Privacy Policy

1. Introduction

FaceSec ("we", "our", or "us") operates this website. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our site or submit a contact form. We are committed to protecting your privacy in compliance with applicable data protection laws.

2. Information We Collect

We may collect the following types of information:

• Contact form data: Name, email address, company name, phone number, and any message or preferences you provide when reaching out to us.
• Usage data: Information about how you use our website, such as pages visited, time spent, and referring URLs, collected via analytics tools.
• Device and browser data: IP address, browser type, operating system, and similar technical data used for security and analytics.
• Cookies and similar technologies: We may use cookies, localStorage, or similar technologies for security (e.g., anti-spam verification) and analytics.

We do not collect biometric data through this website. Our biometric testing services are performed under separate agreements with our enterprise clients.

3. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and process your contact form submissions.
• Provide and improve our services, including audits and consultations.
• Send you relevant communications about our services (e.g., follow-up emails, newsletters) if you have opted in or we have a legitimate business interest.
• Analyze site usage and improve our website experience.
• Protect against fraud, abuse, and security threats (e.g., spam, bots).
• Comply with legal obligations and enforce our terms.

4. Legal Basis for Processing (GDPR)

Where applicable under the GDPR, we process your data based on: (a) your consent when you submit a form or opt in to communications; (b) our legitimate interests in operating our business, responding to inquiries, and improving our services; and (c) compliance with legal obligations. You may withdraw consent or object to certain processing where the law allows.

5. Third-Party Services

We use trusted third parties to operate our website and services:

• Email delivery: Emails sent in response to your inquiries may be processed by email service providers (e.g., Resend).
• Analytics: We may use Google Analytics or similar tools to understand site usage. These services may set cookies and collect anonymized or pseudonymized data.
• Security & anti-spam: We use Cloudflare Turnstile or similar services to verify that form submissions are from humans and to prevent abuse.

These providers may process your data in accordance with their own privacy policies. We select vendors that commit to appropriate data protection standards.

6. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes described in this policy, or as required by law. Contact form data is typically retained for the duration of our business relationship and for a reasonable period thereafter for legal and operational purposes (e.g., 2–5 years). Analytics data may be retained in aggregated or anonymized form for longer periods.

7. Your Rights

Depending on your location, you may have the right to:

• Access and receive a copy of your personal data.
• Correct or update inaccurate data.
• Request deletion of your data.
• Restrict or object to certain processing.
• Data portability (where technically feasible).
• Withdraw consent (where processing is based on consent).
• Lodge a complaint with a supervisory authority.

To exercise these rights, contact us at hello@facesec.io

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or alteration. This includes secure transmission (HTTPS), access controls, and secure storage. However, no method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. International Transfers

Your data may be transferred to and processed in countries outside your residence. Where required, we ensure adequate safeguards (e.g., standard contractual clauses, adequacy decisions) are in place to protect your data in accordance with applicable law.

10. Children

Our website is not intended for minors under 16 (or the applicable age in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the revised policy.

12. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights, contact us at:

FaceSec
Email: hello@facesec.io