Privacy Policy for Kryplock Cybersecurity
Effective Date: February 16, 2026
1. Our Commitment to Data Privacy
As a cybersecurity firm, Kryplock operates on the principle of Privacy by Design. We do not just comply with laws; we aim to set the standard for how personal and technical data should be handled.
2. Information We Collect
We collect only the minimum data necessary to provide our services and secure our infrastructure.
- Contact Information: Name, email, and phone number when you request a consultation.
- Technical Information: IP addresses, browser types, and device identifiers (collected automatically for security monitoring and threat detection).
- Client Data: Information provided during security audits, pentesting, or consulting sessions.
- Note: We treat Client Data as strictly confidential under a separate Non-Disclosure Agreement (NDA).
3. How We Use Your Information
We use your data for the following lawful purposes:
- Service Delivery: To perform the cybersecurity assessments you’ve contracted.
- Security Monitoring: To detect and prevent unauthorized access or “bot” activity on our systems.
- Compliance: To meet our legal obligations and respond to verified data subject requests.
- 2026 Privacy Risk Assessments: We use anonymized data to conduct mandatory risk evaluations as required by updated 2026 privacy regulations.
4. Data Retention & Minimization
We do not keep data longer than necessary.
- Inquiry Data: Deleted after 12 months if no contract is signed.
- Security Logs: Retained for 90 days unless a security incident requires further investigation.
- Client Project Data: Securely purged 30 days after project completion, unless otherwise agreed in writing.
5. Advanced Security Measures
Because we are a cybersecurity firm, we implement “Gold Standard” protections:
- Encryption: All data is encrypted at rest (AES-256) and in transit (TLS 1.3).
- Access Control: We use Multi-Factor Authentication (MFA) and the Principle of Least Privilege (PoLP) for all internal data access.
- Zero-Knowledge Architecture: Where possible, we utilize systems where even our administrators cannot view your raw sensitive files.
6. Your Global Rights (GDPR / CCPA / Others)
Regardless of your location, we provide the following rights to all users:
- The Right to Access: You can request a copy of the data we hold about you.
- The Right to Erasure: You can request that we delete your personal information.
- The Right to Limit Processing: You can ask us to stop using your data for specific purposes (like marketing).
- The Right to Correct: You can update any inaccurate information.
7. Third-Party Disclosures
We never sell your data. We only share information with:
- Service Providers: (e.g., secure cloud hosting) who are contractually bound to our security standards.
- Law Enforcement: Only when presented with a valid, legally binding warrant or subpoena.
Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in the technologies we use or for legal and regulatory reasons. We encourage you to periodically review this page for the latest information.
Contact Us
If you have questions about our Privacy Policy or other technologies, please email our Privacy Team at:
kryplockcyberexperts.com