Introduction and Scope

Cybershield Basics (the "Company") operates in the Practical Cybersecurity industry and provides cybersecurity services including assessment, monitoring, incident response, training, and advisory services to customers worldwide. This Privacy Policy explains how we collect, use, disclose, and protect personal information in the course of our business on cybershieldbasics.com and related services (collectively, the Services). By using our Services, you consent to the collection and processing of your information as described herein.

Scope

This Policy applies to all individuals whose personal data we process in connection with our Services, including customers, prospects, visitors to our websites, job applicants, and contractors, anywhere in the world. It covers information we collect directly from you, information we collect automatically, and information we obtain from third parties. It does not apply to data collected in ways not described in this Policy or to aggregated or anonymized data that does not identify you.

Information Collection Practices

Types of Information We Collect

• Personal data you provide to us directly, such as name, email address, phone number, company, job title, employment status, and payment details when you purchase or subscribe to our Services.
• Communications data, including the content of your emails, chat messages, support requests, and feedback.
• Device and usage data, including IP address, browser type, device type, operating system, pages visited, time stamps, and referral URLs.
• Account data, such as user IDs, account settings, and authentication data including passwords we securely store and protect via industry standards.
• Cookies and tracking technologies, including analytics, advertising, and security cookies, as described in our Cookie Notice.
• Location data, where applicable, derived from your device or IP for service delivery and security purposes.

How We Collect It

• Direct interactions: when you create an account, make a purchase, request support, register for webinars, fill out forms, or contact us.
• Automated technologies: through cookies, log files, and similar technologies that collect usage and device information.
• Third parties: from service providers, partners, and publicly available sources as permitted by law.

Purpose of Collection

We collect information to provide, secure, and improve our Services, communicate with you, process payments, personalize your experience, conduct analytics, comply with legal obligations, perform security monitoring, and detect and prevent fraud. When consent is required by law, we obtain it before collecting certain data.

How Data Is Used and Processed

How We Use Personal Information

• To provide, operate, and maintain the Services, including onboarding and configuration support.
• To communicate with you about your account, updates, security incidents, and customer support matters.
• To personalize experiences and deliver relevant content or recommendations.
• To process payments and manage subscriptions, including invoicing and refunds.
• To enforce our terms and policies and for security, fraud prevention, and risk management.
• To conduct data analytics, improve services, and develop new offerings.
• For compliance with applicable laws, regulations, and industry standards.
• For marketing and outreach where you have provided consent or where permitted by law, with options to opt out.

Data Processing and Legal Bases

We process personal data based on one or more legal grounds, including contract performance, legitimate interests, consent where applicable, and compliance with legal obligations. When we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before withdrawal.

Data Sharing and Disclosure

• Service providers and partners: we may share data with vendors who perform services on our behalf, such as hosting, payment processing, analytics, security scanning, and customer support.
• Compliance and law enforcement: we may disclose information as required by law, court order, or legal process, or to protect our rights and safety.
• Business transfers: in connection with a merger, acquisition, bankruptcy, or sale of assets, with appropriate notice and safeguards.
• With your consent: data may be shared with third parties when you authorize it.

Data Retention and Minimization

We retain personal information only as long as necessary to fulfill the purposes described in this Policy, including for the purposes of satisfying legal, accounting, or reporting requirements. We implement data minimization practices and securely dispose of data when no longer needed.

International Transfers

Your information may be transferred to, stored, and processed in countries other than your country of residence, including jurisdictions that may not provide the same level of data protection as your jurisdiction. We implement safeguards to protect your data in accordance with applicable data protection laws, including standard contractual clauses where required.

Data Security Measures

We maintain comprehensive technical and organizational measures to protect personal information from unauthorized access, disclosure, alteration, or destruction. This includes:

• Encryption in transit and at rest where feasible and appropriate.
• Access controls, authentication, and authorization to limit who can process data.
• Secure software development practices and regular vulnerability assessments.
• Monitoring, anomaly detection, and incident response planning.
• Data minimization, pseudonymization, and structured data retention schedules.
• Training and awareness programs for employees and contractors.
• Regular audits and third party assessments where applicable.

User Rights and Choices

Your Rights

• Access and subject access: you may request a copy of your personal information we hold and obtain information about how we process it.
• Correction: you may request corrections to inaccurate or incomplete information.
• Deletion: you may request deletion of personal information, subject to legal rights and applicable exceptions.
• Data portability: you may request a copy of your personal information in a structured, commonly used, and machine-readable format.
• Restriction of processing: you may request that processing of your personal data be restricted in certain circumstances.
• Objection: you may object to processing based on legitimate interests, direct marketing, or for reasons related to your particular situation.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time.

Exercising Your Rights

To exercise these rights, please contact us using the details in the How to Contact Us for Privacy Inquiries section. We will respond in accordance with applicable law and aim to acknowledge your request within a reasonable period and complete it where required by law.

CPRA Rights for California Residents

To exercise CPRA rights, contact privacy@cybershieldbasics.com.

Third-Party Services and Cookies

Third-Party Services

We may engage third-party service providers to perform services on our behalf, including cloud hosting, payment processing, analytics, security tooling, and customer support. These providers may have access to personal information as necessary to perform their functions and are obligated to protect it.

Cookies and Tracking Technologies

We use cookies and similar technologies to analyze trends, administer the site, track users' movements, and gather demographic information about our user base. You may manage your cookie preferences via our Cookie Notice and your browser settings. Some cookies are strictly necessary for the operation of the Services, while others enhance functionality or enable analytics and marketing.

Data Sharing with Vendors and Partners

We enter into data processing agreements with our vendors to ensure appropriate safeguards. We do not sell personal data to third parties and we typically share data to provide the Services or for legal compliance. Cross-border transfers are protected by standard contractual clauses or other lawful mechanisms where required.

How to Contact Us for Privacy Inquiries

• Privacy email: privacy@cybershieldbasics.com
• Phone: +1 (310) 202-4500
• Mailing address: 1200 Westwood Boulevard, Suite 260, Los Angeles, CA 90024, United States

Privacy Notice for CPRA

To exercise CPRA rights, contact privacy@cybershieldbasics.com.

Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will provide notice and updated effective date.

Last Updated

February 28, 2026