Privacy Policy

We collect information you provide directly — such as your name, business email, company, role, and the message you send through our contact, careers, or assessment forms.

When you visit our website, we also collect limited technical data such as IP address, browser type, device information, referring URL, and pages viewed. This data is used only to secure and improve the site.

During security engagements, we may process data provided by you strictly under a signed engagement agreement and scoped Rules of Engagement.

We use information to:

• Respond to inquiries, scoping requests, and proposals.
• Deliver, manage, and support the security services you engage us for.
• Send operational communications about active engagements.
• Comply with legal, tax, and regulatory obligations.
• Maintain, secure, and improve our website and services.

We process personal data on the basis of your consent, our legitimate interests in running our business, the performance of a contract with you or your organization, and compliance with applicable law.

We do not sell personal data. We share information only with vetted service providers (hosting, email, analytics, engagement collaboration platforms) bound by confidentiality and data-protection obligations, or when required by law.

Engagement findings and sensitive artifacts are shared only with the client point-of-contact authorized in the engagement agreement.

We retain personal and engagement data only as long as necessary to deliver the service, meet legal obligations, and support post-engagement queries. Sensitive engagement artifacts are securely destroyed on the schedule defined in your engagement contract.

We apply administrative, technical, and physical safeguards appropriate to the sensitivity of the data we process, including encryption in transit, access controls, least-privilege principles, audit logging, and secure storage of engagement material.

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data, and to object to certain uses. To exercise these rights, contact us at privacy@hacfy.com.

For any privacy questions or requests, reach us at privacy@hacfy.com.