Cyber Secret Society (“CSS”, “we”, “us”, or “our”) respects your privacy. This Privacy Policy explains what personal information we collect through this website, why we collect it, how we use and protect it, and the choices and rights you have.
Personal information we receive while delivering a security engagement (for example, test accounts or data encountered during testing) is handled under the confidentiality and data-handling terms of that engagement's written agreement, in addition to this policy.
1. Information We Collect
Information you provide
When you submit the assessment enquiry form, we collect the details you enter:
- Your name and business email address.
- Optionally, your company or organization, preferred timeline, and a public project URL.
- The service you are interested in and the description of your requirements.
- Your confirmation that we may use these details to respond to your enquiry.
If you email or phone us, we receive your contact details and the content of your message or call notes. We also receive any further communication you send us, for example while discussing the scope of an engagement. Please do not send passwords, keys, credentials, or vulnerability details through the website form or by email.
Information collected automatically
- Technical data such as IP address, browser type, and the pages requested, recorded in standard server logs by our hosting provider.
- Your IP address is also held briefly in server memory when you submit the enquiry form, to limit abuse (for example, too many submissions in a short period). It is not stored permanently for this purpose.
This website does not currently use analytics tools, advertising technologies, or tracking cookies.
2. How We Use Information
We use the information we collect to:
- Respond to your enquiry, discuss your requirements, and scope a potential engagement.
- Deliver services you have agreed to in a written engagement.
- Operate, maintain, and secure this website, including preventing spam and abuse of the enquiry form.
- Comply with legal obligations and enforce our terms and policies.
We do not use your enquiry details for marketing mailing lists, and we do not sell personal information.
3. Legal Basis for Processing
Where data-protection laws require a legal basis, we rely on: your consent and our legitimate interest in responding to enquiries you send us; steps taken at your request before entering into a contract; performance of a contract once an engagement is agreed; and our legitimate interest in keeping this website secure.
4. Service Providers
We use a small number of service providers to run this website. They process data only to provide their service to us:
- Website hosting — hosts this website and keeps standard server logs.
- Email — enquiries are delivered to our inbox through our email hosting provider (Hostinger) or, where configured, Resend, an email delivery service.
Links to our social media pages take you to those platforms, whose own privacy policies apply.
6. Data Retention
We keep enquiry information only as long as needed to respond to you and, if an engagement follows, for as long as required by that engagement and by legal, accounting, or reporting obligations. When it is no longer needed, we delete it.
7. Security Measures
We use appropriate technical and organizational measures to protect personal information, including encryption in transit (HTTPS) and restricting access to the people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
8. Your Rights
Depending on where you live, you may have the following rights regarding your personal information:
- Access — request a copy of the personal data we hold about you.
- Rectification — request correction of inaccurate or incomplete data.
- Erasure — request deletion of your data in certain circumstances.
- Restriction and objection — limit or object to certain processing.
- Portability — receive your data in a structured, machine-readable format.
- Withdraw consent — where processing is based on consent, withdraw it at any time.
To exercise any of these rights, contact us by email at admin@cybersecretsociety.com. You may also have the right to complain to your local data protection authority.
9. International Data Transfers
We work with clients internationally, and our service providers may process data in countries other than your own. Where personal data is transferred internationally, we take reasonable steps to ensure it remains appropriately protected.
10. Children's Privacy
This website and our services are intended for businesses and professionals. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy, for example if we add new website features. Changes will be reflected by updating the “Last updated” date at the top of this page.
Contact Information
If you have questions, requests, or complaints regarding this document, please contact us using the details below.
- Organization: Cyber Secret Society
- Email: admin@cybersecretsociety.com
- Phone: +92 302 4816936
- Registered address: Bahawalpur, Punjab 63100, PK
- Website: https://cybersecretsociety.com