Privacy Policy
Last updated: 14 May 2026
Cube8 Consulting Ltd ("Cube8", "we", "us") is committed to protecting the privacy of individuals who engage with our services.
Who we are
Cube8 Consulting Ltd is a UK-registered company providing AI training, enablement and governance advisory services to UK public sector organisations.
Contact: contact@cube8.co.uk
What personal data we collect
| Data type | When collected | Purpose |
|---|---|---|
| Name, job title, organisation | Contact forms, registration | To respond to enquiries and deliver services |
| Email address, phone number | Contact forms, registration | Communication about services, bookings, invoices |
| Payment information | Course bookings | Processed via Stripe (we do not store card details) |
| IP address, device info | Website visits | Analytics, security, website improvement |
Lawful basis for processing
- Contract: Where processing is necessary to deliver services you've purchased
- Legitimate interests: To respond to enquiries, improve our services, and protect against fraud
- Consent: For marketing communications (you may withdraw at any time)
Data sharing
We share personal data only with:
- Stripe — payment processing (PCI-DSS compliant)
- Email service provider — transactional emails
- HMRC / professional advisers — where legally required
We do not sell personal data.
Data retention
- Enquiries: 2 years from last contact
- Customer records: 7 years (UK statutory requirement)
- Marketing consent: Until withdrawn, plus 1 year
International transfers
Data is processed primarily in the UK/EEA. Where third-party providers process data outside the UK, we ensure adequate safeguards are in place (Standard Contractual Clauses or UK adequacy decisions).
Your rights
Under UK GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data (where applicable)
- Restrict or object to processing
- Data portability
- Withdraw consent
- Lodge a complaint with the ICO (ico.org.uk)
To exercise any right, contact: contact@cube8.co.uk
Security
We implement appropriate technical and organisational measures including encryption in transit (TLS), access controls, and secure payment processing via Stripe.
Changes to this policy
We may update this policy periodically. Material changes will be posted on this page with an updated date.