Privacy Policy

Last Updated: September 2026

Introduction

Nenurta CyberTech ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with our AI-powered assessment tools.

This policy covers our website at nenurta.com, the AI chat assistant on our pages, and our AI-powered security assessment tool.

Nenurta CyberTech is the data controller for the information described here. Our contact details are in the "Contact Us" section at the end of this policy.

Information We Collect

Information You Provide

We collect information that you voluntarily provide to us when you:

  • Submit our contact form or email us directly
  • Answer questions in, or chat with, our AI-powered assessment tool
  • Type a message into the AI chat assistant available on our website
  • Request a consultation or service

Depending on how you interact with us, this information may include:

  • Your name, email address, phone number, and company name
  • The subject and content of your message
  • Business information and security assessment responses you enter into our assessment tool
  • The content of messages you send to our AI chat assistant
  • Any other information you choose to provide

Automatically Collected Information

When you visit our website, some information is collected automatically, and some is collected by our analytics service only if you agree to it:

  • Your IP address
  • The type of browser you use
  • Pages you visit and time spent on pages
  • The website that referred you to us
  • Date and time of your visit

Like most websites, we keep records of visits to our website for security and troubleshooting. These include IP addresses, the pages requested, browser details, and times. When you send our contact form, we also record your email address so we can fix any problems delivering your message. See "Data Retention" below for how long we keep these records.

Information Stored on Your Device

We keep a small amount of information in your browser, on your own device:

  • Your choice on our cookie banner (accepted or declined)
  • A counter that limits how often the contact form can be sent, to prevent abuse
  • If you use our assessment tool, information that lets it recognise your conversation when you return, and your display preference

Your cookie choice and the contact form counter stay on your device and are not sent to us. The assessment tool uses its information only to keep your messages together as one conversation; it does not contain your name or email address. You can clear all of this at any time in your browser's settings.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Respond to your inquiries and provide customer support
  • Generate cybersecurity assessments and recommendations
  • Send you updates and marketing communications (only with your consent, and you may opt out at any time)
  • Protect our website and services against abuse, spam, and security threats
  • Comply with legal obligations and protect our rights
  • Analyze website usage and improve user experience (only with your consent)

Legal Bases for Processing

Where data protection law (such as the GDPR) applies, we rely on the following legal bases to process your personal information:

  • Consent: for analytics cookies and any marketing communications
  • Contract or pre-contractual steps: when you contact us about, request, or use our services
  • Legitimate interests: to secure our website, prevent abuse, and operate our business
  • Legal obligation: where we are required to retain or disclose information by law

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • Service Providers: We share information with trusted service providers who help us operate our website and deliver our services (see "Service Providers" below)
  • Legal Requirements: We may disclose information if required by law or in response to valid legal requests
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred, subject to the commitments in this policy
  • With Your Consent: We may share information with your explicit consent

Service Providers

We work with service providers who help us deliver our website and services. They may use your information only to provide those services to us, and must keep it secure and confidential. We use them for:

  • Email delivery: so that messages you send through our contact form reach us
  • Our AI chat assistant: to answer the questions you type into it. The chat assistant appears only if you accept cookies; if you decline, it is not loaded. Please do not enter confidential business details, passwords, or personal information about other people into the chat.
  • Our AI assessment tool: to run your assessment, generate your results and recommendations, and keep your conversation so that you can return to it. Your assessment responses are not used to train AI systems.
  • Website analytics: to understand how visitors use our website, only if you accept cookies. It is set up so that your full IP address is not stored.
  • Website delivery: to display parts of our website and assessment tool, such as fonts

International Data Transfers

Some of our service providers may process information in countries other than your own, including the United States. Where required, these transfers are protected by appropriate legal safeguards.

Data Retention

We keep personal information only as long as necessary for the purposes described in this policy:

  • Contact inquiries: retained for up to 24 months from our last correspondence with you, so that we can maintain continuity on an ongoing enquiry or engagement, then deleted
  • Assessment tool conversations: kept so that you can return to them, and deleted when you ask us (see "AI Assessment Tool" below)
  • Website and security records: kept for 90 days for security and troubleshooting, then deleted
  • Analytics data: kept for 14 months, then deleted

We may keep information for longer where we are required to by law, or where it is needed to establish, exercise, or defend a legal claim.

You may request deletion of your information at any time (see "Your Rights" below).

Data Security

As a cybersecurity company, we hold ourselves to high standards for protecting your data. We use appropriate technical and organizational safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of sending or storing information online is completely secure, and we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

  • The right to access your personal information
  • The right to correct inaccurate information
  • The right to request deletion of your information
  • The right to object to processing of your information
  • The right to data portability
  • The right to withdraw consent at any time
  • The right to lodge a complaint with your local data protection authority

To exercise these rights, please contact us at info@nenurta.com. We will respond within the timeframe required by applicable law. We do not charge a fee for exercising these rights, and we will not discriminate against you for doing so.

If you are in Canada

We are based in Vancouver, British Columbia, and our handling of personal information is subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA). You have the right to access and correct your personal information, and to complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.

If you are in the European Economic Area or the United Kingdom

You may lodge a complaint with your national data protection authority. See "Legal Bases for Processing" above for the grounds we rely on.

If you are a California resident

Under the California Consumer Privacy Act, as amended, you have the right to know what personal information we collect and how we use and disclose it, to request its deletion or correction, and to opt out of its sale or sharing. We do not sell or share personal information, and we have not done so in the preceding 12 months. We also do not use or disclose sensitive personal information for purposes beyond those permitted without a right to limit. You may use an authorized agent to submit a request on your behalf.

Cookies and Tracking Technologies

When you first visit our website, a banner asks whether you accept cookies. Two things depend on that choice, and both load only if you click Accept:

  • Website analytics, which help us understand how visitors use our website and improve our services
  • Our AI chat assistant

If you decline, neither is loaded, no analytics or tracking cookies are set, and the website still works fully. Your choice is saved in your browser, not in a cookie.

You can change your choice at any time using the button below, or by instructing your browser to refuse all cookies.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

AI Assessment Tool

Our AI-powered cybersecurity assessment tool asks you questions about your organization's security practices in a conversation, and gives you a baseline of your security posture with prioritized guidance aligned with recognized frameworks such as the NIST Cybersecurity Framework.

No account required

The tool does not ask you to register or sign in, and you do not need to give your name or contact details to use it. Your browser remembers your conversation so that you can continue it if you return. Anyone using the same browser could see it, so if you use a shared device, clear your browser data when you are done.

Your assessment responses

Your responses are used only to produce your assessment results and recommendations. We treat them as confidential business information and share them only with the service providers that help us deliver the tool, as described under "Service Providers" above.

Please avoid entering sensitive details (such as passwords, details of your systems, or personal information about other people) that are not needed to answer the assessment questions. Because the tool has no accounts, do not enter your own personal details unless you are comfortable with them being kept with the conversation.

Deleting your conversation

You can ask us to delete your assessment conversation at any time by emailing info@nenurta.com. Because the tool does not use accounts, please include the approximate date and time of your conversation and any details that will help us find it. Clearing your browser data stops your browser from reopening the conversation, but does not delete it; ask us to do that.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Nenurta CyberTech (data controller)
Vancouver, British Columbia, Canada
Email: info@nenurta.com
Website: www.nenurta.com