LEGAL / PRIVACY POLICY

Privacy Policy

How we handle personal information collected through this website — what we collect, why, who processes it on our behalf, and the rights you have over it.

LAST UPDATED /

Who we are

This website, www.decurity.io, is operated by Decentralized Security LLC-FZ (trading as “Decurity”, “we”, “us” or “our”), a company registered in Dubai, United Arab Emirates. We are the controller of the personal information described in this policy.

For any privacy question, or to exercise the rights set out below, contact us at info@decurity.io.

What this policy covers

This policy covers personal information we collect through this website. It does not cover information we receive or generate in the course of a security engagement — audits, penetration tests, monitoring and advisory work are governed by the engagement agreement and any non-disclosure agreement signed with the client, which take precedence over this policy for that work.

Information we collect

We collect the following categories of information:

  • Information you give us. When you submit the contact or audit-request form, or email us directly, we receive the details you provide — typically your name, email address, company or project name, and the contents of your message.
  • Technical information collected automatically. Our servers and the services described below record standard request data: IP address, browser and device type, referring page, the pages you view, and the date and time of each request.
  • Cookies and similar technologies. Analytics and form cookies set by the third parties listed below. See Cookies and analytics.

We do not operate user accounts, take payments through this website, or ask for special categories of personal data. Please do not send us sensitive information through the contact form.

How we use your information

  • To respond to your enquiry, scope potential work and provide our services.
  • To operate, secure and improve this website, including diagnosing faults and preventing abuse.
  • To understand which pages and content are useful, in aggregate, through analytics.
  • To send you information you have asked for, and, where you have consented, occasional updates about our work. You can opt out at any time.
  • To comply with applicable law and to establish, exercise or defend legal claims.

We do not sell your personal information, and we do not use it for automated decision-making or profiling.

Where the EU or UK GDPR applies, we rely on: your consent (for non-essential cookies and marketing messages, which you may withdraw at any time); the necessity of processing for steps taken at your request before entering into a contract, or for the performance of a contract with you; our legitimate interests in operating, securing and improving the website and in responding to business enquiries; and compliance with our legal obligations. Where the UAE Personal Data Protection Law applies, we rely on the corresponding lawful bases.

Cookies and analytics

We use Google Tag Manager to load Google Analytics, which sets cookies to measure how visitors use the site. The audit-request form is embedded from HubSpot, which sets its own cookies to operate the form and to link a submission to the visit it came from. Fonts and some images are served from third-party content delivery networks, which receive your IP address as part of delivering those files.

You can block or delete cookies in your browser settings, and you can opt out of Google Analytics using Google’s browser add-on. Blocking cookies will not stop you reading the site.

Service providers

We share personal information only with providers that process it on our behalf, under contract, and only as needed to run the site and respond to you. These currently include HubSpot (customer relationship management and forms), Google (analytics, tag management and fonts), and our hosting and content-delivery providers.

We may also disclose information where we are required to by law, or where disclosure is necessary to protect our rights, our clients or the security of our systems.

International transfers

We are based in the United Arab Emirates and our providers operate internationally, so your information may be processed outside your country of residence, including in the United States and the European Economic Area. Where personal data protected by the EU or UK GDPR is transferred, we rely on the transfer mechanisms offered by those providers, such as the European Commission’s standard contractual clauses.

How long we keep information

We keep enquiry correspondence for as long as needed to deal with the enquiry and to maintain a record of our business relationship, and analytics data for the retention period configured in the analytics service. Where we are subject to a legal or accounting obligation to retain records, we keep them for the period that obligation requires. When information is no longer needed, we delete it or aggregate it.

How we protect information

Security is our profession, and we apply it to our own systems: the site is served over HTTPS, access to enquiry data is limited to the people who need it, and our providers are chosen partly on their security posture. No system is perfectly secure, and we cannot guarantee the security of information transmitted to us over the internet.

Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, to have it corrected or erased, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent you have given. You also have the right to complain to your local data-protection authority.

To make a request, email info@decurity.io. We will respond within the time allowed by applicable law, and we may need to verify your identity first.

Other websites

This site links to third-party websites, including audit reports and client repositories that we do not control. This policy does not apply to them; read their own privacy policies before providing information.

Children

This website is aimed at businesses and is not directed at children. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy as our practices or the law change. The current version is always published on this page, and the date at the top of this page shows when it last changed materially.

Contact

Decentralized Security LLC-FZ, Dubai, United Arab Emirates — info@decurity.io.