Who we are and what this covers
This policy is published by SecureX360, Inc. (“SecureX360”, “we”), a United States company, and covers the public website at securex360.com and its subdomains, including the blog. It does not cover the SecureX360 platform itself: customers using the product are covered by their agreement with us and its data processing terms.
We are the controller of the personal data described here. You can reach us about anything in this policy at privacy@securex360.com.
What we collect
We collect as little as the site needs to work and to improve. In practice that is three things.
- What you send us. If you use the contact form or email us: your name, work email, company if you give it, the topic you choose and your message. The form also records the page you sent it from.
- Analytics, only with your consent. If you allow analytics in the cookie plate, Google Analytics and PostHog record the pages you visit, how you move between them, your approximate location from your IP address, your browser and device type, and the site that referred you. PostHog may also record anonymized replays of sessions, with text you type in form fields masked. Until you choose, nothing is stored on your device and only aggregate, cookieless counts are recorded; if you decline, no analytics runs at all.
- Technical logs. Our hosting providers (Amazon Web Services and Cloudflare) record IP addresses, request timestamps and user-agent strings in short-lived logs to deliver the site, defend against abuse and diagnose faults.
We do not run advertising, do not build marketing profiles, do not buy data about you from anyone, and do not knowingly collect data from children under 16. The site has no accounts or logins.
Why we use it, and on what basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Answer your message and follow up on it | Contact form or email contents | Our legitimate interest in responding to you; pre-contract steps where you ask about the product |
| Understand which pages help and which do not | Analytics data | Your consent, which you can withdraw at any time |
| Deliver the site securely and keep it available | Technical logs | Our legitimate interest in running a secure service |
| Meet legal obligations and defend legal claims | Any of the above, if required | Legal obligation; legitimate interest |
Where consent is the basis, withdrawing it does not affect anything done before you withdrew it.
Cookies and similar storage
The site sets no cookies until you make a choice in the cookie plate. These are the only ones it can set:
| Set by | Name | Purpose | Lasts |
|---|---|---|---|
| SecureX360 | sx360-consent | Stores your cookie preferences | 12 months |
| Google Analytics | _ga, _ga_* | Distinguishes visitors and sessions | 2 years |
| PostHog | ph_* | Product analytics and anonymized session replay | 1 year |
Your choice is stored on your device for twelve months (or until you change it in Cookie preferences in the footer). If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as a refusal and do not ask.
Who sees your data
We do not sell personal data and do not share it for anyone else's advertising. The companies that process data on our behalf, under contracts that limit what they may do with it, are:
| Provider | What for | Where |
|---|---|---|
| Amazon Web Services | Hosting the site, the content system and the contact form; email delivery | United States |
| Cloudflare | DNS, network security, and protecting our internal systems | Global network; US company |
| Google (Google Analytics) | Website analytics, only with consent | United States |
| PostHog | Website analytics and session replay, only with consent | United States |
| GitHub | Building and publishing the site | United States |
We may also disclose data where the law requires it, to protect our rights or someone's safety, or as part of a merger or sale of the company, in which case this policy continues to apply to the data.
International transfers
We are based in the United States and our providers process data there. If you are in the European Economic Area, the United Kingdom or Switzerland, your data is transferred under the European Commission's Standard Contractual Clauses or an adequacy decision, including the EU-US Data Privacy Framework where a provider is certified under it.
How long we keep it
- Contact messages: as long as the conversation is live, and up to 24 months afterward so we can pick it up if you come back.
- Analytics: Google Analytics data for 14 months; PostHog events and replays for 12 months.
- Technical logs: up to 30 days.
- Your cookie choice: 12 months on your own device.
Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, to correct or delete it, to receive a copy in a portable form, to object to or restrict certain processing, and to withdraw consent. Residents of California and several other US states also have the right to know what we collect and to opt out of “sale” or “sharing” of personal data; we do neither, and we honor Global Privacy Control signals as an opt-out regardless.
To exercise any of these, email privacy@securex360.com. We will answer within 30 days and will not treat you differently for asking. If you are in the EEA or UK and believe we have not handled your data properly, you can complain to your local supervisory authority.
Security
The public site is served as static files from a content delivery network, with no server to compromise and no database of visitors. Our content system and the contact form run on isolated infrastructure reachable only through authenticated access, with secrets kept in a managed vault and all traffic encrypted in transit. We are a security company and we hold ourselves to the standards we test others against; if you believe you have found a vulnerability in anything we run, write to security@securex360.com or see our security.txt.
Changes to this policy
When this policy changes in a way that matters, the date at the top changes and, if the change affects cookies or analytics, the cookie plate asks for your choice again. The current version is always at this address.
Contact
SecureX360, Inc. · privacy@securex360.com. For anything else, the contact page reaches a person.