Privacy Policy

1. Introduction

Necurity Solutions Network Security Private Limited ("Necurity", "we", "us") respects your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it. This policy applies to our website (www.necurity.com), the Necurity 360° Client Portal, and our cybersecurity service engagements.

2. Information We Collect

2.1 Information you provide

• Contact details — name, email, phone number, company name, job title — when you submit an enquiry, request a demo, or sign a contract.
• Account credentials — email address and securely hashed password for client portal access.
• Engagement data — assets, configurations, findings, and other technical information shared with us under signed scope.
• Communications — emails, support tickets, and meeting notes you exchange with our team.

2.2 Information collected automatically

• Usage data — pages visited, actions performed in the client portal (audit-logged for security).
• Device data — IP address, browser type, operating system, time zone.
• Cookies — strictly necessary cookies for authentication and session management. We do not use third-party advertising cookies.

3. How We Use Your Information

We use your data for the following lawful purposes:

• Delivering the cybersecurity services you've contracted us for
• Providing access to the Necurity 360° Client Portal
• Communicating about your engagement, deliverables, and notifications
• Billing, invoicing, and contract management
• Improving our services and the portal
• Security monitoring of our own systems (audit logs, anomaly detection)
• Compliance with legal and regulatory obligations

We do not sell your personal data, share it with advertisers, or use it for purposes unrelated to your engagement with us.

4. Legal Basis for Processing

We process your personal data on one or more of the following legal bases:

• Contract — to perform the engagement we have with you
• Legitimate interests — to operate, secure, and improve our business
• Legal obligation — to comply with applicable law
• Consent — where required for marketing communications (which you may withdraw at any time)

5. Data Storage & Security

Personal data is stored in regional cloud zones with appropriate technical and organisational measures, including:

• Industry-standard transport encryption (TLS)
• Encryption at rest for sensitive data
• Strong, salted password hashing for portal credentials
• Multi-factor authentication on portal sign-in
• Rate-limited authentication endpoints
• Audit-logged access on every privileged action
• Multi-tenant isolation at the database query layer
• Point-in-time backups with restore testing
• Background-checked personnel with NDAs in place

Indian clients can opt for India-only storage as part of contract terms. We honor regional data-residency requirements where contractually agreed.

6. Data Sharing

We share personal data only as follows:

• Sub-processors — vetted infrastructure providers (cloud hosting, transactional email delivery). A current list is available on request.
• Legal & regulatory — when required by law, court order, or to defend our legal rights.
• Business transfers — in the event of a merger or acquisition, with continued protection commitments.

We do not sell, rent, or trade personal data.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Engagement data is retained for the duration of the contract plus a defined period agreed in the SoW. Audit logs are retained per our retention policy and contractual obligations.

At the end of an engagement, we honor right-to-erasure on request and provide written confirmation of deletion.

8. Your Rights

Subject to applicable law (including GDPR and India's DPDP Act), you have the following rights:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion ("right to be forgotten")
• Restriction — limit processing in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — at any time, where consent is the legal basis

To exercise any of these rights, email privacy@necurity.com. We respond within 30 days.

9. International Transfers

Where personal data is transferred outside your country of residence, we apply appropriate safeguards (Standard Contractual Clauses or equivalent) to ensure your data continues to be protected.

10. Children's Privacy

Our services are intended for business use by adults. We do not knowingly collect personal data from children under the age of 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Cookies

Our website uses strictly necessary cookies for site functionality and authentication. We do not use advertising or third-party tracking cookies. Most browsers allow you to control cookies through their settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated to active clients in writing. Continued use of our services constitutes acceptance of the revised policy.

13. Contact & Grievance Officer

For questions about this Privacy Policy or to exercise your rights, contact our Privacy Officer:

Privacy & Grievance Officer
Necurity Solutions Network Security Private Limited
Block 3, II Floor, Equinox Managed Workspaces,
6/13 North Ave, Kesavaperumalpuram,
Raja Annamalaipuram, Chennai 600028, Tamil Nadu, India
Phone: +91 8939 056 056
Email: privacy@necurity.com