Privacy Policy
At Cyethics, we maintain strict standards regarding your data privacy, security assessment disclosures, and personal information handling.
1. Introduction
Cyethics (“we,” “our,” or “us”) is committed to safeguarding the privacy of our website visitors, clients, and partners. This Privacy Policy outlines how we collect, use, store, and protect your information when you visit our website, submit inquiries, or engage our offensive security and testing services.
2. Information We Collect
We collect limited information to provide scoping details, conduct cybersecurity services, and respond to business inquiries:
-
Contact Details: Name, professional email address, phone number, company name, and job title submitted via contact forms.
-
Technical Engagement Data: Target scopes, IP ranges, domains, and application specs voluntarily provided for scoping security assessments.
-
Usage Data: Standard server logs, technical analytics, device identifiers, and browser types collected during website visits.
3. Assessment Confidentiality & Data Handling
Because Cyethics operates as an offensive security firm, client data confidentiality is paramount:
-
All security findings, vulnerability reports, source code reviews, and target system data are treated as strictly confidential under non-disclosure agreements (NDAs).
-
Assessment results and technical evidence are stored in encrypted environments and deleted or archived strictly according to client data-retention agreements.
4. How We Use Your Information
We use the information we collect strictly for the following operational purposes:
- To scope, schedule, and deliver cybersecurity testing and audit engagements.
- To respond directly to contact inquiries, consultation requests, and support communications.
- To fulfill legal obligations and maintain secure operations across our platforms.
5. Disclosure & Sharing
We do not sell, rent, or trade personal information or technical scoping data to any third party for marketing purposes. Data is disclosed only under the following limited conditions:
- Service Providers: Secure infrastructure providers assisting in site operations under confidentiality terms.
- Legal Compliance: When strictly required by applicable law, search warrant, court order, or legal process.
6. Data Rights & Inquiries
You have the right to request access to, correction of, or deletion of your personal data submitted to us. For any privacy requests, NDA inquiries, or data protection questions, please reach out to us:
Email: [email protected]