How we handle your data.

Overview

NET4NINJA (“we,” “our,” or “us”) protects your privacy and personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.

As a cybersecurity and defense technology company, we understand how much data protection and privacy matter. This policy reflects our commitment to transparency and to compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant privacy regulations.

1. Information we collect

1.1 Information you provide directly

• Contact information (name, email address, phone number, company name)
• Professional information (job title, organization, industry)
• Communication preferences and interests
• Information provided during consultations or service requests
• Feedback, testimonials, and survey responses

1.2 Information collected automatically

• Device information (IP address, browser type, operating system)
• Website usage data (pages visited, time spent, click patterns)
• Cookies and similar tracking technologies
• Location data (general geographic location based on IP address)
• Security logs and access records

1.3 Information from third parties

• Business contact information from professional networks
• Publicly available business information
• Information from our authorized partners and vendors
• Data from security and threat intelligence sources

2. How we use your information

2.1 Service delivery

• Provide cybersecurity consulting and defense solutions
• Respond to inquiries and support requests
• Deliver technical documentation and security briefings
• Perform security assessments and vulnerability analyses

2.2 Communication

• Send service updates and security alerts
• Provide technical support and customer service
• Share relevant industry insights and threat intelligence
• Respond to your questions and requests

2.3 Business operations

• Improve our services and develop new solutions
• Conduct security research and threat analysis
• Comply with legal and regulatory requirements
• Protect against fraud and security threats

3. Data security and protection

3.1 Security measures

• Encryption protocols (AES-256, TLS 1.3)
• Multi-factor authentication for all access points
• Regular security audits and penetration testing
• Zero-trust network architecture
• Continuous monitoring and threat detection

3.2 Data classification

• Confidential data: client information, proprietary methods
• Restricted data: personal identifiers, security credentials
• Internal data: business operations, employee records
• Public data: marketing materials, published research

3.3 Access controls

• Role-based access permissions
• Principle of least privilege
• Regular access reviews and updates
• Secure data disposal procedures

4. Data sharing and disclosure

4.1 We may share information with

• Authorized service providers and contractors
• Government agencies, as required by law
• Legal advisors and auditors
• Parties to a merger or acquisition, with notice

4.2 We do not share information for

• Commercial marketing by third parties
• Unauthorized data mining or profiling
• Sale to data brokers or advertising networks
• Any purpose not disclosed in this policy

5. Your privacy rights

5.1 General rights

• Access: request copies of your personal data
• Correction: update or correct inaccurate information
• Deletion: request deletion of your personal data
• Portability: receive your data in a structured format
• Objection: object to certain types of processing

5.2 California residents (CCPA)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

5.3 European residents (GDPR)

• Right to rectification and erasure
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

6. Data retention and deletion

6.1 Retention periods

• Active client data: the duration of the service relationship plus 3 years
• Prospect data: 2 years from the last interaction
• Website analytics: 26 months
• Security logs: 7 years, for compliance requirements
• Legal hold data: until the legal matter is resolved

6.2 Secure deletion

• NIST 800-88 compliant data destruction
• Certified destruction of physical media
• Cryptographic erasure of encrypted data
• Verification that deletion is complete

7. International data transfers

NET4NINJA operates globally and may transfer your personal information to countries outside your country of residence. We put appropriate safeguards in place:

• Standard Contractual Clauses (SCCs) for EU transfers
• Adequacy decisions where applicable
• Binding Corporate Rules for internal transfers
• Derogations for specific situations

8. Cookies and tracking technologies

We use cookies and similar technologies on our website. For details of what we set and how to control it, read our Cookie Policy.

9. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending email notifications to registered users
• Displaying prominent notices on our services
• Providing direct notice for significant changes

10. Contact us

For questions about this Privacy Policy, or to exercise your privacy rights, contact the NET4NINJA Privacy Office:

• Privacy: [email protected]
• General contact: [email protected]
• Response time: 30 days for standard requests, 72 hours for urgent matters