Privacy Policy

Introduction

Nenurta CyberTech ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with our AI-powered assessment tools.

Information We Collect

Information You Provide

We collect information that you voluntarily provide to us when you:

• Submit our contact form or email us directly
• Use our AI-powered cybersecurity assessment tool at nist.nenurta.com
• Request a consultation or service

Depending on how you interact with us, this information may include:

• Your name, email address, phone number, and company name
• The subject and content of your message
• Business information and security assessment responses you enter into our assessment tool
• Any other information you choose to provide

Automatically Collected Information

When you visit our website, our servers and (with your consent) our analytics service may automatically collect certain technical information, including:

• IP address (anonymized before storage in our analytics)
• Browser type and version
• Pages you visit and time spent on pages
• Referring website addresses
• Date and time of your visit

Like most websites, our web servers keep standard access logs (including IP addresses) for security monitoring and troubleshooting. These logs are retained only as long as needed for those purposes.

Information Stored on Your Device

We use your browser's local storage to remember a small amount of information on your own device:

• Your cookie consent choice (accepted or declined)
• A local counter used to rate-limit contact form submissions and prevent abuse

This locally stored information is not transmitted to us and can be removed at any time by clearing your browser's site data.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Respond to your inquiries and provide customer support
• Generate cybersecurity assessments and recommendations
• Send you updates and marketing communications (only with your consent, and you may opt out at any time)
• Protect our website and services against abuse, spam, and security threats
• Comply with legal obligations and protect our rights
• Analyze website usage and improve user experience (only with your consent)

Legal Bases for Processing

Where data protection law (such as the GDPR) applies, we rely on the following legal bases to process your personal information:

• Consent: for analytics cookies and any marketing communications
• Contract or pre-contractual steps: when you contact us about, request, or use our services
• Legitimate interests: to secure our website, prevent abuse, and operate our business
• Legal obligation: where we are required to retain or disclose information by law

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We share information with trusted service providers who assist us in operating our website and conducting our business (see "Third-Party Services" below)
• Legal Requirements: We may disclose information if required by law or in response to valid legal requests
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred, subject to the commitments in this policy
• With Your Consent: We may share information with your explicit consent

Third-Party Services

We use the following third-party services to operate this website:

• Amazon Web Services (AWS SES): Messages submitted through our contact form are delivered to us as email via Amazon Simple Email Service. Your form details (name, email, company, phone, subject, and message) pass through AWS infrastructure for delivery.
• Google Analytics: Loaded only if you accept cookies via our consent banner. We enable IP anonymization, so your full IP address is not stored. Google may process this data on servers outside your country. See Google's Privacy Policy for details.
• Google Fonts: Our web fonts are served from Google's servers. When fonts load, your browser sends a standard request to Google that includes your IP address. Google states that these requests are not used for profiling or combined with other Google account data.

International Data Transfers

Some of our service providers (such as AWS and Google) may process data in countries other than your own, including the United States. Where required, these transfers rely on appropriate safeguards such as standard contractual clauses or applicable adequacy frameworks.

Data Retention

We keep personal information only as long as necessary for the purposes described in this policy:

• Contact inquiries: retained for as long as needed to respond and maintain our business correspondence, then deleted
• Assessment data: retained while needed to provide your assessment results and improve our tool
• Server logs: retained for a limited period for security and troubleshooting, then rotated

You may request deletion of your information at any time (see "Your Rights" below).

Data Security

As a cybersecurity company, we hold ourselves to high standards for protecting your data. We implement appropriate technical and organizational security measures — including encrypted connections (HTTPS/TLS), input validation, rate limiting, and access controls — to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access your personal information
• The right to correct inaccurate information
• The right to request deletion of your information
• The right to object to processing of your information
• The right to data portability
• The right to withdraw consent at any time
• The right to lodge a complaint with your local data protection authority

To exercise these rights, please contact us at info@nenurta.com. We will respond within the timeframe required by applicable law.

Cookies and Tracking Technologies

When you first visit our website, a consent banner asks whether you accept cookies. Analytics cookies are set only if you click Accept; if you decline, no analytics or tracking cookies are loaded, and the website remains fully functional.

If you accept, we use Google Analytics (with IP anonymization enabled) to understand website traffic and improve our services. To change your choice later, clear this site's data in your browser settings and the consent banner will appear again on your next visit. You can also instruct your browser to refuse all cookies.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

AI Assessment Tool

Our AI-powered cybersecurity assessment tool at nist.nenurta.com asks questions about your organization's security practices to generate an assessment aligned with recognized frameworks. Your responses are used to produce your assessment results and recommendations. We treat assessment responses as confidential business information and do not share them with third parties except as described in this policy. Please avoid entering sensitive details (such as credentials, system configurations, or personal data about individuals) that are not needed to answer the assessment questions.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Nenurta CyberTech
Email: info@nenurta.com
Website: www.nenurta.com