Privacy Policy

1.1 Personal Information

We may collect personal information that you provide voluntarily, for example:

• Full name, job title, email address, company name, phone number
• Login credentials (for client portals or demo access)
• Communication content via forms, emails, or customer service

1.2 Non-Personal Information

• IP address, browser type, operating system
• Device identifiers
• Website usage data (pages visited, time spent, actions taken)

These help us improve website performance, client experience, and service delivery.

1.3 Sensitive Data

In the course of penetration testing or vulnerability assessments, we may access data within your systems. This data is never stored, used, or disclosed beyond the scope of agreed services and is handled under strict confidentiality and data protection protocols.

We use the information we collect to:

• Deliver and manage cybersecurity services
• Perform risk assessments and generate client reports
• Provide support and respond to inquiries
• Monitor, maintain, and improve website and service performance
• Comply with legal and regulatory obligations
• Communicate relevant updates, newsletters, or service alerts (only if you have opted in)

We do not sell or rent your personal data to third parties. However, we may share your data with:

• Trusted partners or vendors (under confidentiality agreements) to support service delivery
• Legal authorities when required by law or legal process
• Parties involved in corporate transactions (e.g., mergers, acquisitions), with your rights preserved

We retain personal data only for as long as necessary to:

• Fulfill service obligations
• Meet legal or regulatory requirements
• Resolve disputes or enforce contracts

Assessment results, logs, or sensitive data collected during engagements are retained only temporarily and securely deleted after the completion of each project unless otherwise agreed.

Zero Trust implements strong administrative, technical, and physical security controls, including:

• Role-based access control (RBAC)
• Data encryption during transmission and at rest
• Secure data handling during cybersecurity assessments
• Regular audits and vulnerability scanning of our own systems

Despite best efforts, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute protection.

Our website may contain links to third-party websites or tools. This Privacy Policy does not apply to those external platforms, and we recommend reviewing their privacy terms before sharing any personal data.

We may update this Privacy Policy from time to time to reflect legal changes or improvements to our practices. The effective date will be shown at the top of the page. Continued use of our website or services after updates constitutes your agreement to the revised policy.

If you have any questions or concerns about our Privacy Policy, please contact us by email at [email protected] or phone +6221-5088-0227.