Privacy Policy for CyberShieldScan
Last updated: 2024-11-21
1. Information We Collect
To use our security scanner service, we collect the following data:
- Domain Name: The website address you submit for scanning.
- Email Address: For sending the scan results and any necessary follow-up communication.
2. Purpose of Data Collection
We collect this data for the following purposes:
- To analyze the security of the domain you submit.
- To send you a detailed report of our findings.
- To ensure compliance with legal obligations and prevent abuse of our services.
- Product Updates (Optional): If you opt in, to send you updates about our products, new features, or relevant security news.
3. Data Storage and Retention
All submitted data (domain names and email addresses) and generated reports are stored securely using industry-standard encryption. We automatically delete all submitted data and reports after [Insert Time Frame] to ensure data minimization and privacy.
4. Legal Basis for Processing
We process your personal data based on:
- Consent: By using our scanner, you consent to the processing of your domain name and email address for the purposes outlined in this policy.
- Legitimate Interest: To ensure the security and integrity of the scanned sites and to prevent misuse of our service.
5. Data Security
We implement technical and organizational measures to protect your personal data, including encryption of data in transit and at rest, access controls to limit who can view or modify the data, and regular audits to ensure compliance with GDPR standards.
6. Prevention of Abuse
Our scanner is open to everyone. However, to maintain the integrity of the service, we monitor activity and log IP addresses of users to detect potential misuse. If we find evidence of abuse, such as attempts to exploit vulnerabilities on websites without authorization, we reserve the right to block access to our service.
7. Your Rights
Under GDPR, you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Correct any inaccuracies in your data.
- Deletion: Request the deletion of your data before our standard retention period.
- Objection: Object to the processing of your data for legitimate interests.
To exercise these rights, please contact us at [Your Contact Email].