Your data is used for the request you choose to make.
Provider comparison is kept separate from permission to share your contact details.
Who is responsible for this service
IKAMIN TECHNOLOGY LIMITED (company no. 16024486), operating CZITAPP / Cyber Essentials Compare UK, is responsible for the application-layer personal information described on this page. Privacy enquiries can be sent to [email protected].
Information you submit
If you use a quote or referral form, CZITAPP may collect your name, work email, organisation, certification requirement, deadline, notes, selected provider choices, consent wording, consent time and referral reference. Forms should request only information reasonably needed for the enquiry.
Why it is used
Information is used to respond to your request, operate and secure the service, maintain an auditable referral record, meet legal or accounting obligations where applicable, and—only when you explicitly choose named referral partners—to send the specific enquiry to those selected providers.
Provider sharing
Comparison-only providers do not receive your personal information automatically. When direct routing is available, only the provider or providers you actively select should receive the enquiry. That introduction is for the stated certification request and does not itself grant permission for unrelated marketing.
Technical data and analytics
Hosting, security and analytics services configured on the live website may process limited technical data such as IP address, browser information, request logs or consent choices. Non-essential analytics and marketing technologies should be controlled by the site's active consent configuration where required.
Affiliate and referral tracking
Where CZITAPP uses an active affiliate or referral link, the destination platform may use link parameters, cookies or similar attribution technology to record that CZITAPP introduced the visit or commercial action. The exact tracking technology and retention period are controlled by the relevant programme and should be reflected in the live site's consent configuration where required. CZITAPP should not describe a company as an affiliate partner unless that relationship is active.
Retention
Personal information should be kept only for as long as it is needed for the enquiry, related commercial/accounting records, security, dispute handling or applicable legal obligations, and then deleted or anonymised where appropriate.
Your rights
Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase or restrict personal information, object to certain processing, or complain to the Information Commissioner's Office. Contact CZITAPP first if you want to exercise a right relating to information held by this service.
External sites
Links to NCSC, IASME, providers, publishers and other third parties lead to services with their own privacy practices. CZITAPP does not control those external policies.
Changes
This notice should be updated when the site's data flows or service providers materially change. Last substantive theme review: 26 September 2026.