About 5YBER Limited & Scope of this Policy
5YBER Limited (trading as 5yber Ltd, "5YBER", "we", "us", or "our") is a private limited company registered in England and Wales under Company Registration Number 16304827, with its registered office located at 140 Askew Road, London, United Kingdom, W12 9BX.
5YBER Limited delivers enterprise IT consultancy, agentic artificial intelligence systems, bespoke software development, cybersecurity solutions, and cloud productivity applications. This Privacy Policy applies to all services, commercial consultancy engagements, software platforms, websites, and productivity tools operated by 5YBER Limited.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, 5YBER Limited is the Data Controller responsible for your personal data.
Information We Collect
We collect only the personal information necessary to deliver our consultancy services, support customer inquiries, and operate our software applications:
A. Direct Client & Account Information
- Contact & Identity Details: Full name, professional email address, phone number, company name, and job title provided when requesting a discovery call, contacting us, or registering for our tools.
- Project & Configuration Data: Technical requirements, project briefs, draft content, and style preferences voluntarily provided to configure customized AI pipelines and software workflows.
- Billing & Commercial Information: Invoicing contact details, company billing addresses, and payment records. (Credit and debit card transactions are processed securely by certified PCI-DSS Level 1 payment processors).
B. Technical & Operational Information
- Device & Network Data: IP addresses, browser user-agents, and access timestamps collected automatically for infrastructure monitoring, error diagnosis, and cybersecurity defense.
- Session Cookies: Strictly necessary HTTP session tokens used solely to maintain authenticated user sessions and safeguard against Cross-Site Request Forgery (CSRF).
How We Use Information & Lawful Basis
We process personal data in accordance with UK GDPR Article 6 under the following lawful bases:
- Contractual Performance: Providing agreed IT consultancy services, developing custom AI systems, and operating our software tools requested by clients and users.
- Legitimate Interests: Securing our networks and cloud applications, preventing malicious activity or unauthorized access, and improving the stability of our technical infrastructure.
- Consent: Where you explicitly authorize connections between your user account and external third-party services or platform APIs.
- Legal Compliance: Retaining necessary transaction and accounting records as mandated by UK statutory corporate regulations (HMRC).
Platform Integrations & Third-Party APIs
Certain 5YBER software tools and productivity services offer optional integrations with third-party platforms (such as LinkedIn and social media management APIs) to allow automated publishing and performance tracking. When you voluntarily connect an external platform account, we access data strictly via official OAuth 2.0 authorization protocols.
| Authorized Scope | Data Accessed | Operational Purpose |
|---|---|---|
| openid | Unique member identifier (sub) | Authenticates your platform identity securely without ever handling or storing your account password. |
| profile | Full name & profile image | Displays your connected user identity within your application workspace. |
| Verified email address | Associates your user account and transmits critical publishing status notifications. | |
| w_member_social | Publishing authorization | Publishes, schedules, and uploads user-approved content (text, images, videos, and documents) to your feed solely upon your direct instruction. |
You retain full control over all third-party platform connections. You can disconnect your integration at any time within your application account settings, or revoke access directly via the platform's permitted services dashboard.
What We Do Not Do
To maintain professional integrity and protect our clients and users, 5YBER Limited maintains strict operational prohibitions:
- We do not scrape data: We do not perform unauthorized web scraping, harvest member directories, or extract private profile data from connected platforms.
- We do not automate spam or unsolicited interactions: We never automate connection requests, unsolicited messaging, endorsements, or inorganic engagement campaigns.
- We do not sell personal data: We never sell, rent, broker, or trade client information, user data, or API tokens to third parties, advertisers, or data brokers.
- We do not train public AI models on private data: Client writing samples, proprietary code, and private draft materials are never used to train public or shared foundation AI models.
- We do not post without authorization: We will never distribute or publish content to any third-party platform without explicit user confirmation or active scheduling instructions.
Data Security & Cryptography Standards
As an IT consultancy specializing in cybersecurity and modern cloud architecture, 5YBER implements robust enterprise-grade security standards:
Technical Safeguards
- Encryption at Rest: Sensitive authentication tokens and credentials are encrypted at rest using industry-standard AES-256-GCM (Galois/Counter Mode) cryptography with unique initialization vectors. Authentication tokens are never stored in plain text.
- Encryption in Transit: All communication between user browsers, our cloud infrastructure, and external APIs is strictly enforced via TLS 1.3 transport encryption.
- Tenant Isolation: Application databases enforce strict isolation and Row-Level Security (RLS) to ensure that each organization's data remains completely confidential.
Data Retention & Account Erasure
We retain personal data only for as long as necessary to provide the requested services and fulfill statutory record-keeping obligations:
- Connected Platform Tokens: Active API access tokens are retained only while your account integration remains connected. Disconnecting an integration immediately wipes and zeroes stored credentials from our databases.
- Account Deletion: If you close your account or request data deletion, your profile records, stored drafts, application data, and tokens are permanently purged within thirty (30) days.
- Statutory Retention: Standard commercial invoices and financial transaction records are retained for statutory tax and accounting purposes as required by UK HMRC regulations (typically 6 years).
Third-Party Service Providers
We work with vetted third-party service providers to support our cloud infrastructure, communications, and specialized AI processing. All service providers are bound by confidentiality and GDPR-compliant Data Processing Agreements:
- Cloud Hosting & Databases: Secure managed cloud infrastructure and database hosting providers (UK, EU, and US) compliant with ISO 27001 and SOC 2 standards.
- AI Model Infrastructure: Enterprise API model providers (such as Anthropic) utilized under commercial privacy terms that guarantee zero data retention for foundational model training.
- Payment Processors: Stripe Payments Europe for secure, PCI-DSS compliant credit card handling and billing services.
- Platform APIs: Official developer APIs (such as LinkedIn Corporation) utilized strictly for user-authorized publishing and authentication.
Your Statutory Rights Under UK GDPR
If you reside in the United Kingdom or European Economic Area, you hold statutory rights under UK GDPR regarding your personal data:
- Right of Access: You can request a copy of the personal information we hold about you.
- Right to Rectification: You can request correction of any inaccurate or incomplete personal records.
- Right to Erasure: You can request the deletion of your personal data when it is no longer required.
- Right to Restrict or Object: You can object to or request restrictions on certain processing activities.
- Right to Data Portability: You can request your data in a structured, commonly used, machine-readable format.
- Right to Withdraw Consent: You can withdraw consent for any connected platform integration at any time.
To exercise any of these rights, please contact our privacy team at privacy@5yber.com. We respond to all legitimate requests within thirty (30) days without charge. You also have the right to contact the UK Information Commissioner's Office (ICO) at ico.org.uk if you have unresolved concerns.
Contact Us
If you have any questions or inquiries regarding this Privacy Policy or our data protection standards, please contact us:
5YBER Limited
Legal Entity: 5YBER Limited (trading as 5yber Ltd)
UK Registration Number: 16304827
Registered Office: 140 Askew Road, London, United Kingdom, W12 9BX
Data Privacy Inquiries: privacy@5yber.com
General Contact: Info@5yber.com
Telephone: +44 7955 849149