Privacy Policy

1. Who We Are

Defensahacker Labs ("we", "us", "our") is a boutique cybersecurity consulting firm. Our website is https://defensahacker.com. For any privacy-related questions, contact us at contact@defensahacker.com.

2. Information We Collect

We collect only the minimum information necessary to operate our business:

• Contact information — name and email address when you reach out to us directly via email.
• Usage data — standard server logs may include IP address, browser type, pages visited, and timestamps. This data is anonymised and used solely for security and performance monitoring.
• Cookies — we use only essential cookies required for the site to function. We do not use tracking or advertising cookies.

We do not collect sensitive personal data, payment information, or data from minors.

3. How We Use Your Information

We use the information we collect to:

• Respond to your enquiries and provide our cybersecurity services.
• Maintain the security and performance of this website.
• Comply with applicable legal obligations.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal bases for processing personal data are:

• Legitimate interest — to respond to enquiries and operate our website securely.
• Contractual necessity — to deliver services you have engaged us to perform.
• Legal obligation — where required by applicable law.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Email correspondence is retained for up to 3 years. Server logs are retained for up to 90 days and then deleted.

6. Third-Party Services

Our website links to external tools and platforms (such as our security audit tools). These services have their own privacy policies and we are not responsible for their data practices. We encourage you to review their policies before use.

We use Google Fonts to render typefaces on this site. Google may collect limited technical data (IP address) when fonts are loaded. See Google's Privacy Policy for details.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your data ("right to be forgotten").
• Restriction — request that we limit how we process your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interest.

To exercise any of these rights, email us at contact@defensahacker.com. We will respond within 30 days.

8. Security

As a cybersecurity firm, we apply appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. All data in transit is encrypted via TLS.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of our website after any changes constitutes acceptance of the updated policy.

10. Contact

For any questions or concerns about this Privacy Policy or how we handle your data, please contact us at contact@defensahacker.com.