PRIVACY POLICY

This Privacy Policy explains how CYBERSEC360 (“we”, “us”, or “our”) collects, uses, stores, and protects your personal information when you visit our website or interact with our services. This page is maintained by CYBERSEC360 to answer common privacy and data-protection questions about our platform and marketing activities, including LinkedIn lead-generation campaigns.

We collect information you provide directly, information collected automatically, and information from third-party sources.

• Contact details (name, email, phone, company) submitted via our contact or partner-registration forms.
• Job title and business address provided during partner onboarding or event registration.
• Usage data: IP address, browser type, device information, pages visited, and time spent on site.
• Cookies and tracking data from analytics and advertising platforms (see Cookies & Tracking below).
• Information from LinkedIn Lead Gen Forms when you interact with our LinkedIn campaigns.

We use the information we collect to operate our business, communicate with you, and improve our services.

• Respond to inquiries and provide cybersecurity consultations.
• Process partner registrations and manage partner relationships.
• Deliver marketing communications you have opted into.
• Analyze website traffic and campaign performance (LinkedIn, Google Ads).
• Comply with legal obligations and protect our rights.

For visitors in the European Economic Area (EEA) and United Kingdom, we process personal data based on one or more of the following legal grounds:

• Your consent (e.g., subscribing to newsletters or submitting contact forms).
• Performance of a contract or pre-contractual steps (e.g., partner registration).
• Our legitimate interests, provided they do not override your rights (e.g., fraud prevention, network security, marketing analytics).
• Compliance with legal obligations applicable to CYBERSEC360.

We do not sell your personal data. We share information only with trusted service providers and when required by law.

• Supabase — cloud database and authentication services.
• LinkedIn — advertising and lead-generation campaign analytics.
• Google (Analytics, Ads, Tag Manager) — website and campaign measurement.
• Apollo.io — website visitor identification for B2B sales enablement.
• Legal authorities — when required to comply with applicable laws or protect our rights.

We use cookies and similar technologies to improve user experience, analyze traffic, and measure advertising effectiveness.

• Essential cookies — required for core site functionality (e.g., authentication, security).
• Analytics cookies — help us understand how visitors interact with our website (Google Analytics).
• Advertising cookies — enable us to measure and optimize LinkedIn and Google ad campaigns.
• You can control or disable cookies through your browser settings. Disabling certain cookies may affect site functionality.

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.

• Contact and partner records: retained for the duration of the business relationship, plus applicable statutory periods.
• Analytics and log data: retained for up to 26 months, then anonymized or deleted.
• Marketing opt-out lists: retained indefinitely to honor unsubscribe requests.

We implement technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

• Encrypted data transmission (TLS/SSL) for all website traffic.
• Role-based access controls (RBAC) for internal systems.
• Regular security assessments and vulnerability management.
• Rate limiting and input validation on public-facing forms.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request that we correct inaccurate or incomplete data.
• Deletion — request deletion of your personal data, subject to legal retention requirements.
• Objection — object to processing based on legitimate interests or direct marketing.
• Portability — request transfer of your data to another service provider.
• Withdrawal of consent — where processing is based on consent, you may withdraw it at any time.

For organizations and individuals in the Gulf Cooperation Council (GCC) region, we align our practices with applicable local frameworks, including:

• UAE Personal Data Protection Law (PDPL) and sector-specific regulations (ADHICS, ADGM DPR, DESC ISR).
• Kingdom of Saudi Arabia ECC-1 / ECC-2 and SAMA Cyber Security Framework.
• Data is stored in Supabase cloud infrastructure; we apply contractual safeguards for cross-border transfers where applicable.

If you have questions about this Privacy Policy, wish to exercise your rights, or need to report a privacy concern, please contact us:

• Email: info@cybersec360.net
• UAE Office: Office 127 Techco Hub 1, Dubai Digital Park, Dubai Silicon Oasis, Dubai UAE
• Australia Office: 64 York St, Sydney NSW 2000