Cyber Secret Society (“CSS”, “we”, “us”, or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what we collect, why we collect it, how we use and safeguard it, and the choices and rights you have.
This policy applies to information collected through our website, training platform, and the professional security services we provide. By using our website or services, you acknowledge that you have read and understood this policy.
1. Information We Collect
We collect information in the following ways:
Information you provide
- Contact details such as your name, email address, company, and phone number when you submit a form, request an engagement, or contact support.
- Account and membership details if you register for the training platform.
- The content of communications you send to us, including engagement scoping information.
- Billing information you provide when purchasing paid services or plans (processed by our payment providers — see Third-Party Services).
Information collected automatically
- Technical data such as IP address, browser type, device information, and operating system.
- Usage data such as pages visited, referring URLs, time on page, and interactions with the site.
- Cookies and similar technologies as described in our Cookie Policy.
2. How We Use Information
We use the information we collect to:
- Provide, operate, and maintain our website, platform, and services.
- Respond to enquiries, scope engagements, and deliver requested services.
- Process transactions and manage accounts, memberships, and subscriptions.
- Improve and personalize the user experience and develop new features.
- Send administrative information, service updates, and — where permitted — marketing communications you can opt out of at any time.
- Detect, prevent, and address technical issues, fraud, and security incidents.
- Comply with legal obligations and enforce our terms and policies.
4. Analytics
We may use privacy-conscious analytics tools to measure traffic and understand aggregate usage patterns. These tools may collect information such as pages viewed and general location derived from IP address. Analytics data is used in aggregate to improve our services and is not used to identify individual visitors where avoidable.
5. Third-Party Services
We rely on trusted third-party providers to deliver certain functions, such as hosting, payment processing, email delivery, and analytics. These providers process data only on our instructions and under contractual and legal safeguards. We do not sell your personal information.
6. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes described in this policy, to comply with legal, accounting, or reporting obligations, and to resolve disputes. When data is no longer needed, we securely delete or anonymize it.
7. Security Measures
As a cybersecurity organization, we apply appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit, access controls, least-privilege principles, and ongoing monitoring. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access — request a copy of the personal data we hold about you.
- Rectification — request correction of inaccurate or incomplete data.
- Erasure — request deletion of your data in certain circumstances.
- Restriction and objection — limit or object to certain processing.
- Portability — receive your data in a structured, machine-readable format.
- Withdraw consent — where processing is based on consent, withdraw it at any time.
To exercise any of these rights, contact us at privacy@cybersecretsociety.com. You also have the right to lodge a complaint with your local data protection authority.
9. International Data Transfers
We may process and store information in countries other than your own. Where personal data is transferred internationally, we take steps to ensure it receives an adequate level of protection through appropriate safeguards, such as standard contractual clauses.
10. Children's Privacy
Our website and services are not directed to children under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page and, where appropriate, by providing additional notice. We encourage you to review this page periodically.
Contact Information
If you have questions, requests, or complaints regarding this document, please contact us using the details below. We aim to respond to all legitimate enquiries in a timely manner.
- Company: Cyber Secret Society (CSS)
- Email: privacy@cybersecretsociety.com
- Website: https://cybersecretsociety.com
- Registered address: [Registered business address — to be provided]
- Support: support@cybersecretsociety.com