Effective Date: 7 July 2026

MyCVEFilter is a vulnerability monitoring service operated by Cementarius Systems Ltd.

This Privacy Policy explains how we collect, use and protect your personal information when you use MyCVEFilter.

1. Who We Are

Cementarius Systems Ltd is the data controller responsible for the personal information processed through MyCVEFilter.

If you have any questions about this Privacy Policy or how your data is handled, please contact us:

Email: privacy

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Website: https://ico.org.uk
Helpline: 0303 123 1113

2. Information We Collect

When you create and use a MyCVEFilter account, we may collect:

• Email address.
• Display name.
• Your filter and alert preferences.
• Account activity relating to authentication.

We also collect limited technical information necessary to operate the service, including:

• Session identifiers.
• IP address associated with active sessions.

3. How We Use Your Information

We use your information to:

• Create and manage your account.
• Authenticate you using secure magic links.
• Provide vulnerability monitoring.
• Send email alerts based on your preferences.
• Maintain the security and integrity of the service.
• Respond to support requests.

4. Lawful Basis for Processing

We process your personal information because it is necessary to provide the service you have requested and therefore to perform our contract with you.

We also process limited information where necessary for our legitimate interests, including maintaining the security of the service, preventing abuse and protecting user accounts.

5. Who We Share Your Information With

We do not sell your personal information.

We do not disclose your personal information to third parties except:

• where required by law;
• where necessary to establish, exercise or defend legal claims.

6. How Long We Keep Your Information

Account information is retained while your account remains active.

Session information is retained only for as long as necessary to operate the service.

If your account is deleted, we will delete or anonymise your personal information unless we are required to retain it by law.

7. How We Protect Your Information

We use appropriate technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration or destruction.

These measures include encrypted communications (HTTPS), controlled access to systems and monitoring designed to help maintain the security of the service.

8. Cookies

MyCVEFilter uses cookies that are necessary for authentication and the operation of the service.

We do not currently use advertising, analytics or other tracking cookies.

9. International Transfers

We currently store and process personal information within the United Kingdom. If this changes, we will ensure appropriate safeguards are in place in accordance with applicable data protection law.

10. Your Rights

Depending on applicable law, you may have the right to:

• Access your personal information.
• Correct inaccurate or incomplete information.
• Request deletion of your personal information.
• Restrict or object to certain processing.
• Request a copy of your personal information.

You can also update much of your account information directly from within your account.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The latest version will always be published on this page and will include the effective date shown above.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact:

Cementarius Systems Ltd
Email: privacy