Privacy policy

Who we are

BreakIntoCybersecurity is run by Dgr8cali LTD, a company based in the United Kingdom. We decide how your personal data is used, which makes us the “data controller”. You can reach us at ask@breakintocybersecurity.co.

What we collect

• When you register for the free training: your first name, email address, mobile number, when you want to start, and where you came from (for example, which advert).
• While you watch: how much of the training you watched, your answers to the on-screen questions, and any question you send us.
• When you create an account or buy: your name, email, password (stored securely, never in plain text), your plan, your lesson progress, and your payment confirmation. Card details go straight to Stripe. We never see or store them.

Why we use it, and our legal basis

• To give you what you asked for (the training, your account, your course, your receipts): this is needed to provide the service. It includes the link to the training and reminders to watch it.
• To keep the service safe and working and to see how the training performs: our legitimate interests.
• To send you marketing (career tips and offers by email, text and phone): only if you tick the box on the registration form. That is your consent, and you can withdraw it at any time.
• To meet legal duties, such as keeping accounting records.

Marketing, and how to stop it

If you did not tick the marketing box, we will not send you promotional emails, texts or calls. We will still send messages that are part of what you signed up for: your training link, reminders to watch it, replies to your questions, and account and payment messages.

Phone marketing can include calls made with automated technology, such as an AI voice assistant. At the start of any such call we will tell you it is automated, and you can ask us to stop calling you at any point.

If you did tick it, you can stop at any time: use the unsubscribe link in any email, reply STOP to any text, tell us on a call, or email us. If you buy from us, we may tell you about similar products and you can opt out of that in the same ways.

Who we share it with

We use these companies to run the service. They handle data only on our instructions:

• Supabase: our database and login system
• Vercel: website hosting
• Stripe: payments
• Resend: sending account emails
• Kit: email programmes, if you opted in to marketing
• Twilio and Vapi: texts and calls, if you opted in to marketing
• Make: connects these tools together
• YouTube (Google): plays the training videos

Some of these are based outside the UK, mainly in the United States. Where that happens we rely on approved safeguards for transfers of personal data. We never sell your data.

Cookies

We use only the cookies the site needs to work: they keep you signed in and remember your personal training link. The training video uses YouTube's privacy-enhanced player, which does not set cookies until you press play. We do not use advertising or tracking cookies.

How long we keep it

We keep registration and watch data for as long as it is useful to you and to us, and no longer than 3 years after your last activity unless you become a student. Student account data is kept while you have an account, and accounting records for the time the law requires. If you ask us to delete your data, we will, unless the law requires us to keep some of it.

Your rights

You can ask to see the data we hold about you, correct it, delete it, restrict or object to how we use it, take a copy to move elsewhere, and withdraw consent at any time. Email ask@breakintocybersecurity.co and we will reply within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If we change this policy in a way that matters, we will update this page and the date below.