1. Introduction

SecureITSimply (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (www.secureitimply.com), use our managed cybersecurity services, or interact with us in any capacity.

We provide enterprise-grade cybersecurity solutions including Email Protection, Data Protection, and Managed XDR (Extended Detection and Response) services. By using our services, you agree to the collection and use of information as described in this policy.

2. Information We Collect

2.1 Information You Provide to Us

• Contact information (name, email address, phone number, job title)
• Company information (organisation name, size, industry)
• Account credentials (usernames and encrypted passwords)
• Billing and payment information
• Communications you send us (support requests, enquiries, feedback)
• Information provided during onboarding, demos, or consultations

2.2 Information Collected Automatically

• IP addresses and approximate geographic location
• Browser type, version, and operating system
• Pages visited, time spent, and referring URLs
• Device identifiers and technical diagnostics
• Cookies and similar tracking technologies (see Section 8)

2.3 Information from Our Cybersecurity Services

As part of delivering our managed security services, we may process:

• Network traffic metadata and security event logs
• Threat intelligence data and indicators of compromise
• Email headers and metadata (for Email Protection services)
• Endpoint telemetry and behavioural analytics
• Incident response and forensic artefacts

This data is processed solely to protect your organisation’s security and is handled under strict data processing agreements.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Delivering, maintaining, and improving our cybersecurity services
• Responding to your enquiries and providing customer support
• Processing transactions and managing billing
• Detecting, preventing, and responding to security threats
• Sending service updates, alerts, and operational communications
• Sending marketing communications (with your consent or as permitted by law)
• Conducting security research and improving threat detection capabilities
• Complying with legal obligations and enforcing our agreements
• Analysing usage patterns to improve our products and services

4. Legal Basis for Processing

Where applicable under the General Data Protection Regulation (GDPR) or similar legislation, we process your personal data on the following legal bases:

• Contract Performance: Processing necessary to deliver our services to you
• Legitimate Interests: Protecting our systems, preventing fraud, improving our services
• Legal Obligation: Complying with applicable laws and regulations
• Consent: Where you have explicitly opted in (e.g., marketing communications)

5. How We Share Your Information

5.1 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our services, including cloud infrastructure providers, payment processors, CRM platforms, and communication tools. These providers are contractually required to protect your data.

5.2 Security Partners and Threat Intelligence

We may share anonymised or aggregated threat intelligence data with cybersecurity partners and industry bodies to improve collective security. No personally identifiable information is shared in this context without your consent.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or where we believe disclosure is necessary to protect our rights, prevent fraud, or ensure the safety of our users.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and the options available to you.

5.5 No Sale of Personal Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including:

• Active account data: Retained for the duration of the service relationship plus 3 years
• Security logs and incident records: Retained for up to 7 years for compliance purposes
• Marketing data: Retained until you withdraw consent or request deletion
• Legal and financial records: Retained as required by applicable law

When data is no longer required, we securely delete or anonymise it in accordance with industry best practices.

7. Data Security

We implement robust technical and organisational measures to protect your information, including:

• AES-256 encryption for data at rest and TLS 1.3 for data in transit
• Multi-factor authentication (MFA) for all administrative access
• Regular penetration testing and vulnerability assessments
• Role-based access controls and least-privilege principles
• 24/7 security monitoring through our Managed XDR platform
• ISO 27001-aligned information security management practices

While we take comprehensive measures to protect your data, no security system is completely impenetrable. In the event of a data breach, we will notify affected individuals and relevant authorities as required by law.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website. These include:

• Essential Cookies: Required for the website to function correctly
• Analytics Cookies: Help us understand how visitors use our site (e.g., Google Analytics)
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Used to deliver relevant advertisements (only with consent)

You can manage your cookie preferences through your browser settings or our cookie consent tool. Disabling certain cookies may affect the functionality of our website.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restriction: Request that we limit how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is consent-based

To exercise any of these rights, please contact us at privacy@secureitimply.com. We will respond within 30 days of receiving your request. You also have the right to lodge a complaint with your local data protection authority.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent mechanisms, to protect your data in accordance with applicable privacy laws.

11. Children’s Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will take prompt action to delete such information.

12. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or applicable law. We will notify you of significant changes by posting a prominent notice on our website or sending you an email notification. The “Effective Date” at the top of this policy indicates when it was last updated.

Your continued use of our services after such changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

SecureITSimply

Email: contact@secureitimply.com

Website: www.secureitimply.com

For GDPR-related enquiries, please mark your message: “Data Protection Request”