Privacy policy

This privacy policy explains how CybrCoast (“CybrCoast”, “we”, “us”) collects, uses and protects personal information when you visit www.cybrcoast.com (the “Site”), contact us, book a call or subscribe to our updates. It does not cover information we handle on behalf of our clients while delivering projects; that is governed by our contracts with them.

1. Who we are

CybrCoast is a technology company based in Newark, Delaware, United States. We are responsible for the personal information described in this policy. You can reach us about privacy at any time through our contact page.

2. Information we collect

Information you give us

• Enquiries. When you fill in a contact or project form: your first and last name, work email, company name, a description of your company or project, the topic of your enquiry and how you heard about us.
• Consultation bookings. Calls are booked through Calendly, which collects your name, email address, the time you choose and any answers you give, and shares them with us.
• Email updates. Your email address, if you subscribe.
• Correspondence. Anything you send us by email or other channels.

Information collected automatically

• Analytics. We use Google Analytics to understand how the Site is used: pages visited, how you arrived, how long you stayed, your browser and device type, and your approximate location, derived from your IP address.
• Advertising measurement. We use the LinkedIn Insight Tag, loaded through Google Tag Manager, to measure visits from our LinkedIn campaigns. If you are a LinkedIn member, LinkedIn may also use it to show you our ads on LinkedIn. LinkedIn gives us aggregated reports only; it does not tell us who you are.
• Server logs. Our hosting provider, Vercel, records technical information such as your IP address, browser, the page requested and the time, to deliver the Site and keep it secure.

Embedded videos

Some pages include videos from YouTube and Vimeo that load when you choose to play them. Those services may collect information and set cookies under their own privacy policies.

Please don’t send us sensitive information, such as health or financial details, through our forms. We don’t ask for it and don’t need it.

3. How we use your information

• To reply to your enquiries, prepare proposals and deliver our services.
• To schedule and hold consultations.
• To send the updates you subscribed to.
• To understand how the Site is used and improve it.
• To measure how our marketing performs, including LinkedIn campaigns.
• To keep the Site secure, prevent fraud and abuse, and meet our legal obligations.

We do not sell your personal information for money, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.

4. Legal bases for processing

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases:

• Contract: to take steps you ask for before entering into a contract with us, and to deliver the services we agree.
• Legitimate interests: to answer enquiries, run and secure the Site and understand how it is used, where those interests are not overridden by your rights.
• Consent: for email updates, and for analytics and advertising cookies where the law requires consent. You can withdraw consent at any time.
• Legal obligation: where the law requires us to keep or disclose information.

5. Cookies and similar technologies

The Site itself does not need cookies to work. The analytics and advertising tools described above use cookies and similar technologies:

• Google Analytics sets cookies whose names begin with “_ga”, which last up to two years.
• LinkedIn sets cookies used for ad measurement and targeting.

You can block or delete cookies in your browser settings, opt out of Google Analytics with Google’s opt-out browser add-on, and control how LinkedIn uses your data for ads in your LinkedIn advertising settings.

6. How we share information

• Service providers who work on our behalf and may use the information only to provide their services to us: website hosting (Vercel), analytics (Google), scheduling (Calendly), the email and workflow tools that deliver form submissions to our team, and our business email and customer relationship management providers.
• LinkedIn, for the advertising measurement described above.
• Professional advisers, such as lawyers and accountants, where necessary.
• Authorities, when the law requires it or to protect our rights, users or the public.
• A buyer or successor, if CybrCoast is involved in a merger, acquisition or sale of assets. This policy would continue to apply to your information.

Under some US state privacy laws, letting LinkedIn use cookie data to show ads may count as “sharing” personal information or “targeted advertising”. You can opt out as described in section 9.

7. International transfers

We are based in the United States, and our service providers may process information in the United States and other countries. When we transfer personal information from the European Economic Area, the United Kingdom or Switzerland, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or the EU-U.S. Data Privacy Framework where the recipient takes part in it.

8. How long we keep information

• Enquiries and correspondence: for as long as we need them to respond and manage our relationship with you, and generally no longer than three years after our last contact, unless we have an ongoing contract or a legal reason to keep them longer.
• Email subscriptions: until you unsubscribe.
• Analytics data: up to 14 months in Google Analytics.
• Server logs: for a short period, for security.

9. Your rights and choices

Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy of it;
• correct inaccurate information;
• have your information deleted;
• object to or restrict certain processing, including direct marketing;
• receive your information in a portable format;
• withdraw consent at any time, where we rely on it;
• opt out of targeted advertising and of the “sale” or “sharing” of personal information, as those terms are defined in US state laws such as California’s.

To make a request, contact us through our contact page. We may ask for information to confirm your identity, and we will respond within the time the law requires. Where the law allows, you can ask an authorized agent to make a request for you. We will not treat you differently for using your rights. You can unsubscribe from email updates at any time.

If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your local data protection authority.

10. Security

We protect personal information with reasonable technical and organizational measures, including encrypted connections (HTTPS) across the Site, access controls and reputable service providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Children

The Site is intended for businesses and is not directed at children under 16. We do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

12. Links to other websites

The Site links to other websites and services, such as Calendly, LinkedIn and X. Their privacy practices are governed by their own policies.

13. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it last changed, and we will highlight significant changes here.

14. Contact us

If you have questions about this policy or how we handle your information, contact us through our contact page. CybrCoast is based in Newark, Delaware, United States.