DRAFT — pending review by qualified legal counsel. This document is a structured draft prepared from internal documentation. It is not yet legally binding and must be reviewed and approved by a qualified lawyer before publication or reliance (CLAUDE_PROJECT_RULES §8.3).
Privacy Policy
CyberFort Global ("CyberFort Global", "we", "us") provides remote cybersecurity services to businesses and professionals worldwide. This Privacy Policy explains what personal data we collect through our website at cyberfortglobal.pro, why we collect it, how we protect it, and the choices you have. We are a security company, and we treat the protection of your data as a core obligation.
1. Information we collect
1.1 Information you provide
When you submit our security-audit / contact form, we collect the information you enter:
- Full name
- Business email address
- Company name
- Country
- Message (optional)
1.2 Information collected automatically
When you submit the form, our server also records limited technical data to operate the service securely and prevent abuse:
- A one-way hashed representation of your IP address (HMAC-SHA256 with a secret salt). We do not store your raw IP address.
- Your browser user-agent string
- The interface language you selected (English or Russian)
- The page from which the form was submitted, and a timestamp
Analytics events (see §4) are only collected if you grant consent.
2. How we use your information
- To respond to your inquiry, typically within four business hours
- To scope and deliver the security services you request
- To notify our team internally of new inquiries (by email and Telegram)
- To create and maintain a customer-relationship record
- To secure the service against spam and abuse, and to maintain an internal audit log
- To improve our website and services
3. Legal basis
Where the EU/UK General Data Protection Regulation applies, we process your form submission on the basis of taking steps at your request prior to entering into a contract, and our legitimate interest in responding to business inquiries and securing our service. Analytics are processed only with your consent.
4. Cookies and analytics
We use privacy-respecting analytics to understand and improve site performance. No analytics cookies or tracking are loaded until you accept via our consent banner. If you decline, no analytics scripts are loaded and no analytics data is collected. You can withdraw consent by clearing your browser storage for this site.
5. How we share information
We do not sell your personal data. We share it only with service providers ("processors") that help us operate, and only to the extent necessary:
- Email delivery (SMTP provider) — to send our reply and internal notifications
- Telegram — to alert our team of a new inquiry
- Customer relationship management (HubSpot) — to manage your inquiry
- Analytics (Google Analytics 4) — only after you consent
We may also disclose information where required by law.
6. International transfers
CyberFort Global operates remotely and internationally. Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.
7. Data retention
We retain lead and inquiry data for up to 24 months, after which it is anonymized. Our internal security audit log is append-only and retained for security and accountability purposes. We do not keep personal data longer than necessary for the purposes described here.
8. How we protect your data
- All connections are encrypted with HTTPS/TLS
- IP addresses are stored only as salted one-way hashes — never in raw form
- Database access uses least-privilege credentials over encrypted connections
- We minimize the personal data we store to what is operationally necessary
9. Your rights
Subject to applicable law, you may have the right to access, correct, delete, restrict, or object to our processing of your personal data, and to data portability. To exercise any of these rights, contact us at info@cyberfortglobal.pro. We will respond within the timeframe required by applicable law.
10. Children
Our services are directed to businesses and professionals and are not intended for children. We do not knowingly collect personal data from children.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "last updated" date above reflects the most recent revision. Material changes will be reflected on this page.
12. Contact us
For any privacy question or request, contact us at info@cyberfortglobal.pro or via Telegram at @CyberFortGlobal.