Last updated: 12/06/2025

This Privacy Policy ("Policy") explains how CYBERPLUNDER LIMITED (Company No. 15574371, England & Wales) ("Cyberplunder", "we", "us") collects, uses, stores and protects your information when you use https://hack.cyberplunder.com (the "Website").

1. What Data We Collect

• Username
• Email address
• Password (encrypted)
• Feedback and responses about user experience
• Usage analytics (e.g., most accessed rooms, number of challenge attempts)
• Log data (IP address, browser type, pages visited, time spent, etc.)

2. How We Collect Your Data

• Account registration and profile setup forms
• Feedback forms, focus groups and interviews
• Participation in cybersecurity events such as Capture The Flag (CTF) competitions
• Automated logging when interacting with Website features
• Cookies and tracking tools (see our Cookies Policy)

3. Lawful Basis for Processing

We process personal data only when we have a valid legal basis, including:

• Consent
• Contract (to provide services you request)
• Legal obligation
• Legitimate interests (improving and securing the Website)

4. How We Use Your Data

• Personalise your experience and content
• Manage and maintain your account
• Analyse user activity to improve our services
• Facilitate event participation and collaboration with event partners
• Send relevant updates and recommendations (you may opt out)

5. Email Communication

By default, you are opted in to receive communications related to account activity, recommendations and event details. You may opt out at any time via email or the unsubscribe link in our messages.

6. How We Store and Secure Your Data

• Data stored on encrypted, secure servers
• Access restricted to authorised personnel
• SSL/TLS encryption for sensitive data in transit
• Data retained only as long as necessary, then securely deleted or anonymised

7. Third Party Links

The Website may contain links to external sites. We are not responsible for their content or privacy practices. Please review their policies individually.

8. Your Data Protection Rights

Under UK GDPR, you have rights to:

• Access – request copies of your personal data
• Rectify – correct inaccurate or incomplete data
• Erase – request deletion under certain conditions
• Restrict processing – limit how we use your data
• Object – object to certain processing
• Data portability – request transfer to another provider

To exercise any of these rights, contact us at info@cyberplunder.com. We will respond within one month. More information is available from the Information Commissioner’s Office (ICO).

9. How to Contact Us

Email: info@cyberplunder.com

10. Changes to This Privacy Policy

We may update this Policy periodically. Changes will be posted on the Website with an updated revision date. Continued use signifies acceptance of the changes.

11. Accessibility & Additional Help

If you require this Policy in another format (large print, audio, braille), please contact us and we will assist you.

12. How to Complain

If you have concerns about our use of your data, contact us first. You may also lodge a complaint with the ICO: https://ico.org.uk/make-a-complaint/