Privacy Policy

CyberLink Security (“we”, “us” or “our”) is the controller of personal data processed under this Policy. CyberLink Security operates under the Herodot umbrella of companies. You can contact us about privacy matters at info@cyberlinksec.com.

We collect the following categories of personal data:

• Contact details you provide, such as your name, email address, telephone number and company, when you contact us or engage our services.
• Engagement information necessary to deliver our services, which may include technical details of the systems within an agreed scope.
• Technical data generated when you use our website, such as connection metadata, browser and device characteristics, and security logs used to protect the service.

We do not seek to collect special categories of personal data through this website. Please do not send us sensitive personal data unless it is strictly necessary for an engagement and has been agreed in advance.

We process personal data for the following purposes and on the following legal bases:

• to provide, manage and improve our services, and to respond to your enquiries (performance of a contract, or steps taken at your request prior to a contract);
• to secure and administer our website and prevent misuse or abuse of our systems (legitimate interests in maintaining the security and integrity of our services);
• to comply with legal, regulatory and contractual obligations (legal obligation); and
• to send service-related communications and, where permitted, relevant updates (legitimate interests, or consent where required).

We use only strictly necessary cookies and local storage, for example to maintain the security of interactive features and to prevent abuse of our live support channel. We do not use advertising cookies or third-party tracking cookies, and we do not sell personal data. Because these technologies are essential to the operation of the website, they are used on the basis of our legitimate interests and do not require consent under applicable law.

We do not sell your personal data. We share it only where necessary: with service providers who process data on our behalf under appropriate contractual safeguards; with our affiliates within the Herodot group where relevant to the services; and with authorities, advisers or other parties where required by law, to protect our rights, or with your consent.

Where personal data is transferred outside the European Economic Area, we put in place appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or transfers to jurisdictions recognised as providing an adequate level of protection, so that your data remains protected to the standard required by applicable law.

We apply technical and organisational measures appropriate to the risk, including encryption of data in transit and at rest, access controls on a need-to-know basis, and monitoring of our systems. Our controls are aligned with recognised industry frameworks. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly to any incident.

We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet our legal, accounting and contractual obligations. Engagement data is retained and disposed of in accordance with the terms of the relevant engagement. When data is no longer required, we securely delete or anonymise it.

Subject to applicable law, you have the right to access your personal data and to request its rectification or erasure; to restrict or object to certain processing; to data portability; and, where processing is based on consent, to withdraw that consent at any time. To exercise any of these rights, contact us at info@cyberlinksec.com. You also have the right to lodge a complaint with a supervisory authority; in Ireland, this is the Data Protection Commission.

Our website and services are directed to businesses and professionals and are not intended for children. We do not knowingly collect personal data from children.

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites, and we encourage you to review their privacy policies.

We may update this Policy from time to time. Material changes will be communicated by email or by notice on this website, and the “Last updated” date above will be revised. We encourage you to review this Policy periodically.

For any question about this Policy or our handling of your personal data, contact us at info@cyberlinksec.com.