Legal

Privacy Policy

Last Updated: May 2026

BDG Group LTD trading as UltraCNS ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website or use our services.

Who We Are

UltraCNS provides cyber security, IT consultancy, penetration testing, monitoring, and related technology services. If you have any questions regarding this Privacy Policy, please contact us at the details below.

Information We Collect

We may collect and process the following information:

Information You Provide

• Name
• Company name
• Email address
• Telephone number
• Information submitted through contact forms or enquiries

Technical Information

• IP address
• Browser type and version
• Device information
• Operating system
• Website usage data
• Cookies and analytics data

How We Use Your Information

We use your information to:

• Respond to enquiries
• Provide requested services
• Manage client relationships
• Improve website functionality and performance
• Maintain website security
• Comply with legal and regulatory obligations

We will only process personal data where we have a lawful basis to do so under UK GDPR.

Legal Basis for Processing

We may process your data under the following lawful bases:

• Consent
• Legitimate interests
• Contractual necessity
• Legal obligation

Data Sharing

We do not sell personal data. We may share information with trusted third-party service providers where necessary to operate our business, including hosting providers, cloud service providers, email and communication platforms, security monitoring providers, and analytics providers. All third parties are expected to maintain appropriate security and confidentiality standards.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy or comply with legal obligations.

Data Security

We implement appropriate technical and organisational security measures designed to protect personal data from unauthorised access, disclosure, alteration, or destruction. However, no internet-based system can be guaranteed to be completely secure.

Your Rights

Under UK GDPR, you may have the right to:

• Access your personal data
• Request correction of inaccurate information
• Request deletion of your data
• Object to processing
• Request restriction of processing
• Request data portability
• Withdraw consent where applicable

Cookies

Our website may use cookies and similar technologies. Please refer to our Cookie Policy for further information.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of external sites.

Changes to This Policy

We may update this Privacy Policy periodically. Any updates will be posted on this page.

Contact