Privacy Policy
LAST UPDATED: MAY 2026 · APPLIES TO: SME CYBER SCORECARD TOOL ONLY
Overview
This privacy policy applies exclusively to the CyberKyrian SME Cyber Scorecard — a free self-assessment tool for Nigerian small and medium businesses. It does not govern CyberKyrian's broader website, services, or other products.
We take your privacy seriously. This policy explains what information this tool collects, how it is used, and how it is protected.
What We Collect
When you complete the assessment and request your full report, we collect the following information you provide in the form:
- First name and last name
- Company name
- Work email address
- Your role within the business
- Industry sector
- Staff size
We also collect your assessment responses — the answers you selected for each of the 24 questions — along with the scores calculated from those answers. These are used solely to generate your personalised report.
We do not collect any payment information, government identification, or sensitive personal data.
How Your Data Is Used
- To generate your personalised PDF security report and assessment certificate
- To email those documents to the address you provided
- To record your submission in a secure Google Sheet accessible only to CyberKyrian
- To send an internal notification to the CyberKyrian team for quality monitoring
Your data is never sold, shared with third parties, or used for advertising. It is used only to deliver your report and improve this tool.
Data Processing & Storage
Your form data and assessment results are transmitted to a Google Apps Script web application operated by CyberKyrian. Google Apps Script processes the data to send your report email and logs your submission to a private Google Sheet owned by CyberKyrian.
Your PDF report and certificate are generated entirely within your browser using the open-source jsPDF library — they are not uploaded to any server before being emailed.
Data is stored in Google's infrastructure within Google Workspace. Google's own privacy and security practices apply to that storage. CyberKyrian does not operate its own database server for this tool.
Third-Party Services
This tool uses the following third-party services:
- Google Apps Script & Gmail — for form processing and email delivery
- Google Fonts — to load the Space Mono and DM Sans typefaces
- jsPDF (via cdnjs.cloudflare.com) — an open-source library used to generate your PDF documents in-browser
Each of these services has its own privacy policy. We use them only to deliver the functionality of this tool.
Cookies & Tracking
This tool does not use cookies, tracking pixels, analytics scripts, or any form of behavioural tracking. Your assessment answers are stored temporarily in your browser's memory only and are cleared when you close or refresh the page.
Data Retention
Your submission (name, company, email, role, industry, staff size, and assessment scores) is retained in CyberKyrian's Google Sheet for a reasonable period to allow us to follow up if requested and to improve the tool over time.
You may request deletion of your data at any time by emailing hello@cyberkyrian.com with the subject line "Data Deletion Request". We will process your request within 14 business days.
Your Rights
You have the right to:
- Request access to the data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Withdraw consent at any time (noting that withdrawal does not affect data already processed)
To exercise any of these rights, contact us at hello@cyberkyrian.com.