Last updated: 06/02/2026
Firaya Ltd (“Firaya”, “we”, “us”, or “our”) is committed to protecting your privacy and safeguarding your personal data. This Privacy Policy explains how we collect, use, store, and protect personal information when you use our website or engage with our services.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Firaya provides IT support, managed IT services, cyber security consultancy, and penetration testing services to businesses across the UK.
We improve, support, and protect IT systems through security-first thinking, specialist engineering, and ethical hacking expertise.
If you have any questions about this policy or how we handle your data, you can contact us using the details on our website.
We may collect and process the following types of personal data:
Name
Company name
Job title
Email address
Telephone number
Information submitted via contact forms, email enquiries, or support requests
When you visit our website, we may automatically collect:
IP address
Browser type and version
Device type and operating system
Pages visited and time spent on the site
Referring website or source
This data is collected using cookies and analytics tools and does not usually identify you personally on its own.
We use personal data to:
Respond to enquiries and contact requests
Provide and manage IT support and cyber security services
Communicate about services, proposals, or ongoing work
Improve our website, services, and user experience
Maintain security, monitoring, and fraud prevention
Meet legal, regulatory, or contractual obligations
We do not sell personal data to third parties.
Under UK GDPR, we rely on the following lawful bases:
Legitimate Interests – to operate, secure, and improve our business and services
Contractual Necessity – where processing is required to deliver agreed services
Consent – where you have explicitly opted in (e.g. marketing communications)
Legal Obligation – where required by law
You may withdraw consent at any time where consent is the lawful basis.
As part of delivering IT support, cyber security, or penetration testing services, Firaya may process or access systems that contain personal or confidential data.
Any such access is:
Strictly limited to what is necessary
Performed under contractual agreement
Handled confidentially and securely
Governed by internal security controls and professional standards
Firaya does not assume ownership of client data and acts only on documented instructions.
We may share personal data with trusted third parties where necessary, including:
Cloud and infrastructure providers
Security, monitoring, and backup platforms
Legal, regulatory, or professional advisors
All third parties are required to process data securely and in line with data protection law.
We do not transfer personal data outside the UK unless appropriate safeguards are in place.
We only retain personal data for as long as necessary:
To fulfil the purpose it was collected for
To meet contractual or legal requirements
To support legitimate business operations
When data is no longer required, it is securely deleted or anonymised.
Under UK data protection law, you have the right to:
Access your personal data
Request correction of inaccurate data
Request erasure of your data (where applicable)
Restrict or object to processing
Request data portability
Withdraw consent at any time
To exercise any of these rights, please contact us using the details on our website.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
Our website uses cookies to:
Ensure proper functionality
Analyse website usage and performance
Improve user experience
You can manage or disable cookies through your browser settings. Further details may be provided in a separate Cookie Policy.
We take appropriate technical and organisational measures to protect personal data, including:
Secure systems and access controls
Encryption and monitoring where appropriate
Staff confidentiality obligations
Security-first operational practices
However, no system can be guaranteed 100% secure, and users acknowledge this risk.
We may update this Privacy Policy from time to time. Any changes will be published on this page, and the “Last updated” date will be revised accordingly.
If you have any questions about this Privacy Policy or how your data is handled, please contact Firaya via the contact details listed on our website.
