Secureit4Me CyberSec ("we", "our", or "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage with our services.
1. Information We Collect
1.1 Information You Provide to Us
We collect information you voluntarily provide to us, including:
- Contact Information: Name, email address, phone number, company name, and job title when you fill out forms, request an engagement, or contact us.
- Engagement Data: Information related to your security assessments, including scoping documents, network diagrams, and other materials you share with us to perform our services.
- Communication: Records of your correspondence with us, including emails, chat messages, and call recordings (where permitted by law).
1.2 Information We Collect Automatically
When you visit our website, we automatically collect certain information about your device and usage:
- Log Data: IP address, browser type, operating system, referring URLs, pages viewed, time and date of访问, and other diagnostic data.
- Cookies: We use cookies and similar tracking technologies to enhance your experience, analyze site traffic, and understand user behavior. You can control cookie preferences through our cookie banner or your browser settings.
- Analytics: We use analytics tools to collect aggregated, anonymized data about how users interact with our site.
Note on Sensitive Data: We do not intentionally collect sensitive personal information (e.g., race, religion, health data, political opinions) through our website. If you provide such information in engagement documents, it is handled with the same strict confidentiality as all engagement data.
2. How We Use Your Information
We use your information for the following purposes:
- To Provide Services: To scope, plan, and execute security engagements, including red team operations, penetration testing, and related assessments.
- To Communicate: To respond to your inquiries, send engagement-related updates, and provide customer support.
- To Improve Our Services: To analyze engagement data and website usage to enhance our methodologies, tooling, and user experience.
- For Legal Compliance: To comply with applicable laws, regulations, and legal obligations, including record-keeping and reporting requirements.
- For Marketing: With your consent, to send you newsletters, white papers, and information about our services that may be of interest to you.
3. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:
- Contract Performance: Processing necessary to perform our contract with you, including scoping and executing security engagements.
- Legitimate Interests: Processing necessary for our legitimate interests, such as improving our services, securing our systems, and marketing our services to existing clients.
- Consent: Where you have given explicit consent for marketing communications or non-essential cookies.
- Legal Obligation: Processing necessary to comply with our legal obligations.
4. Information Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:
- Service Providers: With trusted third-party vendors who assist us in operating our website, providing services, or conducting business (e.g., hosting providers, analytics tools). These providers are contractually obligated to protect your data.
- Legal Requirements: When required by law, court order, or government regulation, or to protect our rights, property, or safety.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice provided to you in advance.
- With Your Consent: In other circumstances, with your explicit consent.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption: Data transmitted between you and our website is encrypted using TLS/SSL. Engagement data is encrypted at rest.
- Access Controls: Access to your data is restricted to authorized personnel with a legitimate need to know.
- Secure Infrastructure: We maintain industry-standard security practices for our servers and networks.
- Data Minimization: We collect only the data necessary for the stated purposes.
While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to take steps to protect your own privacy, such as using strong passwords and keeping your software updated.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, including:
- Engagement Records: Engagement reports and related documentation are retained in accordance with contractual requirements and industry best practices, typically for a period of 7 years.
- Contact Information: Contact data is retained for as long as you remain a client or prospect, or until you request deletion.
- Analytics Data: Anonymized analytics data is retained for statistical purposes, typically for up to 24 months.
We may retain certain information for longer periods as required by law, for dispute resolution, or to enforce our agreements.
7. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data, subject to legal and contractual retention obligations.
- Restriction: Request restriction of processing under certain circumstances.
- Data Portability: Request transfer of your data to another controller in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests, including direct marketing.
- Withdraw Consent: Withdraw your consent at any time where processing is based on consent.
To exercise these rights, please contact us at privacy@secureit4me.example. We will respond within 30 days. We may need to verify your identity before fulfilling your request.
8. International Data Transfers
As a global security firm, we may transfer your data to countries outside your jurisdiction of residence, including South Africa and the United States. When we transfer data across borders, we implement appropriate safeguards, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Adequacy decisions where available.
- Binding Corporate Rules (where applicable).
By using our services, you acknowledge and consent to the transfer of your data to countries that may have different data protection laws than your own.
9. Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately so we can delete it.
10. Third-Party Links
Our website may contain links to third-party websites. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party sites you visit.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. We encourage you to review this policy periodically.
For California Residents (CCPA): If you are a California resident, you have the right to request disclosure of the categories and specific pieces of personal data we collect, the business purposes for collection, and the third parties with whom we share data. We do not "sell" personal data as defined by the CCPA. To exercise your rights, contact us at privacy@secureit4me.example.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: privacy@secureit4me.example
- Address: Secureit4Me CyberSec, 123 Cyber Street, Johannesburg, 2001, South Africa
- Phone: +27 11 234 5678