Compliance
Last updated: March 14, 2026
Effective date: March 14, 2026
1. Introduction
CYBER TEC ASSISTANTS LTD (Company Number: 17084590) is committed to operating with the highest standards of compliance, ethics, and transparency. This page outlines our compliance framework and commitment to regulatory requirements.
We maintain a customer-friendly approach to all compliance matters and are ready to address any concerns promptly and fairly.
2. Regulatory Framework
As a UK-registered company providing software services, we comply with:
2.1 UK Business Regulations
- Companies Act 2006: Corporate governance and reporting
- Consumer Rights Act 2015: Fair treatment of customers
- Consumer Contracts Regulations 2013: Distance selling and cancellation rights
- Electronic Commerce Regulations 2002: Online service provision
2.2 Data Protection
- UK GDPR: Data protection and privacy
- Data Protection Act 2018: UK implementation of GDPR
- Privacy and Electronic Communications Regulations: Cookie consent and marketing
2.3 Financial Regulations
- Tax compliance: Corporation Tax, VAT, PAYE
- Accounting standards: UK GAAP or FRS 102
- Anti-Money Laundering: Money Laundering Regulations 2017
2.4 Employment Law
- Employment Rights Act 1996: Employee rights and protections
- Equality Act 2010: Non-discrimination
- Health and Safety at Work Act 1974: Workplace safety
3. Data Protection and Privacy
3.1 UK GDPR Compliance
We are fully compliant with UK GDPR requirements:
- Lawful basis for all data processing activities
- Data minimization - we only collect necessary data
- Purpose limitation - data used only for stated purposes
- Storage limitation - data retained only as long as needed
- Integrity and confidentiality - appropriate security measures
- Accountability - documented compliance measures
3.2 Data Subject Rights
We respect and facilitate all data subject rights:
- Right of access (Subject Access Requests)
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object
See our Privacy Policy for full details.
3.3 Data Breach Procedures
In the event of a data breach:
- Immediate containment and investigation
- Notification to ICO within 72 hours (if required)
- Notification to affected individuals (if high risk)
- Documentation and post-incident review
- Implementation of preventive measures
4. Information Security
4.1 Security Framework
We maintain comprehensive information security controls:
- Access Control: Role-based permissions, MFA, least privilege principle
- Encryption: TLS 1.3 in transit, AES-256 at rest
- Network Security: Firewalls, intrusion detection, secure configurations
- Application Security: Secure coding practices, regular updates, vulnerability scanning
- Physical Security: Secure data centers, access controls
4.2 Security Monitoring
- 24/7 automated monitoring and alerting
- Regular security audits and assessments
- Penetration testing (annual)
- Vulnerability management program
- Security incident response procedures
4.3 Business Continuity
- Automated backup systems (daily)
- Disaster recovery procedures
- Redundant infrastructure
- Incident response plan
- Regular testing and drills
5. Financial Compliance
5.1 Tax Compliance
We maintain full compliance with UK tax regulations:
- Corporation Tax: Timely filing and payment
- VAT: Proper registration, invoicing, and MTD compliance
- PAYE: Correct employee tax and NI deductions
- Record Keeping: 7-year retention of financial records
5.2 Accounting Standards
- Compliance with UK accounting standards (FRS 102)
- Annual accounts filed with Companies House
- Proper revenue recognition for one-time service sales
- Transparent financial reporting
5.3 Payment Processing
- Secure payment processing through certified providers
- PCI DSS compliance (via payment processors)
- Clear pricing and no hidden fees
- Transparent refund policies
6. Anti-Money Laundering (AML) and KYC
6.1 AML Compliance
We comply with the Money Laundering Regulations 2017:
- Risk-based approach to customer due diligence
- Know Your Customer (KYC) procedures
- Transaction monitoring and suspicious activity reporting
- Record keeping (5 years minimum)
- Staff training on AML requirements
6.2 Customer Due Diligence
For business customers, we verify:
- Company registration and legal status
- Beneficial ownership information
- Nature of business activities
- Source of funds (for high-value transactions)
6.3 Reporting
- Suspicious Activity Reports (SARs) to National Crime Agency
- Compliance with sanctions and watchlist screening
- Cooperation with law enforcement
See our KYC / AML Policy for full details.
7. Ethical Business Practices
7.1 Core Values
- Integrity: Honest and ethical conduct in all dealings
- Transparency: Clear communication and fair practices
- Respect: Dignity and respect for all stakeholders
- Accountability: Taking responsibility for our actions
- Customer Focus: Prioritizing customer satisfaction
7.2 Anti-Corruption
- Zero tolerance for bribery and corruption
- Compliance with Bribery Act 2010
- No facilitation payments
- Gifts and hospitality policy
- Third-party due diligence
7.3 Fair Competition
- Compliance with competition law
- No anti-competitive practices
- Fair pricing and honest marketing
- Respect for intellectual property
8. Human Rights and Labor Standards
8.1 Modern Slavery
We are committed to preventing modern slavery and human trafficking:
- Compliance with Modern Slavery Act 2015
- Due diligence on suppliers and partners
- Ethical recruitment practices
- Fair wages and working conditions
- Zero tolerance for forced labor
See our Modern Slavery Statement for details.
8.2 Employment Practices
- Equal opportunity employer
- Non-discrimination and diversity
- Safe working environment
- Fair compensation and benefits
- Professional development opportunities
8.3 Supplier Standards
We require suppliers to adhere to our ethical standards:
- Compliance with labor laws
- No child or forced labor
- Safe working conditions
- Environmental responsibility
- Business ethics and integrity
See our Supplier Code of Conduct for details.
9. Environmental Responsibility
While our primary operations are digital, we are committed to environmental responsibility:
- Energy-efficient cloud infrastructure
- Paperless operations where possible
- Responsible waste management
- Carbon footprint awareness
- Sustainable procurement practices
10. Compliance Governance
10.1 Compliance Management
- Board-level oversight of compliance
- Designated compliance officer
- Regular compliance reviews and audits
- Risk assessment and mitigation
- Continuous improvement program
10.2 Training and Awareness
- Regular compliance training for all staff
- Role-specific training (e.g., data protection, AML)
- Awareness campaigns and communications
- Testing and certification
- Updated training materials
10.3 Documentation and Records
- Comprehensive compliance documentation
- Policy and procedure manuals
- Audit trails and evidence
- Incident logs and reports
- Regular updates and reviews
11. Reporting and Whistleblowing
11.1 Speak Up Policy
We encourage reporting of compliance concerns:
- Confidential reporting channels
- Protection against retaliation
- Anonymous reporting options
- Prompt investigation of concerns
- Feedback to reporters (where possible)
See our Speak Up Policy for details.
11.2 Responsible Disclosure
For security vulnerabilities:
- Dedicated security reporting channel
- Acknowledgment within 48 hours
- Investigation and remediation
- Recognition for responsible disclosure
- No legal action against good-faith reporters
See our Responsible Disclosure Policy for details.
12. Customer-Friendly Approach
Our compliance framework supports our customer-first philosophy:
- Transparent Policies: Clear, understandable terms and conditions
- Fair Treatment: Ethical practices and honest dealings
- Data Protection: Your privacy and security are paramount
- Flexible Refunds: Customer-friendly cancellation and refund policies
- Responsive Support: Quick resolution of concerns and issues
- Continuous Improvement: We listen to feedback and improve
We are committed to addressing any compliance concerns promptly and fairly. Contact us with any questions or issues.
13. Compliance Resources
For detailed information on specific compliance areas:
14. Contact Information
For compliance inquiries, concerns, or to report issues:
CYBER TEC ASSISTANTS LTD
Company Number: 17084590
71-75 Shelton Street
Covent Garden
London, United Kingdom
WC2H 9JQ
Contact details available on our Contact page.
We take all compliance matters seriously and are committed to prompt, fair resolution of any concerns.
15. Updates to This Page
We review and update our compliance framework regularly to reflect:
- Changes in applicable laws and regulations
- Industry best practices
- Lessons learned from incidents or audits
- Feedback from stakeholders
- Business growth and evolution
Material changes will be communicated via our website with an updated "Last updated" date.