Privacy Policy

1. Overview

CyberPulse Security Inc. ("CyberPulse," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website cyberpulse.site, use our services, or interact with us in other ways.

Please read this policy carefully. By accessing or using our website or services, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our services and website.

CyberPulse is headquartered in Washington, DC, United States. Our privacy practices comply with applicable US federal and state privacy laws, including the California Consumer Privacy Act (CCPA) and, where applicable, the European Union General Data Protection Regulation (GDPR).

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide, including:

• Contact Information: Full name, email address, phone number, job title, company name, and mailing address when you complete contact forms, request assessments, or register for events.
• Communications: Content of emails, messages, and other communications you send to us.
• Account Information: Login credentials, security questions, and profile data if you create an account with us.
• Payment Information: Billing details and payment method information for service purchases. Note: Full credit card numbers are processed by our PCI-DSS-compliant payment processor and are never stored on our servers.
• Professional Information: Organization details, industry, employee count, and information about your current security posture shared during consultations.

2.2 Information Collected Automatically

When you visit our website, we automatically collect:

• Log Data: IP address, browser type and version, operating system, referring URLs, pages visited, time and date of visits, and time spent on pages.
• Device Information: Hardware model, unique device identifiers, mobile network information.
• Location Data: General geographic location derived from your IP address (country, state, city). We do not collect precise GPS location.
• Usage Data: Clickstream data, search queries on our website, features used, and errors encountered.
• Cookies and Tracking Technologies: See Section 5 for detailed information about our use of cookies.

2.3 Information from Third Parties

We may receive information about you from:

• Business partners, referrals, and channel partners
• Publicly available sources such as LinkedIn and company websites
• Data enrichment providers for business contact information
• Analytics providers and advertising networks

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our cybersecurity services and customer support.
• Communications: To respond to inquiries, send service notifications, security alerts, and administrative messages.
• Marketing: With your consent, to send promotional content, newsletters, and information about our services. You may opt out at any time.
• Security Research: To conduct internal research, threat intelligence analysis, and improve our security products.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes, including responding to lawful requests from government authorities.
• Business Operations: For billing, accounting, auditing, fraud prevention, and business analytics.
• Service Improvement: To understand usage patterns, diagnose technical problems, and develop new features.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• Service Providers: Third-party vendors who assist us in operating our business (e.g., cloud hosting, payment processing, CRM, email delivery). These providers are contractually bound to process data only as directed and to maintain appropriate security measures.
• Legal Requirements: When required by law, court order, or governmental authority; when necessary to protect the rights, property, or safety of CyberPulse, our clients, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of all or part of our business assets, with appropriate notice to affected users.
• Professional Advisors: Attorneys, accountants, and other professional advisors under confidentiality obligations.
• Consent: When you have explicitly consented to such sharing.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. For complete details, please see our Cookie Policy. In summary:

• Essential Cookies: Required for basic website functionality and cannot be disabled.
• Analytics Cookies: Help us understand how visitors use our website (e.g., Google Analytics).
• Marketing Cookies: Used to deliver relevant advertising and track campaign effectiveness.
• Functional Cookies: Remember your preferences and settings.

You can control cookies through your browser settings and our cookie consent banner. Disabling certain cookies may affect website functionality.

6. Data Security

CyberPulse implements enterprise-grade security measures to protect your information, including:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Multi-factor authentication for system access
• Regular penetration testing and vulnerability assessments
• SOC 2 Type II certified security controls
• Employee security awareness training and background checks
• Incident response procedures for data breaches

Despite these measures, no security system is impenetrable. In the event of a data breach affecting your information, we will notify you as required by applicable law.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specifically:

• Client engagement data: Retained for 7 years following the end of the engagement to comply with legal and regulatory requirements.
• Marketing contact data: Retained until you unsubscribe or request deletion, plus 30 days for system propagation.
• Website analytics data: Aggregated and anonymized after 26 months.
• Security logs: Retained for 12 months for security monitoring purposes.

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to certain exceptions.
• Portability: Request transfer of your data in a structured, machine-readable format.
• Opt-Out: Opt out of marketing communications at any time via the unsubscribe link in emails or by contacting us.
• Restriction: Request restriction of processing in certain circumstances.
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your rights, contact us at privacy@cyberpulse.site. We will respond within 30 days (or 45 days with notice if additional time is needed).

9. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a minor, we will take immediate steps to delete that information.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on our website with a revised effective date and, where appropriate, by sending you an email notification. We encourage you to review this policy periodically.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Team:

• Email: privacy@cyberpulse.site
• Mail: CyberPulse Security Inc., Attn: Privacy Officer, 1250 Connecticut Ave NW, Suite 700, Washington, DC 20036
• Phone: +1 (202) 555-1234 (Monday–Friday, 9 AM–5 PM ET)