Privacy Notice

1. Who we are (the data controller)

The data controller is Cyber-Reasoning Consultancy (CRC) Ltd, a company registered in England & Wales (Company No. 14408977), with registered office in Manchester, England. For any data-protection enquiry, write to lucas@cyber-reasoning.co.uk or use the contact form.

2. What we collect, and why

When you submit the contact form, we collect the following:

• Full name (required) — to address you correctly in our reply.
• Email address (required) — to reply to your enquiry.
• Company (optional) — to understand the commercial context of your enquiry.
• Enquiry type (optional) — to route the enquiry to the right area of the practice.
• Message (required) — the substance of your enquiry.

We do not collect any other personal data via this website. We do not use cookies or analytics on this site at the time of writing.

3. Lawful basis

The lawful basis under Art. 6(1) UK GDPR is your consent, given by submitting the contact form, combined with our legitimate interest in responding to commercial and academic enquiries about our services.

4. Who we share data with

The contact form is processed by our form-handling provider, which transmits the submitted fields to our enquiry inbox. The provider acts as a data processor under our instructions.

We do not sell your data, do not share it for third-party marketing, and do not transfer it outside the UK or EEA except where the form-handling provider's infrastructure inherently does so, in which case the transfer is covered by the standard contractual clauses or an equivalent UK GDPR transfer mechanism.

5. How long we keep it

We retain enquiry correspondence for up to 24 months from your last contact, to handle follow-up questions and proposals. After that, the correspondence is deleted unless we have an active commercial engagement that requires us to retain it for contract or accounting purposes.

6. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data rectified.
• Have your data erased.
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw consent at any time, without affecting prior lawful processing.

To exercise any of these rights, email lucas@cyber-reasoning.co.uk or use the contact form.

7. Third-party content

This website loads the Inter font from Google Fonts (fonts.googleapis.com), which means your IP address is briefly visible to Google when fonts are fetched. Google does not set a cookie for this. We are working to self-host the font to remove this third-party data flow. No analytics, advertising trackers, or social pixels are loaded.

8. Complaints

If you have a concern about how we handle your data, please tell us first so we can fix it. If you remain unsatisfied, you have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

9. Changes

We may update this notice from time to time. The "Last updated" date at the top of the page reflects the most recent change. Material changes will be reflected on the contact form before any new categories of data are collected.

10. Relationship to the University of Manchester

CRC's founder Lucas Cordeiro is also a Professor at the University of Manchester, where he serves as Director of the Arm Centre of Excellence and as Director of Business Engagement and Innovation in the Department of Computer Science.

Cyber-Reasoning Consultancy (CRC) Ltd is a separate, independent commercial company (registered in England & Wales, Company No. 14408977). The University of Manchester is not a shareholder, partner, or guarantor of CRC, and the University does not endorse CRC. References on this site to Lucas Cordeiro's University title, academic publications, awards, and research funding describe his academic record, not CRC's commercial relationships.

ESBMC is open-source software, originally created in 2008 during Lucas's PhD research at the University of Southampton and continuously developed since by a community of contributors at multiple institutions. CRC consults around the public ESBMC release; CRC does not own ESBMC and does not claim exclusive rights to the tool.