Privacy Policy

SPARTA DEFEND j.d.o.o. za usluge ("we", "us" or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our website spartadefend.com and use our endpoint detection and response (EDR) platform services.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2.1 Personal information

We may collect personally identifiable information that you voluntarily provide to us, including:

• Name and contact information (email address, phone number)
• Company name and job title
• Billing and payment information
• Account credentials and authentication data
• Communications with our support team

2.2 Technical and usage data

When you use our EDR platform, we automatically collect certain information:

• Endpoint system information (OS version, hardware specifications)
• Security event logs and threat intelligence data
• Network traffic metadata, not content
• Application usage patterns and performance metrics
• IP addresses and device identifiers
• Browser type and version
• Cookies and similar tracking technologies

2.3 Security telemetry

Our EDR platform collects security telemetry data necessary for threat detection, including process execution patterns, file hashes, registry modifications and behavioural indicators. This data is essential for providing our security services.

We use the collected information for the following purposes:

• Service delivery: to provide, maintain and improve our EDR platform
• Threat detection: to identify, analyse and respond to security threats
• Account management: to create and manage your account
• Customer support: to respond to your inquiries and provide technical assistance
• Billing and payments: to process transactions and send invoices
• Communications: to send service related announcements and security alerts
• Analytics: to understand usage patterns and improve our services
• Compliance: to meet legal and regulatory obligations
• Security: to protect against fraud, unauthorised access and other security issues

4.1 Third party service providers

We may share your information with trusted third party service providers who assist us in operating our platform, conducting business or servicing you. These providers include:

• Cloud infrastructure providers (AWS, Azure, Google Cloud)
• Payment processors
• Customer relationship management platforms
• Analytics and monitoring services
• Email and communication services

4.2 Threat intelligence sharing

We may share anonymised threat indicators, such as malware hashes, malicious IP addresses and attack patterns, with trusted security research organisations and threat intelligence platforms to improve collective cybersecurity defences. This data is always de-identified and cannot be traced back to your organisation.

4.3 Legal requirements

We may disclose your information when required by law, including:

• In response to valid legal process such as subpoenas and court orders
• To comply with applicable laws and regulations
• To protect our rights, property or safety
• To investigate fraud or security incidents
• With your consent or at your direction

4.4 Business transfers

In the event of a merger, acquisition, reorganisation or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change in ownership or control.

We implement industry standard security measures to protect your information:

• Encryption: data in transit uses TLS 1.3, data at rest uses AES-256 encryption
• Access controls: role based access controls and multi-factor authentication
• Network security: firewalls, intrusion detection systems and network segmentation
• Monitoring: continuous security monitoring and logging
• Incident response: established procedures for security incident handling
• Regular audits: periodic security assessments and penetration testing

However, no method of transmission over the internet or electronic storage is one hundred percent secure. While we strive to protect your information, we cannot guarantee absolute security.

We retain your information for as long as necessary to provide our services and fulfil the purposes outlined in this Privacy Policy:

• Account data: retained while your account is active and for 90 days after closure
• Security telemetry: retained for 180 days for threat analysis and compliance
• Billing records: retained for 7 years per regulatory requirements
• Support communications: retained for 3 years
• Anonymised analytics: retained indefinitely for service improvement

You may request deletion of your personal information, subject to certain exceptions required by law or legitimate business purposes.

Depending on your location, you may have the following rights:

• Access: request a copy of the personal information we hold about you
• Correction: request correction of inaccurate or incomplete information
• Deletion: request deletion of your personal information, the right to be forgotten
• Portability: request transfer of your data to another service provider
• Restriction: request limitation on how we process your information
• Objection: object to processing based on legitimate interests
• Withdraw consent: withdraw consent where processing is based on consent
• Opt out: opt out of marketing communications at any time

You also have the right to lodge a complaint with your local data protection authority if you believe your privacy rights have been violated.

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from your jurisdiction.

When we transfer data internationally, we implement appropriate safeguards, including:

• Standard Contractual Clauses approved by the European Commission
• Data Processing Agreements with third party processors
• Compliance with applicable data transfer frameworks
• Adequate security measures to protect data in transit and at rest

We use cookies and similar tracking technologies to:

• Essential cookies: required for basic site functionality and security
• Analytics cookies: help us understand how visitors use our website
• Preference cookies: remember your settings and preferences
• Marketing cookies: deliver relevant advertisements, with your consent

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of our platform.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared or sold
• Right to delete personal information held by us
• Right to opt out of the sale of personal information. We do not sell personal information
• Right to non-discrimination for exercising CCPA rights

For users in the European Economic Area, we comply with the General Data Protection Regulation:

• Legal basis: we process data based on contract performance, legal obligations, legitimate interests or consent
• Data subject rights: all rights listed in section 7 apply
• Data breach notification: we will notify you and relevant authorities within 72 hours of discovery

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory or operational reasons. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the last updated date
• Sending email notification for significant changes
• Requiring your acceptance for material changes

Your continued use of our services after changes are posted constitutes acceptance of the updated policy.