1. Introduction
This Privacy Policy explains how CICADA Accelerate collects, uses, stores, shares and protects personal data. CICADA Accelerate is operated by Cicada Labs, a subdivision of CICADA Cybersecurity (“CICADA”, “we”, “our” or “us”), based in Ireland.
For personal data collected through this website, project enquiries and our direct client relationship, CICADA generally acts as data controller. We may act as a data processor where we handle personal data solely on a Client’s documented instructions, including certain CS Bookings or managed website functions.
Privacy enquiries and data-rights requests may be sent to privacy@cicadacs.com.
2. Scope
This Policy applies to visitors to the CICADA Accelerate website, people who submit a launch-plan or contact request, prospective and current Clients, and people who communicate with us about a project. Separate terms or privacy information may apply to CS Bookings, CICADA Cybersecurity services or a Client-operated website.
3. Personal data we collect
- Contact and identity data: name, email address, business name, job role and phone number where supplied.
- Enquiry data: requested package, project description, current website or social profile and correspondence.
- Project data: branding, content, business information, approvals, support requests and materials needed to deliver Services.
- Transaction data: invoice, payment-status and accounting information. We do not receive or store full card details processed by a payment provider.
- Technical and security data: IP address, browser, device, timestamps, request metadata, diagnostic logs and fraud or security signals.
- Usage and preference data: interactions with the website and cookie preferences where applicable.
4. How we collect data
We collect data directly when you complete a form, email us, request a proposal, provide project materials, approve work or use a service. Technical data may be collected automatically by our hosting, security and delivery providers. We may also receive information from a referring person, your organisation or a provider you authorise us to work with.
5. How we use personal data
- Responding to enquiries and preparing launch plans or proposals.
- Delivering websites, branding, booking systems, automation and related Services.
- Managing project communication, billing, support and account access.
- Securing forms and infrastructure, preventing abuse and diagnosing faults.
- Maintaining records, complying with law and establishing or defending legal claims.
- Improving our Services and internal processes.
- Delivering requested first-project discount codes and related offer communication.
- Delivering requested Founders Discount codes and related offer communication.
- Sending optional marketing only where permitted and with an available opt-out.
We do not sell personal data.
6. Legal bases
Under GDPR, we rely on performance of a contract or steps requested before a contract; legitimate interests in operating, securing and improving our business; compliance with legal obligations; and consent where required, including for certain cookies or optional marketing. Where processing relies on consent, it may be withdrawn at any time without affecting earlier lawful processing.
8. Contact forms, Turnstile and email delivery
Our launch-plan form collects the details displayed on the form and sends them to CICADA for response. Cloudflare Turnstile is used to prevent spam and abuse and may process IP address, browser and security signals under Cloudflare’s own privacy practices. Form messages may be delivered using Resend and hosted or processed through Vercel infrastructure.
Please do not submit passwords, payment-card details, special-category data or unnecessary confidential information through the general contact form.
9. Payments
The CICADA Accelerate website does not currently take payment through the launch-plan form. If payment is later arranged through Stripe, PayPal, Monzo, Revolut or another provider, that provider will process payment details under its own privacy policy. CICADA normally receives confirmation and transaction records rather than full card details.
10. Service providers and recipients
We share limited data where necessary with trusted providers supporting hosting, deployment, DNS, security, email delivery, domains, source control, payments, communications and professional advice. These may include Vercel, Cloudflare, Resend, domain registrars, Stripe, PayPal, Monzo, Revolut and other providers selected for a project.
We may also disclose data where required by law, to protect legal rights or security, during a legitimate business transfer, or with your instructions or consent. Providers may act as processors or independent controllers depending on the service.
11. CS Bookings and Client customer data
Where a Client receives CS Bookings or another customer-data system, the Client generally acts as controller for its own customers’ data and CICADA or CS Bookings acts as processor. The Client is responsible for a lawful basis, appropriate privacy information and handling customer rights. Applicable data-processing terms may supplement this Policy.
12. AI-assisted tools
We may use AI-assisted tools to support design, development, documentation, automation and quality assurance. We apply reasonable human review and seek to minimise personal or confidential data included in such tools. Where a project requires material personal-data processing through an AI provider, the role of that provider and appropriate safeguards will be assessed.
We do not use contact-form submissions to make solely automated decisions that produce legal or similarly significant effects.
13. International transfers
Some providers may process data outside Ireland or the European Economic Area. Where required, we rely on recognised safeguards such as an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism.
14. Retention
We keep personal data only as long as reasonably necessary for the relevant purpose. Enquiries that do not become projects are normally retained only while a business relationship remains reasonably possible, unless deletion is requested or a longer period is justified. Client, contract, invoice and accounting records may be retained for periods required by Irish law. Security logs may be retained for a limited period appropriate to abuse prevention and incident investigation.
Project retention may also depend on support needs, limitation periods, contractual obligations and the Client’s instructions where we act as processor.
15. Security
We use reasonable technical and organisational safeguards, which may include access controls, encrypted transport, restricted credentials, managed deployment, form protection, logging and least-privilege access. No system can guarantee absolute security. If a personal-data breach occurs, we will assess it and notify affected parties or authorities where required by law.
16. Your rights
Subject to applicable law, you may request access, correction, erasure, restriction, portability or objection to processing. You may withdraw consent where consent is the legal basis. You also have the right to complain to the Irish Data Protection Commission at dataprotection.ie.
Send requests to privacy@cicadacs.com. We may request information necessary to verify identity and may direct processor-related requests to the relevant Client as controller.
17. Children
The website and Services are intended for businesses and are not directed to children. We do not knowingly collect personal data from children through the launch-plan form. If you believe a child has submitted personal data, contact us so that we can take appropriate action.
18. Third-party links
The website may link to websites and services we do not control. Their privacy practices are governed by their own policies, and we encourage you to review them.
19. Changes to this Policy
We may update this Policy to reflect changes in law, providers, Services or data practices. The current version will be published with a revised “last updated” date. Material changes will be highlighted where reasonably appropriate.
20. Contact
Privacy and data-rights enquiries: privacy@cicadacs.com.
General support: support@cicadacs.com.