KantalSecurity - Privacy Policy

Effective Date: August 3, 2025

At KantalSecurity, we are deeply committed to protecting your privacy and personal data. As a cybersecurity service provider, trust and confidentiality are at the core of our values. This Privacy Policy describes how KantalSecurity ("we," "us," "our") collects, uses, shares, and protects your information when you use our website (https://kantalsecurity.com), our services (audits, monitoring, consulting), or when you communicate with us.

By using our services, you consent to the practices described in this Privacy Policy.

1. Information We Collect

We collect various types of information to provide and improve our services, and to communicate with you.

a. Information you provide directly to us:

Identification and Contact Data: When you fill out a contact form, request a free audit, subscribe to our newsletter, or interact with us, you may provide us with your name, email address, phone number, company name, job title, and any other information relevant to your request.
Service Data: During the provision of audit or consulting services, you might provide us with technical information about your infrastructure, systems, websites, or applications. These are handled with the utmost confidentiality and security, specifically within the scope of the service agreement.
Communications: The content of your communications with us (emails, messages via contact forms, etc.).

b. Information collected automatically:

When you visit our website, we may automatically collect certain information via cookies and similar tracking technologies:

Browse Data: Your IP address, browser type, operating system, pages visited on our site, time spent on these pages, navigation paths, dates and times of access.
Technical Data: Information about your device (device model, unique identifiers, mobile network information).

2. How We Use Your Information

We use the collected information for the following purposes:

Service Provision: To provide, operate, maintain, and improve our cybersecurity services (manual audits, monitoring, personalized consulting).
Communication: To respond to your inquiries, send confirmations, important notices, service updates, or relevant technical information.
Marketing and Promotion (with your consent): To send you newsletters, information about our new services, special offers, blog posts, or other marketing communications, if you have opted to receive them. You can unsubscribe at any time.
Website and Service Improvement: To analyze website usage, understand trends, diagnose technical problems, and optimize user experience and service performance.
Security and Legal Compliance: To detect, prevent, or address fraud, security issues, or technical problems, and to comply with legal and regulatory obligations.
Product Development: To analyze market needs and develop new cybersecurity solutions, particularly in relation to post-quantum threats.

3. How We Share Your Information

We do not sell or rent your personal information to third parties. We may share your information in the following circumstances:

Third-Party Service Providers: We may engage third-party companies and individuals to facilitate our services (e.g., web hosting, site analytics tools, communication platforms, payment services like Stripe). These third parties have access to your information only to perform these tasks on our behalf and are contractually obligated not to disclose or use it for any other purpose. (e.g., Formspree for form submissions).
Legal Requirements: If required by law or if we believe in good faith that such action is necessary to comply with a legal obligation, protect and defend our rights or property, prevent or investigate possible wrongdoing, protect the personal safety of users of our services or the public, or protect against legal liability.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal information may be transferred. We will provide notice before your personal information is transferred and becomes subject to a different Privacy Policy.

4. Data Security

The security of your data is paramount to KantalSecurity. We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes the use of encryption, firewalls, secure access controls, and regular security audits of our own systems.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

5. Data Retention

We retain your personal information for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law (e.g., for tax, legal, or regulatory purposes).

6. Your Data Protection Rights

Depending on your location and applicable law, you have certain rights regarding your personal data:

Right to Access: Request a copy of the personal information we hold about you.
Right to Rectification: Request correction of any incomplete or inaccurate information we hold about you.
Right to Erasure ("Right to Be Forgotten"): Request the deletion of your personal information under certain conditions.
Right to Restriction of Processing: Request that we restrict the processing of your personal information in certain situations.
Right to Object to Processing: Object to our processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
Right to Data Portability: Request that we transfer the information that we have collected to another organization, or directly to you, under certain conditions, in a structured, commonly used, machine-readable format.
Right to Withdraw Consent: Where we are relying on your consent to process your personal information, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the contact details provided at the end of this policy.

7. Links to Third-Party Sites

Our website may contain links to other websites not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

8. Children's Privacy

Our services are not intended for anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Information, please contact us. If we become aware that we have collected Personal Information from children without verification of parental consent, we take steps to remove that information from our servers.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this Privacy Policy. We advise you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us here