Secursuit Privacy Policy

1. Information we collect

• • Contact details such as name, job title, email address, and phone number.
• • Company information provided during discovery sessions, security assessments, or support requests.
• • Technical data including IP addresses, browser type, and device identifiers when using our website.
• • Engagement data created during service delivery, including meeting notes, reports, and remediation outcomes.

2. How we use information

• • To deliver and enhance cybersecurity services and support.
• • To respond to enquiries and provide proposals or statements of work.
• • To improve our website, offerings, and customer experience.
• • To comply with legal obligations and cooperate with regulators where required.

3. Legal basis for processing

Secursuit processes personal data based on consent, contractual necessity, legitimate interests in delivering services, or compliance with legal obligations. We align with the Protection of Personal Information Act (POPIA) and the EU General Data Protection Regulation (GDPR) where applicable.

4. Sharing information

We do not sell personal information. We may share data with trusted partners who assist in delivering our services, subject to confidentiality agreements and appropriate safeguards. Data may also be disclosed if required by law or to protect our rights, property, or safety, or that of our clients and partners.

5. International transfers

Secursuit operates globally and may transfer personal information across borders. When transferring data internationally, we implement safeguards such as standard contractual clauses to ensure equivalent protection.

6. Data retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods are defined in our data governance framework.

7. Security controls

We implement administrative, technical, and physical safeguards to protect personal information against unauthorised access, alteration, disclosure, or destruction. Controls include encryption, least privilege access, monitoring, and secure software development practices.

8. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict the processing of your personal data. You may also object to processing or request data portability. Submit requests to [email protected]. We will respond in accordance with applicable law.

9. Cookies & analytics

We use first-party analytics only. No third-party trackers (Google Analytics, Meta Pixel, LinkedIn Insight, etc.) load on this site. We set one HttpOnly first-party session cookie (seng_sid) to count unique visitors. Your IP is sha256-hashed before storage; your user-agent is bucketed (mobile/desktop/bot) before logging; raw IP and UA are never persisted. Analytics data is processed and stored on our own EU-region infrastructure (Hetzner, NBG1, Germany) and never leaves our control.

If you submit a form (contact, demo request, signup), we attach your prior anonymous browsing history from this site over the last 90 days to the resulting sales record so our team can have context for the conversation. This attribution data lives only on the sales record; it is automatically discarded after 2 years if your lead is not closed, or sooner if you request erasure (see “Your rights” below). When the same email submits a form on different devices, we silently link the journeys for sales-pipeline context.

10. Updates

We may update this Privacy Policy periodically. The “Effective date” will indicate the latest revision. We encourage you to review this policy regularly to stay informed about how we protect your information.