Privacy Policy

Our Commitment to Your Privacy

At The Cyber Arm Security, we understand that privacy and data protection are fundamental to cybersecurity. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our managed security services, visit our website, or interact with us.

Information We Collect

Personal Information

• Contact information (name, email address, phone number, business address)
• Company information (business name, industry, size, role/title)
• Technical information about your IT infrastructure for security assessments
• Payment and billing information for our services

Automatically Collected Information

• Website usage data (pages visited, time spent, click patterns)
• Device information (IP address, browser type, operating system)
• Security logs and monitoring data from our managed services
• Cookies and similar tracking technologies

How We Use Your Information

• Provide and improve our managed security services (MDR, SOC, SIEM)
• Conduct security assessments and gap analyses
• Monitor and respond to security incidents
• Send security alerts and service notifications
• Process payments and maintain customer accounts
• Communicate about our services and industry updates
• Comply with legal and regulatory requirements
• Improve our website and user experience

Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to outside parties except in the following circumstances:

• Service Providers: Trusted third-party vendors who assist us in providing our services
• Legal Requirements: When required by law, court order, or government regulation
• Security Threats: To protect against fraud, security breaches, or other illegal activities
• Business Transfers: In connection with a merger, acquisition, or asset sale
• Consent: When you have given explicit consent for sharing

Data Security

As a cybersecurity company, we implement industry-leading security measures to protect your information:

• End-to-end encryption for data in transit and at rest
• Multi-factor authentication for all access points
• Regular security audits and penetration testing
• Enterprise-grade security controls for our operations
• Employee security training and background checks
• Incident response procedures for data breaches

Your Rights (PIPEDA Compliance)

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:

• Access your personal information we have collected
• Request correction of inaccurate information
• Request deletion of your personal information
• Withdraw consent for certain uses of your information
• File a complaint with the Privacy Commissioner of Canada
• Receive information about our privacy practices

Cookies and Tracking

We use cookies and similar technologies to enhance your website experience:

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand website usage
• Marketing Cookies: Used for relevant advertising (with consent)

You can manage cookie preferences through your browser settings.

Data Retention

We retain personal information only as long as necessary for the purposes outlined in this policy, to comply with legal obligations, resolve disputes, and enforce our agreements. Security logs may be retained for up to 7 years for compliance and forensic purposes.

International Transfers

Your personal information is primarily stored and processed in Canada. If we transfer information outside of Canada, we ensure adequate protection through contractual safeguards and compliance with applicable privacy laws.