Privacy Policy

---

1. Introduction 

Viable Consultants is committed to protecting your privacy and safeguarding the personal data of all clients, partners, and users. Whether through our Managed Services (MSP) or Cyber Security as a Service (SECaaS) offering, we operate under the guiding principle of being Confidential by Design. 

This privacy policy outlines how we collect, use, store, and protect your data in accordance with applicable laws such as the UK GDPR and Data Protection Act 2018. 

2. Data We Collect 

We may collect the following types of personal data: 

• Contact information (name, email, phone number) 
• Company details (business name, address, size) 
• Technical data (IP address, device identifiers, system logs) 
• Communication records (emails, meeting notes, submitted forms) 
• Service usage data (tickets, support logs, monitoring alerts) 
• Any additional information provided in the course of our services 

3. How We Use Your Data 

We use your data to: 

• Deliver, support, and manage IT and cybersecurity services 
• Respond to inquiries and technical support requests 
• Onboard and manage client accounts 
• Provide reporting and compliance documentation 
• Send relevant service updates or notifications (with consent) 
• Fulfil legal or contractual obligations 

4. Our Confidential by Design Approach 

We embed confidentiality and security at every level of our operations: 

• Minimal data collection: We only gather data necessary for service delivery 
• Encryption at rest and in transit: All data is protected using secure methods 
• Access control: Only authorised team members access sensitive information 
• Internal audits: We review our processes for data integrity and privacy regularly 
• Client-first mindset: We design every solution with your confidentiality in mind 

5. Sharing Your Information 

We do not sell, rent, or trade your data. We may share it with approved third-party service providers or partners only when necessary to: 

• Deliver and maintain our services (e.g. software vendors, cloud hosts) 
• Meet legal, compliance, or regulatory requirements 
• Support audits or business continuity planning 

All third parties are contractually bound to uphold equivalent data protection standards. 

6. Data Retention 

We retain data only as long as necessary to meet: 

• Contractual obligations 
• Service operations and performance reviews 
• Legal, financial, or compliance requirements 

When data is no longer needed, we securely delete or anonymise it. 

7. Your Rights 

You have the right to: 

• Access the personal data we hold about you 
• Request correction or deletion of your data 
• Object to specific processing or withdraw consent 
• Lodge a complaint with the Information Commissioner’s Office (ICO) 

8. Contact Us 

For questions, data requests, or concerns, contact: 

Data Protection Officer
Viable Consultants – Technology & Security Solutions
benita.agada@viableconsultants.com