Privacy Policy

Welcome to Art Of Cyber ("Company", "we", "us", "our"). We are committed to protecting your privacy and ensuring you have a positive experience on our website. This Privacy Policy explains our practices regarding data collection, processing, and protection in compliance with the Personal Information Protection Law, 1981, the Privacy Protection Regulations (Security of Information and Encryption), 2007, GDPR (for EU residents), and other applicable data protection laws.

We collect personal data only when there is a lawful basis for processing:

1. **Information You Provide**: Name, email, phone, company, job title, messages - collected via contact forms, assessments, and service requests

2. **Information Collected Automatically**: Browser type, IP address, pages visited, time/date of access, referrer URL - collected via cookies and similar tracking technologies

3. **Legal Basis**: Your explicit consent, contractual necessity for services, our legitimate interests in business operations and marketing

We do not process sensitive personal data (health, religion, political affiliation) unless explicitly required by law or with your prior consent.

We process your information for:

- Service provision and customer support
- Security assessments and vulnerability analysis
- Sending service communications, updates, and security alerts
- Marketing communications (with prior consent - opt-in basis)
- Compliance with legal obligations and law enforcement requests
- Fraud prevention and abuse monitoring
- Statistical analysis and service improvement

Marketing emails are sent only with your explicit opt-in consent and include an unsubscribe option.

We share personal data only with:

- **Service Providers**: Email service providers (Mailjet, Resend), hosting providers, analytics providers - all bound by data processing agreements
- **Legal Requirements**: When required by Israeli law, court order, or government authority
- **Business Transfers**: In case of merger/acquisition, data may be transferred as part of business assets

We do NOT sell, rent, or lease personal information to third parties. International transfers (if any) comply with relevant data protection standards.

Our website uses cookies for:

- **Essential**: Session management and security
- **Analytics**: Google Analytics (anonymized)
- **Functional**: Remembering language and user preferences

You have the right to:
- Accept or reject non-essential cookies
- Delete cookies via browser settings
- Disable tracking via browser "Do Not Track" settings

Rejecting non-essential cookies may limit some functionality but does not restrict core service access.

We implement:

- **Technical**: SSL/TLS encryption (HTTPS), firewalls, intrusion detection, regular security audits
- **Administrative**: Access controls, employee data protection training, confidentiality agreements
- **Physical**: Secure data centers with restricted access

While we maintain industry-standard security measures, no system is 100% secure. We cannot guarantee absolute security but commit to prompt breach notification as required by law.

You have the right to:

- **Access**: Request what personal data we hold about you
- **Correction**: Update or correct inaccurate information
- **Deletion**: Request erasure ("right to be forgotten") - subject to legal retention requirements
- **Portability**: Receive your data in structured format
- **Objection**: Opt-out of marketing communications and certain processing
- **Withdraw Consent**: Revoke consent at any time (no retroactive effect)

To exercise these rights, contact: boris@artofcyber.co.il with subject line "Data Subject Request". We will respond within 30 days.

We may update this Privacy Policy to reflect legal changes, technology updates, or business practices. Significant changes will be notified via:

- Email notification (if material privacy impact)
- Website banner notification
- Updated "Last Updated" date

Continued use of our website constitutes acceptance of updated terms. Review this policy regularly for changes.

For privacy inquiries, data subject requests, or complaints:

**Art Of Cyber Ltd.**
Email: boris@artofcyber.co.il
Address: Tel Aviv, Israel

**Response Time**: 30 days for formal data subject requests

If you believe we have violated your privacy rights, you have the right to lodge a complaint with the Israeli Privacy Protection Authority or your relevant data protection authority.