If you are a client of CyberX services who have separately entered into service agreements with us, please also refer to your service agreements and our additional disclosures for more information about how we collect, use, disclose and otherwise process your personal information.
1.Information We Collect
We may collect and process personal information about you when you provide us this information or automatically from the devices and browsers you use. This includes the following personal information about you:
- Account information, including identifiers such as your name and email address.
- Device information and internet or other electronic network activity information such as your browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and users’ pattern of the use of the website.
- Information contained in any enquiry you voluntarily submit to us.
- Information contained in the communications between you and us.
- Customer relationship information, if you act on behalf of your employer, such as the name of your employer, your job title or role and your contact details.
- Internet protocol (IP) address and broad geographic location based on the IP address.
2. How We Use Your Personal Information
We use your personal information for the following business and commercial purposes:
- To provide our service and ensure the security of our website and services.
- To provide you with information requested by you (including sending newsletters and information relating to our services).
- To improve our services and user experience.
- To communicate with you and manage our relationship with business customers, as well as market and promote our services.
- To comply with our legal obligations imposed under applicable laws.
3.How We Share Personal Information
We may share your personal information with the following categories of parties for the business purposes described above:
- With our parent company and affiliated companies.
- With service providers who process personal information on our behalf in order to help us provide our services.
- If permitted by and done in accordance with applicable laws, with third parties, in the event of a merger, acquisition, reorganization, bankruptcy, or other similar event.
We may also share your personal information with third parties, to the extent required by law, or if we are under a duty to disclose your personal information where necessary to comply with any legal obligation, establish, exercise or defend our legal rights and/or of third parties.
Our retention periods for personal information are based on business needs and legal requirements. We retain your personal information for as long as is necessary for the processing purpose(s) for which the information was collected. When personal information is no longer needed, we either anonymize the personal information (and we may further retain and use the anonymized information) or securely destroy the personal information.
We take appropriate steps to ensure that transfer of personal information will be done in accordance with applicable laws and, in particular, that contractual, technical and organizational measures will be in place.
We maintain (and requires our subcontractors and service providers to maintain) organizational and technical measures designed to protect the security and confidentiality of the personal information we process. However, we cannot guarantee that unauthorized third parties will never be able to overcome those measures or use your personal information for improper purposes. If we become aware of any security incident, we will act in a timely manner in accordance with applicable laws.
6.Third Party Links
Applicable data protection laws may give you a number of legal rights in relation to your personal information that we hold about you. Not all data protection laws are the same so not all of these rights apply in all places, and these rights are not absolute even where they are recognized under local law. However, you may have the following rights in accordance with applicable laws:
- Right to access to the personal information that we process about you and certain information about our processing practices.
- Right to rectify or correct your personal information if it is inaccurate or incomplete.
- Right to request that we erase or delete your personal information in certain circumstances. But this is a limited right as we may be able to retain certain personal information subject to an exception under applicable laws. Once we receive, verify and confirm your request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.
- Right to object to or restrict our processing of personal information about you under certain circumstances. There may be circumstances where you object to, or ask us to restrict our processing of your personal information but we are legally entitled to continue processing your personal information and/or to refuse that request.
- Right to lodge a complaint about our processing activities carried out by us before the competent authorities.
- Right receive a copy of certain personal information we process about you.
If you wish to exercise any of the rights set out above, please contact us at the e-mail address in the “Contact Us” section below.
Our website is not directed to children under age 16. If we discover that we have inadvertently collected information from children under age 16, we will delete the child’s information from our systems as soon as possible.
10.Do-Not-Track Signals and Similar Mechanisms
Some web browsers may transmit “do-not-track” signals to the websites with which the user communicates. Because of differences in how web browsers incorporate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they even are aware of them. Because there currently is no industry standard concerning what, if anything, websites should do when they receive such signals, our website currently does not take action in response to these signals. If and when a final standard is established and accepted, we will reassess how to respond to these signals.
12.Your California Privacy Rights
Please see the “Your Rights” section above for information about your rights to request deletion of personal information and to access (or “know”) about the personal information that we collect, use, and disclose. Your or your authorized agent may exercise your California rights by sending us an email to firstname.lastname@example.org. We will not charge you different prices or provide different quality of services unless those differences are related to your information or otherwise permitted by law. Once we receive your request, we may verify it by requesting information sufficient to confirm your identity, including by asking you to verify information about your use of the Service. If you would like to use an agent registered with the California Secretary of State to exercise your rights, we may request evidence that you have provided such agent with power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf.
Last Updated: September 24, 2021