Privacy Policy at
Cystemic Security Inc.

Cystemic Security collects personal data about individuals when they specifically and knowingly provide this information for purposes disclosed or otherwise known to them at the time they provide their information or for the wider purposes set out below. This includes voluntary submission of an email address and sending Cystemic Security an email which includes the individual's personal information.

Providing personal information that we request is optional and disclosures are made voluntarily.

In addition, when you interact with the Site, our servers may keep an activity log that does not identify you individually (“Non-Personal Information”). Generally, we collect the following categories of Non-Personal Information:

• Demographic data such as age, gender, and five-digit zip code as part of collecting personal information;

• Device information about your computer, mobile device, or other device that you use to access the Site. This information may include IP address, geolocation information, unique device identifiers, browser type, browser language, and other transactional information;

• Usage information about your use of the Site. This information includes a reading history of the pages you view. We use this information to provide you with a more customized experience on the Site;

• Additional “traffic data” such as time of access, date of access, software crash reports, session identification number, access times, and referring website addresses; and

• Search terms and search results.

Cystemic Security may use the the personal data collected or provided for the following purposes:

• Responding to contact requests and requests for information;

• Providing products and services, running day-to-day business operations, and otherwise operating our business;

• Processing employment applications, evaluating employment qualifications, and contacting individuals regarding employment opportunities where appropriate;

• Preparing and submitting bids and proposals to customers, including government and private sector entities;

• Managing our relationship with you and the organization you represent;

• Protecting Cystemic Security, its employees, and its business partners against cybersecurity and other security events, espionage, fraud, and other unlawful activity, and claims and other liabilities;

• Protecting Cystemic Security’s personnel and property;

• Exercising Cystemic Security’s legal rights; and

• Complying with and enforcing applicable legal requirements, industry standards, and Cystemic Security’s policies.

Except in rare circumstances where Cystemic Security’s is required by law to disclose or otherwise process your personal information, Cystemic Security will only process your personal information as necessary for the purposes explained to you when the information is collected or otherwise set out in this policy.

Cystemic Security does not sell, lease, rent, or license the personal information it collects to third parties.

Cystemic Security may disclose personal and information to third parties in the following circumstances:

• To perform services for customers (for example, with a prime contractor for which Cystemic Security is a subcontractor);

• To third-party service providers to facilitate the services they provide (for example, third-party payroll processors);

• To submit bids for proposals from customers;

• To protect Cystemic Security’s rights, privacy, safety, or property, and that of its customers, employees, its affiliates, users, and others;

• To support an investigation of cybersecurity and other security events, espionage, fraud, and other illegal activity;

• When requested by law enforcement or other government authorities;

• When required by law, regulation, court order, or other legal process; and

• For any other legal purpose.

Cystemic Security requires all third-party business partners to which it provides personal information to protect and maintain that information in confidence, and not to license, sell or otherwise transfer such information except to or as directed by Cystemic Security.

Cystemic Security implements commercially reasonable and appropriate technical, physical, and administrative measures to prevent the loss of, misuse of, disclosure of, alteration of, destruction of, and unauthorized access to the personal information you provide. However, Cystemic Security cannot eliminate all security risks associated with the electronic transfer and storage of information. In the event that any of your personal data stored and managed by Cystemic Security has been compromised, Cystemic Security will contact you in a timely manner.

Cystemic Security is headquartered in the United States and its systems are based in the United States. Any information you provide through the Site and our online services will be transferred out of your country and to the United States. By providing personal information through the Site and our online services, you expressly consent to the transfer of this information to the United States and other countries. If you do not want your personal information transferred to the United States, do not use the Site and our online services or provide personal information through them.

Cystemic Security or its service providers may also transfer your personal information from the European Economic Area (EEA) to other countries, some of which have not yet been determined by the European Commission to offer an adequate level of data protection according to EEA standards. For transfers to countries not requiring a level of data protection that meets EEA standards, Cystemic Security uses a variety of legal mechanisms to protect your personal information, including contractual provisions and written assurances from service providers.

The Site and online services are not directed to or intended for children under the age of 13. Cystemic Security does not knowingly solicit, store, or use personal information of children under the age of 13. Children under the age of 13 should not register for services or provide any personal information, including name, address, telephone number or email address to Cystemic Security through the Sites or our online services. If Cystemic Security becomes aware it has inadvertently collected Personal Information of children under the age of 13, Cystemic Security will delete such information, promptly.

The Site contains links to websites operated by third parties (such as social media accounts, news sites, recruiting sites, and ecommerce accounts) to provide users additional information. Cystemic Security does not control these third-party sites and services and is not responsible for the content of these sites or the products, services, or actions of the third parties operating them. The privacy policies of these third-party sites and services govern your use of and sharing of data with them and Cystemic Security does not control and is not responsible for these privacy policies. You are strongly recommended to review the privacy policies of these websites.

Cystemic Security reserves the right to amend this Privacy Policy at any time, for any reason, without notice, other than posting of the amended Privacy Policy on this Site. Changes are effective on the date Cystemic Security posts the revised Privacy Policy to the Site and supersede all previous versions of the Privacy Policy.

This Privacy Policy was last updated in September 2024.

If you have questions about Cystemic Security’s Privacy Policy or wish to access or amend your information, please contact us at: contact@cystemicsecurity.com