These terms apply when a consumer or business buys one Cyber Essentials detailed action plan, SOC 2 readiness and evidence roadmap, or GDPR & Data Protection action plan through RightCyber Analysis. The selected assessment and product are identified before payment. The free summary does not require a purchase.
The seller is Right Cyber UK Limited, registered in England and Wales under company number 17307435. Its registered office and contact address is 41 Northampton Road, Bromham, Bedford, England, MK43 8PB. Contact info@rightcyber.co.uk for purchase, delivery, cancellation, refund or complaint queries.
A Cyber Essentials purchase unlocks one personalised detailed action plan generated from the saved readiness answers. Depending on the supported gaps and verification priorities, it contains up to 10 prioritised action records. Optional follow-up answers can refine the detail but are not required to generate that plan.
A SOC 2 purchase unlocks one personalised readiness and evidence roadmap for the saved service scope, selected categories and intended examination type. It includes the supported findings, proposed actions and owner roles, closure checks, evidence requests, a preparation roadmap and a diagnostic answer register. It uses separate implementation, operation and evidence diagnostics, with unknowns and scope limitations shown. The number of findings depends on the answers; no fixed number of gaps is promised. An action-register CSV is also supplied.
A GDPR & Data Protection purchase unlocks one personalised action plan for the saved assessment scope and responses. It contains the supported findings and verification tasks, suggested owner roles, first steps, completion checks, evidence requests, a phased improvement plan, and the recorded answers and applicability decisions. An action-register CSV is supplied. Unknown answers and unreviewed evidence remain explicit; the plan does not provide a legal compliance percentage or independently verify processing. Urgent guidance remains available in the free summary.
The plan is supplied as a secure browser report with a downloadable PDF. The browser report requires a current mainstream web browser and internet connection. The downloaded file requires software capable of reading a standard PDF. No separate application, subscription or special hardware is supplied.
These products are self-reported preparation aids. Evidence references are not independently inspected or tested. None is an audit, certification, attestation or guarantee of an external assessment outcome. Cyber Essentials output is not the official questionnaire; an authorised Certification Body determines its result. SOC 2 output is not a CPA report or opinion and does not establish compliance; an independent service auditor determines examination scope, procedures and findings.
The SOC 2 question mappings and proprietary diagnostic method are an initial product methodology and have not been independently CPA validated or calibrated through an evidence-reviewed customer pilot. Review the sample and stated scope before buying. Accuracy depends on complete, reliable input and cannot be guaranteed.
The GDPR assessment is a UK-first, general SME planning aid with EU/EEA branches where relevant. It is not a legal opinion, a regulator-approved assessment, a completed DPIA, or an exhaustive review of national and sector-specific laws. Its authored methodology has not been independently professionally validated. Legal applicability or complex high-risk processing may require suitably qualified advice. No adviser consultation is included in the price.
The price is a one-off £49 total for one action plan. No VAT is charged. There is no subscription, recurring charge, delivery charge or mandatory add-on. Stripe securely processes the payment using the methods it makes available at hosted Checkout.
The payment button states the amount and that payment is due. Right Cyber UK Limited accepts the order when Stripe confirms successful payment and the paid access link is unlocked. An order confirmation and the secure access link are sent to the email address used for the assessment.
Successful payment unlocks the right to generate the plan from the saved assessment. The unlock link remains available for 90 days from payment. Payment alone does not start personalised generation or digital supply.
When the buyer chooses Generate detailed action plan now, generation normally completes within about one minute. Once generated, the secure online report remains available for a further 90 days. The PDF can be downloaded during that period and kept as a permanent copy. The buyer is responsible for storing downloaded copies securely after they leave RightCyber's hosted access controls.
If payment is confirmed but the access link or plan is not supplied as described, contact info@rightcyber.co.uk.
A UK consumer normally has 14 days from the conclusion of this distance contract to cancel without giving a reason. Payment alone does not start generation or digital supply. Before generation begins, the buyer is asked to expressly request immediate generation, performance and supply during the 14-day period and to acknowledge the effect on the right to cancel.
Where the plan is treated as digital content, the 14-day cancellation right is lost once supply begins after the consumer's express consent and acknowledgement. Where any part is legally treated as a service, a consumer who asked for performance to begin may have to pay a proportionate amount for work performed before a valid cancellation, and the cancellation right is lost once the service is fully performed after the required request and acknowledgement.
A consumer who has not started generation can exercise an applicable cancellation right by emailing info@rightcyber.co.uk or using the model form in the refund and cancellation policy. Nothing in these terms limits mandatory rights. A buyer acting wholly or mainly for business purposes does not receive the statutory consumer change-of-mind cancellation right.
Mandatory consumer rights remain unaffected. Where applicable, paid digital content must be of satisfactory quality, fit for a purpose made known to the seller and as described. If the plan is faulty, materially different from its description or not supplied, available remedies may include repair or replacement and, where the legal conditions are met, a price reduction up to a full refund.
Email complaints and remedy requests to info@rightcyber.co.uk from the address used for the assessment, quoting the order reference and describing the issue. Do not send card details, passwords, secret keys or raw cyber-security evidence.
The plan depends on the completeness and accuracy of the answers supplied. Do not submit passwords, keys, raw logs, personal data, exploitable configuration details or confidential client evidence. Review every suggested action before implementation and use suitably qualified advice where a change could affect live systems, legal duties or third parties.
The RightCyber Analysis privacy notice explains how assessment and purchase data is handled. This contract covers one action plan and the delivery and access periods described above; it does not renew automatically. Rights and obligations that by their nature continue after hosted access ends, including statutory remedies and secure handling of downloaded copies, remain in effect.
The version identified in this document is the version offered for this purchase. A later version does not retrospectively replace the version accepted for an earlier order.
