Privacy policy

This policy explains what personal information Cyberspida ("we", "us") collects through cyberspida.com, why, and what rights you have. The short version: we collect as little as possible, we don't track you, and we never sell your data.

What we collect

When you browse the site

This website uses no cookies, no analytics, no advertising trackers and no third-party scripts. Our hosting provider automatically keeps standard server logs (such as IP address, browser type, page requested and time) for security and to keep the site running. These logs are kept for a limited period and are not used to identify or profile you.

When you contact us

If you use the contact form or email us, we receive the details you choose to share: your name, email address, company, website address and message. The contact form also stores a one-way, scrambled version (a hash) of your IP address for up to one hour to stop spam. We cannot turn it back into your IP address.

During a security engagement

If you hire us, any data we encounter while testing your website is handled under our written agreement and non-disclosure agreement with you: accessed only as far as needed to prove an issue, never shared, and deleted at the end of the engagement.

How we use it

• To reply to your enquiry and, if you ask, prepare a proposal.
• To deliver services you've agreed to.
• To protect this website from spam and abuse.

We don't send marketing emails unless you've asked for them, and we never sell, rent or trade your information.

Who we share it with

Only the service providers needed to run our business — our web and email hosting provider (Hostinger) — who process data on our behalf. We may disclose information if required by law.

How long we keep it

Enquiries that don't become projects are deleted within 12 months. Client records are kept as long as needed for the engagement and to meet legal and tax obligations.

Your rights

Depending on where you live — including under India's Digital Personal Data Protection Act, 2023 and the EU/UK GDPR — you can ask us to access, correct or delete your personal information, or withdraw consent. Email hello@cyberspida.com and we'll respond within 30 days. You can also complain to your local data protection authority.

Security

The whole site is served over HTTPS with strict security headers. Contact form messages are sent over an encrypted connection to our mailbox. If you believe you've found a security issue on this site, please see our responsible disclosure policy.

Changes

If we change this policy, we'll update the date at the top of this page.

Contact

Questions about privacy: hello@cyberspida.com