods depend on the relevant provider arrangements. Please do not submit passwords, credentials, sensitive security findings or confidential infrastructure details through this form.
05
PROVIDERS
Service providers and disclosures
Service providers and disclosures
Framer provides the website and native form infrastructure. Microsoft 365 processes our business email and correspondence. Cloudflare provides DNS services and may process technical information where its proxy or security features are enabled. These suppliers may use subprocessors under their applicable data-protection arrangements. We may also disclose information where required by law or necessary to establish, exercise or defend legal claims. We do not sell personal information supplied through our contact form.
Framer provides the website and native form infrastructure. Microsoft 365 processes our business email and correspondence. Cloudflare provides DNS services and may process technical information where its proxy or security features are enabled. These suppliers may use subprocessors under their applicable data-protection arrangements. We may also disclose information where required by law or necessary to establish, exercise or defend legal claims. We do not sell personal information supplied through our contact form.
06
INTERNATIONAL TRANSFERS
Processing outside the EEA
Processing outside the EEA
SCYR’s Microsoft 365 tenant reports European Union/EFTA as the current and committed data storage geography for all listed services. This is a data-residency commitment and does not rule out all international access or processing. Framer, Cloudflare, Microsoft and their subprocessors may process certain personal data outside the European Economic Area when providing their services. Where an international transfer requires safeguards under the GDPR, these may include an applicable adequacy decision or the European Commission’s Standard Contractual Clauses, with supplementary measures where required. Contact sales@scyr.io for information about applicable safeguards.
SCYR’s Microsoft 365 tenant reports European Union/EFTA as the current and committed data storage geography for all listed services. This is a data-residency commitment and does not rule out all international access or processing. Framer, Cloudflare, Microsoft and their subprocessors may process certain personal data outside the European Economic Area when providing their services. Where an international transfer requires safeguards under the GDPR, these may include an applicable adequacy decision or the European Commission’s Standard Contractual Clauses, with supplementary measures where required. Contact sales@scyr.io for information about applicable safeguards.
07
RETENTION
How long we retain data
How long we retain data
Where an enquiry does not lead to a client engagement, we normally retain the enquiry and related correspondence for 12 months after the last meaningful communication, unless a legal obligation or dispute requires longer retention. Where an enquiry develops into an engagement, relevant records are kept in accordance with the contract, necessary business purposes and applicable legal requirements. Service providers may apply separate retention periods to delivery, security and operational records, which may differ from SCYR’s enquiry retention period. Information no longer required is deleted or anonymised as appropriate.
Where an enquiry does not lead to a client engagement, we normally retain the enquiry and related correspondence for 12 months after the last meaningful communication, unless a legal obligation or dispute requires longer retention. Where an enquiry develops into an engagement, relevant records are kept in accordance with the contract, necessary business purposes and applicable legal requirements. Service providers may apply separate retention periods to delivery, security and operational records, which may differ from SCYR’s enquiry retention period. Information no longer required is deleted or anonymised as appropriate.
08
YOUR RIGHTS
Your data-protection rights
Your data-protection rights
Subject to applicable conditions and exceptions, you can request access to your personal data, correction or erasure, restriction, object to processing based on legitimate interests, and request portability where applicable. Where processing relies on consent, you may withdraw that consent. To exercise a right, email sales@scyr.io with “Privacy enquiry” in the subject or use our contact form. We may need to verify your identity.
Subject to applicable conditions and exceptions, you can request access to your personal data, correction or erasure, restriction, object to processing based on legitimate interests, and request portability where applicable. Where processing relies on consent, you may withdraw that consent. To exercise a right, email sales@scyr.io with “Privacy enquiry” in the subject or use our contact form. We may need to verify your identity.
09
COOKIES
Cookies and related technologies
Cookies and related technologies
SCYR has not configured Google Analytics, advertising pixels or additional behavioural-tracking scripts. Framer provides built-in aggregate, cookieless site analytics as part of its platform. Necessary site delivery, form protection and security features may still involve technical identifiers or storage. Our Cookies page explains our approach to these technologies and how consent will be handled if it is required.
SCYR has not configured Google Analytics, advertising pixels or additional behavioural-tracking scripts. Framer provides built-in aggregate, cookieless site analytics as part of its platform. Necessary site delivery, form protection and security features may still involve technical identifiers or storage. Our Cookies page explains our approach to these technologies and how consent will be handled if it is required.
10
CONTACT & CHANGES
Complaints, updates and contact
Complaints, updates and contact
If you are dissatisfied with how we handle your data, please contact us first so we can review your concern. You also have the right to complain to the Irish Data Protection Commission (www.dataprotection.ie), or another competent supervisory authority. We may update this notice when our services, providers or data-handling practices change. The effective date of this notice is stated above.
If you are dissatisfied with how we handle your data, please contact us first so we can review your concern. You also have the right to complain to the Irish Data Protection Commission (www.dataprotection.ie), or another competent supervisory authority. We may update this notice when our services, providers or data-handling practices change. The effective date of this notice is stated above.
CONFIDENTIALITY / ACCOUNTABILITY
Questions about your data?
Questions about your data?
Email sales@scyr.io or use our contact form and enter “Privacy enquiry” in the topic field. We will direct the message to the appropriate person.
Contact SCYR ↗