Privacy Policy

CyFortress Privacy Policy

This privacy policy has been compiled to better serve those who are concerned with how their ‘Personally Identifiable Information’ (PII) is being used online. PII, as described in US privacy law and information security, is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. Please read our privacy policy carefully to get a clear understanding of how we collect, use, protect or otherwise handle your Personally Identifiable Information in accordance with our website.

This policy describes the scope of PII collection in respect of using CyFortress services, website (the “Services“). By using our Services, you acknowledge that you have reviewed both our Terms and Conditions and this Privacy Policy and agree to be bound by them. Please be aware that this Privacy Policy does not apply to the practices of any third parties to whom CyFortress may disclose PII pursuant to the terms of this Privacy Policy.

WHEN DO WE COLLECT INFORMATION?

We collect information from you when you register on our site, subscribe to a newsletter, download items, fill out a form or enter information on our site.

PERSONAL INFORMATION WE COLLECT

We collect Personal Information in accordance with your use, including your full name, e-mail and/or physical addresses, phone number, contact information, occupation and industry or other details to provide you with the Services you requested. When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”

We collect Device Information using the following technologies:

– “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit https://www.allaboutcookies.org.

– “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

– “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Data from website visitor Requests for Information.

HOW DO WE USE YOUR PERSONAL INFORMATION

We collect and process your Personal Information for the following purposes and by approving this Policy and using our services, you agree to such processing (unless you are an EU resident):

To provide you with the Services and to operate the Website: For the purposes of Website Operation and providing you with Services we collect Personal Information from you:

When you register for our website; 

respond to marketing communications;

request a demo; 

use some other site features. 

Customer Service: We use Data from website visitor Requests for Information to:

Communicate with you;

Requests for information placed through the Website;

To follow up with you after correspondence (live chat, email or phone inquiries);

provide you with customer service, technical assistance and support, subject to our sole consideration and internal policies.

Improvement of our Website and Services:

We use your personal data for the purposes of improving the quality of the Services by formulating, customizing and enhancing the User’s experience, and for our internal records and for statistical analysis.

Fraud Detection

For the purposes of Fraud Detection, we collect the following information:

Screen requests for potential risk or fraud; 

Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Website (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

Marketing and Promotional Purposes 

We may also use or disclose the above mentioned PII when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services. We also use the Device Information that we collect in online advertising and retargeting marketing campaigns.

HOW DO WE PROTECT YOUR INFORMATION?

CyFortress stores the PII if it is necessary to fulfil the purpose for which the information has been collected. This means that CyFortress deletes your Personal Information when such information is no longer necessary. Statistics and analysis which have been anonymised may be saved thereafter.

We do not use vulnerability scanning and/or scanning to PCI standards.

We only provide articles and information. We never ask for credit card numbers.

We use regular Malware Scanning.

Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. In addition, all sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology.

We implement a variety of security measures when a user enters, submits, or accesses their information to maintain the safety of your personal information.

All transactions are processed through a gateway provider and are not stored or processed on our servers. However, you should be aware that there is always some risk involved in transmitting information over the internet and that there is also some risk that others could find a way to thwart our security systems. As a result, while we strive to protect your information, we cannot ensure or warrant the security and privacy of your PII or other content you transmit using the Services, and you do so at your own risk. We encourage you to exercise discretion regarding the PII you choose to disclose.

SHARING YOUR PERSONAL INFORMATION

We share your Personal Information with third parties to help us use your Personal Information, as described above. The categories of third parties with whom we share your Personal Information are, among other: (i) Customer’s experience; (ii) Marketing and (iii) Analytics.

For example, we use Mailchimp to send email campaigns–you can read more about how Mailchimp uses your Personal Information here:

https://mailchimp.com/legal/privacy/?_ga=2.173148007.576141070.1527411054-2066575667.1516538679.

We also use a tool called “Google Analytics” to collect information about use of the website. Google Analytics collects information such as how often users visit this website, what pages they visit when they do so, and what other websites they used prior to coming to this website. We use the information we get from Google Analytics to maintain and improve the website and our products. We do not combine the information collected through the use of Google Analytics with Personal Information we collect. Google’s ability to use and share information collected by Google Analytics about your visits to this website is restricted by the Google Analytics Terms of Service, available at https://marketingplatform.google.com/about/analytics/terms/us/, and the Google Privacy Policy, available at http://www.google.com/policies/privacy/. You may learn more about how Google collects and processes data specifically in connection with Google Analytics at http://www.google.com/policies/privacy/partners/. You may prevent your data from being used by Google Analytics by downloading and installing the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout/.

We also use the services of FullStory in order to optimize your user experience. You can read more about how FullStory uses your Personal Information here: https://www.fullstory.com/resources/fullstory-gdpr-you

In addition, when you download our App to your mobile device, we may collect data on the installed apps on your mobile device and your device location at the time of a detected threat in order to view your overall mobile security posture.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

BEHAVIORAL ADVERTISING

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by visiting these links:

FACEBOOK – https://www.facebook.com/settings/?tab=ads

GOOGLE – https://www.google.com/settings/ads/anonymous

BING – https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

LINKEDIN– https://www.linkedin.com/help/linkedin/answer/62931/manage-advertising-preferences?lang=en

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at:  https://optout.aboutads.info/.

JOB APPLICATIONS

CyFortress collects and processes PII of job applicants (such as contact details and CV) who apply to any of the open positions published on the site and any other (including non-digital) means. We use such PII for CyFortress’s internal recruitment purposes such as, assessing the job applicant, making hiring decisions and contact applicants (e.g., by phone or e-mail). ​PII of job applicants is processed by CyFortress in accordance with the relevant terms of this Privacy Policy.

DO NOT TRACK

Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

YOUR RIGHTS:

EUROPEAN RESIDENTS

You may at any time request the rectification or erasure of your Personal Information. Please note however that deletion could mean that CyFortress cannot process your requests or provide you any requested Services. You have the right to request a copy of your Personal Information from our record. You have the right to request a limitation of the use of your or the termination of use of your Personal Information. If you wish to delete or modify your Personal Information or any User Content, If you would like to exercise this right, please contact us through the contact information below and we will make reasonable efforts to modify or delete any such Personal Information within a reasonable period of time, and pursuant to any applicable privacy laws. 

Additionally, if you are a European resident, we note that we are processing your information in order to fulfill contracts we might have with you, or otherwise to pursue our legitimate business interests listed above.  Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.

If you are a European resident, we note that the legal basis for processing your Personal Information is as follows:

To provide you with the Services and to operate the Website The Legal Basis is Legitimate Interest.

Customer Service

The Legal Basis is Legitimate Interest and Performance of Contract.

Improvement of our Website and Services

The Legal Basis is Legitimate Interest.

Fraud Detection

The Legal Basis is Legitimate Interest.

Marketing and Promotional Purposes 

The Legal Basis is Consent.

CALIFORNIA RESIDENTS 

Right to ask for disclosure:

You have the right to ask us to disclose certain information regarding our collection and use of your Personal Information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will provide you with the required information mandated by CCPA.

Right to ask for deletion:

You have the right to request that we delete any of your personal information that we collected from you, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete, and direct our service providers to delete, your personal information from our records, unless an exception applies. 

Within the past 12 months, we have disclosed to the following third parties your personal information: 

Affiliates;

Service providers;

Third parties to which you authorized us to disclose Personal Information in connection with Services provided to you.

CyFortress does not and will not sell your Personal Information. 

Right to non-discrimination:

We will not discriminate against you for exercising any of your rights under the CCPA. Unless permitted by the CCPA, we will not:

Deny you goods or services;

Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;

Provide you a different level or quality of goods or services; or

Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

COPPA (Children Online Privacy Protection Act)

When it comes to the collection of personal information from children under the age of 13 years old, the Children’s Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, United States’ consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children’s privacy and safety online.

We do not market to children under the age of 13 years old.

FAIR INFORMATION PRACTICES

The Fair Information Practices Principles form the backbone of privacy law in the United States and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information.

In order to be in line with Fair Information Practices we will take the following responsive action, should a data breach occur we will notify the users via in-site notification within 7 business days.

We also agree to the Individual Redress Principle which requires that individuals have the right to legally pursue enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only those individuals have enforceable rights against data users, but also that individuals have recourse to courts or government agencies to investigate and/or prosecute non-compliance by data processors.

CAN SPAM Act

The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.

We collect your email address in order to:

Send information, respond to inquiries, and/or other requests or questions

To be in accordance with CANSPAM, we agree to the following:

Not use false or misleading subjects or email addresses.

Identify the message as an advertisement in some reasonable way.

Include the physical address of our business or site headquarters.

Monitor third-party email marketing services for compliance, if one is used.

Honor opt-out/unsubscribe requests quickly.

Allow users to unsubscribe by using the link at the bottom of each email.

If at any time you would like to unsubscribe from receiving future emails, you can email us at: info@CyFortress.com and we will promptly remove you from ALL correspondence.

DATA RETENTION

CyFortress stores the PII as long as it is necessary to fulfil the purpose for which the data has been collected. This means that CyFortress deletes Your PII when such information is no longer necessary, unless we have a legitimate interest to retain such data for longer periods or are required to do so by any applicable law. Statistics which have been anonymised may be saved thereafter. 

CHANGES

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.