Privacy Policy

1. Introduction

This Privacy Policy explains how Biterra Ltd (“we”, “our”, or “us”) collects, uses, and protects your personal information when you use our website biterra.co (“the Site”) and participate in our Capture the Flag (CTF) events. We are committed to safeguarding your privacy and handling your personal data in a lawful, fair, and transparent manner, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Biterra Ltd is a company registered in England and Wales under company number 16746893, with its registered office at 17 Barrington Grange, Powick, Worcester WR9 4QD.

2. Information We Collect

We may collect and process the following types of information:

• Account Information: such as your name, username, email address, and password when you register for an account.
• CTF Activity Data: including your progress, submissions, and scores within our CTF challenges.
• Payment Information: payments are securely processed through Stripe, our third-party payment provider. We do not store or have access to your full payment card details.
• Technical Data: such as IP address, browser type, operating system, and access times for security and analytical purposes.
• Communication Data: if you contact us directly, for example by email or through a contact form.
• Marketing Preference Data: if you subscribe to optional updates, we collect your email address, consent wording, consent status, and the date and source of that consent.

3. How We Use Your Information

We use your personal data to:

• Provide access to and manage your account.
• Operate and improve the CTF platform and its features.
• Process payments and maintain financial records.
• Communicate with you about updates, account issues, or support requests.
• Send optional product updates, cyber education resources, event information, and offers where you have consented to receive them.
• Ensure the security and integrity of our systems.
• Comply with any legal or regulatory obligations.

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Performance of a Contract: to provide the CTF services you have requested.
• Legitimate Interests: to maintain and improve our services, ensure site security, and prevent misuse.
• Legal Obligation: to comply with tax or other regulatory requirements.
• Consent: where applicable, such as when subscribing to optional communications.

5. Sharing of Information

We do not sell or rent your personal information. We may share personal information with service providers where necessary to provide our services, such as Stripe for payment processing and email providers for service or optional marketing emails. Stripe acts as an independent data controller for payment transactions. You can view their privacy policy here: https://stripe.com/gb/privacy.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described above or as required by law. Inactive accounts may be deleted after a reasonable period.

7. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or disclosure. However, no internet transmission can be guaranteed to be fully secure, so we cannot guarantee absolute security.

8. Your Rights

Under UK data protection law, you have the right to:

• Access a copy of the personal data we hold about you.
• Request correction or deletion of your personal data.
• Object to or restrict certain forms of processing.
• Withdraw consent, where applicable.
• Lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been mishandled: https://ico.org.uk/.

To exercise any of these rights, please contact us at jessica@biterra.co.

9. International Transfers

We do not routinely transfer personal data outside the UK. If this becomes necessary (for example, if a service provider stores data abroad), we will ensure appropriate safeguards are in place to comply with UK data protection laws.

10. Cookies

Our website may use cookies or similar technologies to enhance your experience and analyse usage. You can manage your cookie preferences through your browser settings.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page with a revised “Last updated” date. Please check this page periodically to stay informed of any changes.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: