1. Information we collect

Information you give us. When you request a project quote, fill in our contact form, email us, call us or message us on WhatsApp, we collect the details you provide. This may include your name, company name, business email address, phone number, the service you are interested in, estimated budget, project timeline, project details and anything else you choose to share.

Information collected automatically. When you visit the Website we and our service providers may collect technical information such as your IP address, browser and device type, pages visited, the page that referred you, and the date and time of your visit, using cookies and similar technologies (see section 5).

Information from other sources. We may receive business contact information from publicly available sources such as LinkedIn or company websites, or from partners and referrals, when you or your organisation are considering our services.

2. How we use your information

• To respond to your enquiries and prepare project quotes and proposals.
• To provide, manage and support the services you engage us for.
• To communicate with you about your project, our services, events and updates. You can opt out of marketing messages at any time.
• To operate, secure, maintain and improve the Website, including detecting and preventing spam, fraud and abuse.
• To understand how visitors use the Website so we can improve our content.
• To comply with legal obligations and to establish, exercise or defend legal claims.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

3. Legal bases for processing

Where data protection laws such as the EU or UK GDPR apply, we process personal information on these bases: to take steps at your request before entering into a contract (for example, preparing a quote); to perform a contract with you or your organisation; our legitimate interests in running and growing our business, responding to enquiries and securing the Website; compliance with legal obligations; and your consent, where we ask for it (for example, for non-essential cookies). You may withdraw consent at any time.

4. How we share information

• Within Cyber Skill Nexus: with our teams across the United States, Canada, India, and Pakistan who need it to respond to you or deliver services.
• Service providers: with trusted vendors that host the Website, provide email infrastructure, analytics, customer relationship management, and communication tools on our behalf (such as hosting providers, Google Workspace, and Google Analytics), under strict confidentiality agreements.
• Legal and safety: when required by law, court order or government request, or to protect the rights, property or safety of Cyber Skill Nexus, our clients or others.
• Business transfers: in connection with a merger, acquisition or sale of all or part of our business, subject to this policy.
• With your consent: in any other case where you ask us to or agree that we may.

5. Cookies and analytics

Cookies are small text files stored on your device. We use essential cookies to make the Website work, and, with your consent where required, analytics cookies (such as Google Analytics) to understand how visitors use the Website. You can block or delete cookies through your browser settings; however, certain features of the Website may not function as intended without essential cookies enabled.

6. International transfers

We operate in the United States, Canada, India and Pakistan, and our service providers may be located in other countries. Your information may therefore be transferred to and processed in countries whose data protection laws differ from those where you live. When we transfer personal information internationally, we take steps to protect it, including contractual safeguards such as Standard Contractual Clauses where required.

7. How long we keep information

We keep personal information only as long as needed for the purposes described in this policy. Quote and contact enquiries that do not lead to an engagement are kept for up to 24 months and then deleted or anonymised. Information related to client engagements is kept for the duration of the engagement and afterwards as required for legal, tax, accounting or contractual reasons.

8. How we protect information

As a cybersecurity company, we take the protection of information seriously. We use administrative, technical and physical safeguards appropriate to the risk, including encryption in transit (HTTPS), access controls based on least privilege, multi-factor authentication on business systems, and confidentiality obligations for our staff and contractors. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the authorities of a data breach where the law requires it.

9. Your rights and choices

Depending on where you live, you may have the right to: access the personal information we hold about you; correct inaccurate information; delete your information; object to or restrict certain processing; receive a copy of your information in a portable format; withdraw consent; and opt out of marketing communications. These rights may arise under laws such as the EU/UK GDPR, Canada's PIPEDA, India's Digital Personal Data Protection Act 2023, and US state privacy laws, including the California Consumer Privacy Act where it applies.

To exercise a right, email privacy@cyberskillnexus.com. We may need to verify your identity before responding, and we will respond within the time required by applicable law. We will not discriminate against you for exercising your rights. You may also have the right to complain to your local data protection authority.

10. Children's privacy

The Website and our services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, please contact us and we will delete it.

11. Third-party links

The Website may link to other websites and services, such as LinkedIn, Facebook, Instagram, YouTube, X and WhatsApp. Their privacy practices are governed by their own policies, and we encourage you to read them.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new "Last updated" date and, where the changes are significant, we will provide additional notice.

13. Contact us

If you have questions, comments, or requests regarding this Privacy Policy or your personal information, please reach out to us: