Last updated: April 30, 2021
Effective date: May 1st 2021
Your privacy is of paramount importance to us. This page informs you of the collection, use and disclosure of personal data at Social-Engineer, LLC.
Social-Engineer, LLC. (“Social-Engineer”, “we”) operates Social-Engineer.com. It is Social-Engineer’s policy to respect your privacy regarding any information we may collect while operating our website, products and services (“Services”).
We don’t ask you for personal information unless we truly need it.
We don’t share your personal information with anyone except to comply with the law, develop our products, or protect our rights.
We don’t store personal information on our servers unless required for the on-going operation of one of our services.
If you have questions about deleting or correcting your personal data, or limiting collection or use, please contact our team at [email protected].
WHAT INFORMATION WE COLLECT
Like most website operators, Social-Engineer collects non-personally-identifying information and “usage” data. Usage data includes the sort of information that web browsers and servers typically make available, such as the browser type, language preference, referring site, the date and time of each visitor request, and how long a visitor spends on each page. Social-Engineer’s purpose in collecting non-personally-identifying usage information is to better understand how Social-Engineer’s visitors use its websites.
In the course of marketing our Services, we will collect information on customers or potential customers in the course of doing business. This may include names, job titles and roles, current employers, employers’ addresses, as well as contact information such as email addresses or phone numbers. For example, if you reach out to us through our contact page, we will collect your name and email address and/or phone number.
While this is not common, there may be circumstances where we would have to retain evidence that would contain personally-identifying information from our customers in the course of delivering our Services. An example of this is when we have to respond to an incident or collect evidence of adhering to a compliance or regulatory standard.
HOW WE USE YOUR PERSONAL INFORMATION
Social-Engineer may collect statistics about the behavior of visitors to its websites. For instance, Social-Engineer may monitor common landing pages or pages related to our services to ensure good customer engagement. Social-Engineer may display this information publicly or provide it to others. However, Social-Engineer does not disclose personally-identifying information other than as described below.
FULFILLING OUR SERVICES
Social-Engineer discloses potentially personally-identifying and personally-identifying information only to those of its employees, contractors and affiliated organizations that (i) need to know that information in order to process it on Social-Engineer’s behalf or to provide services available at Social-Engineer’s websites, and (ii) that have agreed not to disclose it to others. For example, evidence containing personally-identifying information may be collected to provide expert advice around the scope of services for a customer.
Some of those employees, contractors and affiliated organizations may be located outside of your home country; by using Social-Engineer’s websites, you consent to the transfer of such information to them.
Social-Engineer will not rent or sell potentially personally-identifying and personally-identifying information to anyone. Other than to its employees, contractors and affiliated organizations, as described above, Social-Engineer discloses potentially personally-identifying and personally-identifying information only in response to a subpoena, court order or other governmental request, or when Social-Engineer believes in good faith that disclosure is reasonably necessary to protect the property or rights of Social-Engineer, third parties or the public at large.
If you are a registered user of a Social-Engineer website and have supplied your email address, Social-Engineer may occasionally send you an email to tell you about new features, solicit your feedback, or just keep you up to date with what’s going on with Social-Engineer and our services. We primarily use our various blogs to communicate this type of information, so we expect to keep this type of email to a minimum. If you send us a request (for example via a support email or via one of our feedback mechanisms), we reserve the right to publish it in order to help us clarify or respond to your request or to help us support other users.
YOUR CHOICES & OBLIGATIONS
RIGHTS TO ACCESS, CORRECT, OR DELETE YOUR INFORMATION, AND CLOSING YOUR ACCOUNT
You have a right to (1) access, modify, correct, or delete your personal information controlled by Social-Engineer regarding your profile, (2) change or remove your content, (3) limit the use and disclosure of your information, and (4) close your account. You can request your personal information that is not viewable on your profile or readily accessible to you (for example, your IP access logs) by emailing us at [email protected]. If you close your account(s), your information will generally be removed from the Service within one (1) week. We generally delete closed account information and will de-personalize any logs or other backup information through the deletion process within thirty (30) days of account closure, except as noted below.
OTHER IMPORTANT INFORMATION
If Social-Engineer, or substantially all of its assets, were acquired, or in the unlikely event that Social-Engineer goes out of business or enters bankruptcy, user information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of Social-Engineer may continue to use your personal information as set forth in this policy.
SECURITY AND BREACH NOTIFICATION
Social-Engineer is committed to the security of your information, and has in place physical, administrative and technical measures designed to prevent unauthorized access to that information. Social-Engineer security policies cover the management of security for its internal operations as well as the services and apply to all Social-Engineer employees.
Social-Engineer is also committed to reducing risks of human error, theft, fraud, and misuse of Social-Engineer facilities. Social-Engineer’s efforts include making personnel aware of security policies and training employees to implement security policies. Social-Engineer employees are required to maintain the confidentiality of services data. Employees’ obligations include written confidentiality agreements, regular training on information protection, and compliance with company policies concerning protection of confidential information.
Social-Engineer promptly evaluates and responds to incidents that create suspicion of unauthorized handling of services data. Social-Engineer Management is informed of such incidents and, depending on the nature of the activity, defines escalation paths and response teams to address the incidents. If Social-Engineer determines that your services data has been misappropriated (including by a Social-Engineer employee) or otherwise wrongly acquired by a third party, Social-Engineer will promptly report such misappropriation or acquisition to you.
CALIFORNIA SHINE THE LIGHT LAW AND THE CALIFORNIA CONSUMER PRIVACY ACT (CCPA)
California Civil Code Section 1798.83, known as the “Shine the Light” law, permits our customers who are California residents to request and obtain from us a list of what personal information (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year and the names and addresses of those third parties. Requests may be made only once a year and are free of charge. Under Section 1798.83, we currently do not share any personal information with third parties for their direct marketing purposes.
The California Consumer Privacy Act gives their citizens new rights as of January 1, 2020. And though Social-Engineer does not meet the thresholds for applicability, Social-Engineer does uphold the principles of the act.
CROSS BORDER TRANSFERS
The nature of Social-Engineer’s business is to lawfully protect the data subject’s vital interests. The European Union General Data Protection Regulation (GDPR) mentions IT security as a legitimate interest. Social-Engineer provides services that are designed to identify security issues. The information collected and generated by our services is often highly sensitive. Therefore to ensure the highest standards possible, Social-Engineer maintains GDPR compliance with both internal business processes and with respect to the services we perform for clients.
ATTN: Privacy Officer
3956 Town Center Blvd #171
Orlando FL 32837