Privacy Policy

1. Scope of this policy

This Privacy Policy explains how BurgSec (“BurgSec”, “we”, “us”, or “our”) handles information in connection with this website.

It applies only to this website. It does not govern data handled during a paid security engagement — testing scope, findings, evidence, credentials, and any client systems or data are handled exclusively under the separate written agreement and non-disclosure terms entered into for that engagement, which take precedence over this policy.

2. Information we collect

This is a static marketing website. We keep data collection to a minimum and do not operate web forms or accounts on it.

• Information you choose to send us. If you email us at the address below, we receive the contents of your message and any details you include, such as your name, organisation, and the reason for contacting us.
• Basic technical data. Like most websites, our hosting infrastructure may automatically record limited technical information such as IP address, browser type, and the pages requested. This is used for security, reliability, and abuse prevention.
• Cookies. This website does not set advertising or cross-site tracking cookies. Any cookies used are strictly necessary for the site to function.

3. How we use information

We use the limited information described above only to:

• respond to enquiries and communicate with you about a potential or existing engagement;
• operate, secure, and maintain the website;
• comply with applicable legal obligations.

4. How we share information

We do not sell or rent your information. We do not share it with third parties for their own marketing.

We may share information with service providers who help us operate the website or email (for example, hosting and email providers), strictly to perform those services on our behalf. We may also disclose information where we are required to do so by applicable law or valid legal process.

5. Data retention

We keep enquiry correspondence only for as long as needed to respond and to maintain a reasonable record of our communications, after which it is deleted or anonymised. You may ask us to delete your correspondence at any time using the contact details below.

6. Security

We take reasonable technical and organisational measures intended to protect information from unauthorised access, loss, or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please do not send sensitive technical details, credentials, or confidential material by email before an engagement and its confidentiality terms are in place.

7. Your choices

You may contact us to ask what correspondence we hold about you, to request a correction, or to request deletion. We will respond to reasonable requests in line with applicable law. To exercise these choices, email us at the address below.

8. Third-party links

This website may link to third-party sites or resources. We are not responsible for the privacy practices or content of those sites, and we encourage you to review their policies.

9. Children

This website and our services are intended for businesses and professionals. We do not knowingly collect information from children.

10. Location

BurgSec operates from Pakistan. If you contact us from another jurisdiction, your information may be processed in Pakistan.

11. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “last updated” date above. Continued use of the website after a change indicates acceptance of the updated policy.