Privacy Policy

Our Commitment to Your Privacy

At The Cyber Arm Security, we understand that privacy and data protection are fundamental to cybersecurity. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our managed security services, visit our website, or interact with us.

Information We Collect

Personal Information

• Contact information (name, email address, phone number, business address)
• Company information (business name, industry, size, role/title)
• Technical information about your IT infrastructure for security assessments
• Payment and billing information for our services

Automatically Collected Information

• Website usage data (pages visited, time spent, click patterns)
• Device information (IP address, browser type, operating system)
• Security logs and monitoring data from our managed services
• Cookies and similar tracking technologies

How We Use Your Information

• Provide and improve our managed security services (MDR, SOC, SIEM)
• Conduct security assessments and gap analyses
• Monitor and respond to security incidents
• Send security alerts and service notifications
• Process payments and maintain customer accounts
• Communicate about our services and industry updates
• Comply with legal and regulatory requirements
• Improve our website and user experience

Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to outside parties except in the following circumstances:

• Service Providers: Trusted third-party vendors who assist us in providing our services
• Legal Requirements: When required by law, court order, or government regulation
• Security Threats: To protect against fraud, security breaches, or other illegal activities
• Business Transfers: In connection with a merger, acquisition, or asset sale
• Consent: When you have given explicit consent for sharing

Data Security

As a cybersecurity company, we implement industry-leading security measures to protect your information:

• End-to-end encryption for data in transit and at rest
• Multi-factor authentication for all access points
• Regular security audits and penetration testing
• Enterprise-grade security controls for our operations
• Employee security training and background checks
• Incident response procedures for data breaches

Your Rights (PIPEDA Compliance)

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:

• Access your personal information we have collected
• Request correction of inaccurate information
• Request deletion of your personal information
• Withdraw consent for certain uses of your information
• File a complaint with the Privacy Commissioner of Canada
• Receive information about our privacy practices

Cookies and Tracking

This site uses Google Analytics and Microsoft Clarity for analytics. Google Analytics records which pages people visit and how they move through the site. Microsoft Clarity records how people use pages, including clicks and scrolling, so we can see what is working. Both tools can store cookies in your browser.

You can opt out. Use your browser cookie settings to block or delete cookies. You can also install the Google Analytics opt-out browser add-on. That add-on tells Google Analytics not to collect visit data from your browser.

The Google Analytics opt-out browser add-on is published by Google at https://tools.google.com/dlpage/gaoptout.

Data Retention

We retain personal information only as long as necessary for the purposes outlined in this policy, to comply with legal obligations, resolve disputes, and enforce our agreements. Security logs may be retained for up to 7 years for compliance and forensic purposes.

International Transfers

Your personal information is primarily stored and processed in Canada. If we transfer information outside of Canada, we ensure adequate protection through contractual safeguards and compliance with applicable privacy laws.