Privacy Notice

Privacy Notice

Last Updated: August 2026


Zerium ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, disclose, and safeguard your personal data when you visit our website www.zerium.co.uk (the "Website"), request a consultation, or interact with our hardware-centric cybersecurity services.

Zerium is a trading name of AccSec LLP, registered at 79 Essex Road, London, N1 2SF, United Kingdom. We operate as the Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.



1. Information We Collect About You

We may collect and process the following types of personal data:

  • Identity Data: First name, last name, and professional title.
  • Contact Data: Email address, telephone number, and business address.
  • Inquiry Data: Information you provide when filling out our "Request a Consultation" form or contacting us via info@zerium.co.uk, including your company name and specific security requirements.
  • Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, and platform used to access our Website.
  • Usage Data: Information about how you navigate and interact with our Website.



2. How and Why We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we use your data under the following legal bases:



Performance of a Contract

  • To process your request for a consultation or respond to queries regarding our Sepio asset risk management solutions.
  • To manage our ongoing business relationship and deliver contracted cybersecurity services.



Legitimate Interests

  • To optimize and secure our Website infrastructure.
  • To send you relevant cybersecurity insights, updates, and framework guidance (e.g., NIST, CIS Controls, GDPR, BOD 23-01) where you have shown professional interest, provided this does not override your fundamental rights.



Legal Obligation

  • To comply with regulatory, tax, or legal requirements in the United Kingdom.




3. How We Share Your Personal Data

We do not sell your personal data. We may share your information with trusted third parties only to the extent necessary to provide our services:

  • Authorized Partners: As an authorized UK seller of Sepio, we may share relevant inquiry data with Sepio systems to coordinate platform deployment, testing, and configuration.
  • Service Providers: IT hosting, security monitoring, and website analytics providers who act as data processors under strict contractual constraints.
  • Legal Authorities: If required by law, regulation, or a government agency.




4. International Data Transfers

Your data is primarily stored and processed within the United Kingdom and the European Economic Area (EEA). If any of our service providers or partners (such as Sepio) process data outside the UK or EEA, we ensure appropriate safeguards are in place—such as Standard Contractual Clauses (SCCs) or International Data Transfer Agreements (IDTAs)—to guarantee your data remains protected to UK standards.



5. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including satisfying any legal, regulatory, tax, accounting, or reporting requirements.

  • Inquiry data from non-converting prospects is securely deleted or anonymized after 24 months.
  • Client account data is retained for the duration of our contract plus 6 years for legal and liability purposes.



6. Your Legal Rights

Under the UK GDPR, you have specific rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Ask us to correct inaccurate or incomplete data.
  • Right to Erasure: Request the deletion of your personal data under certain conditions.
  • Right to Restrict or Object: Limit or object to our processing of your data, including direct marketing.
  • Right to Data Portability: Request the transfer of your data to another organization.

To exercise any of these rights, please contact us at info@zerium.co.uk.



7. Security of Your Data

We have implemented robust technical and organizational security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed. Access to your personal data is strictly limited to employees, partners, and contractors who have a legitimate business need to know.



8. Contact Us & Complaints

If you have any questions about this Privacy Notice or how we handle your data, please reach out to us:

  • Email: info@zerium.co.uk
  • Telephone: +44 (0)20 8191 2191
  • Address: Zerium (AccSec LLP), 79 Essex Road, Islington, London, N1 2SF, United Kingdom

You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first.