Company Privacy Policy
At CISO99, we recognize that privacy and security are paramount—not just as a regulatory requirement, but as the foundation of the trust you place in our CISO services.
This Privacy Policy describes how we collect, use, and protect the personal information you provide to us, particularly when you use the "Contact Us" forms on our website.
1. Information We Collect
We collect information that you voluntarily provide to us when you express interest in our services.
Personal Information
When you fill out a contact form, request a consultation, or download resources, we may collect the following:
- Identity Data: Full name, job title.
- Contact Data: Email address, phone number.
- Professional Data: Company name, industry sector, and company size.
- Message Data: Any specific inquiries or details included in the "Message" text box.
Automatically Collected Data
When you access our website, certain technical information is collected automatically to enhance your experience and strengthen our security measures. This may include data such as your IP address, browser type, operating system, pages visited, and duration of visit. We utilize this information to improve website functionality and safeguard user interactions.
2. How We Use Your Information
The information provided through our forms is processed for the following specific purposes:
- Service Delivery: To address your inquiries, arrange consultations, and deliver the requested CISO services.
- Marketing and Communications: To send newsletters, industry updates, security insights, and promotional offers pertaining to CISO99. By submitting your contact details, you grant consent to receive such communications.
- Improvement: To evaluate trends and optimize our marketing strategies and website performance.
- Compliance: To fulfill applicable legal obligations and adhere to industry standards.
3. Marketing Communications
We respect your communication preferences. If you provide your details via our "Contact Us" form, you may be added to our mailing list to receive relevant cybersecurity news and updates about CISO99's service offerings. You retain the right to opt out at any time by clicking the "unsubscribe" link in our emails or by contacting us directly.
4. How We Share Your Information
CISO99 does not sell your personal data. However, your information may be shared with trusted third-party providers who support our website operations and business functions, including:
- CRM Platforms (for client relationship management)
- Email Marketing Services (for distributing newsletters and updates)
- Cloud Hosting Providers (for secure data storage)
All third parties are contractually required to maintain confidentiality and use your data solely for authorized purposes. The current list is published at ciso99.ai/subprocessors.
5. Data Security
As a dedicated provider of CISO services, we implement stringent security protocols to safeguard your personal information. These include industry-standard encryption, robust access controls, and secure data transmission methods designed to prevent unauthorized access, disclosure, modification, or destruction.
6. Platform Services and Connected Data
CISO99 also provides a CISO-as-a-Software platform. Where a customer connects their systems to the platform, CISO99 processes the data made available through those connections on that customer's instruction and on their behalf, in order to deliver the platform's services to them.
This processing is governed by our customer agreement and the Data Processing Agreement incorporated within it. We do not use that data for advertising, do not sell or license it, and do not use it to train or improve generalized artificial-intelligence or machine-learning models.
7. Your Data Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Right to Access: Request a copy of your personal data held by us.
- Right to Rectification: Request correction of inaccurate or incomplete information.
- Right to Erasure: Request deletion of your personal data ("Right to be Forgotten").
- Right to Withdraw Consent: Withdraw consent for marketing communications at any time.
To exercise any of these rights, please contact us using the details provided in Section 10.
8. Third-Party Links
Our website may contain links to external sites, such as security news sources or partners. CISO99 is not responsible for the privacy practices or content of these third-party websites.
9. Changes to This Policy
CISO99 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page indicates the most recent revisions.
10. Contact Us
For any questions regarding this Privacy Policy or our data handling practices, please contact us:
Company Name: CISO99
Email: privacy@ciso99.ai
Address: 64 Hagefen, Aseret, Israel, 7685800