Privacy Policy

Securobe ("we," "our," or "us") is a cybersecurity services company registered and operating in Pakistan. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website at securobe.com, inquire about our services, or engage us as a client.

Our commitment: As a cybersecurity company, data protection is not just a legal obligation — it is central to everything we do. We treat your personal information with the same rigor we apply to protecting our clients' systems.

By using our website or services, you agree to the practices described in this policy.

Information you provide

• Name, email address, phone number, and company name when you contact us or request a demo
• Job title and industry sector for service scoping purposes
• Details about your IT environment shared during security assessments or consultations
• Payment and billing information for contracted services
• Communications including emails, support requests, and consultation notes

Information collected automatically

• IP address, browser type, operating system, and device identifiers
• Pages visited, time spent, and navigation paths on our website
• Referring website and search terms used to find us
• Cookies and similar tracking technologies (see Section 8)

Information from third parties

• Business contact information from professional networks or referral partners
• Threat intelligence data relevant to your organisation (collected only with consent)

We use your information only for legitimate business purposes, including:

• Responding to inquiries and delivering requested services
• Conducting security assessments, penetration testing, and managed security operations
• Sending service-related communications, reports, and alerts
• Improving our website, services, and internal processes
• Complying with legal obligations and regulatory requirements
• Sending marketing communications about our services — only where you have consented or have an existing business relationship with us
• Detecting and preventing fraud, abuse, or security incidents

We will never sell your personal data to third parties or use it for purposes unrelated to the services you have engaged us for.

We do not sell, rent, or trade personal information. We may share data in the following limited circumstances:

Service providers

Trusted third-party vendors who assist us in delivering services (e.g. cloud infrastructure providers, communication platforms) under strict data processing agreements.

Legal requirements

When required by applicable law, court order, or government authority in Pakistan or internationally, subject to our legal obligations.

Business transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred subject to equivalent privacy protections.

With your consent

In any other circumstance, only with your explicit written consent.

We implement industry-leading security measures to protect your data, consistent with the services we deliver to our clients:

• AES-256 encryption for data at rest; TLS 1.3 for data in transit
• Role-based access controls and least-privilege principles
• Regular internal security audits and vulnerability assessments
• Multi-factor authentication on all internal systems
• Security awareness training for all staff handling personal data
• Incident response procedures with notification protocols

Breach notification: In the event of a data breach affecting your personal information, we will notify you and relevant authorities in accordance with applicable law, without undue delay.

We retain your personal data only for as long as necessary for the purposes set out in this policy, or as required by law.

Category	Retention
Website inquiries	2 years from last contact
Client engagement records	7 years (legal requirement)
Security assessment reports	Per contractual agreement
Website analytics	13 months

When data is no longer required, it is securely deleted or anonymised.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access

Request a copy of the personal data we hold about you

Rectification

Request correction of inaccurate or incomplete data

Erasure

Request deletion of your data where there is no legitimate reason for retention

Restriction

Request that we limit how we process your data

Portability

Receive your data in a structured, commonly used format

Objection

Object to processing based on legitimate interests or for direct marketing

Withdraw consent

Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at privacy@securobe.com. We will respond within 30 days.

We use cookies and similar technologies on our website for the following purposes:

• Essential cookies: Required for the website to function correctly
• Analytics cookies: To understand how visitors interact with our site (anonymised)
• Preference cookies: To remember your settings and improve your experience

We do not use advertising or tracking cookies. You can manage cookie preferences through your browser settings at any time. Disabling certain cookies may affect website functionality.

Securobe is based in Pakistan. When we process data on behalf of international clients, or use cloud infrastructure outside Pakistan, we ensure that appropriate safeguards are in place — including contractual protections aligned with internationally recognised standards such as GDPR and ISO 27001.

By using our services, you acknowledge that your data may be transferred to and processed in countries outside your own, subject to equivalent protections.

Our services are directed exclusively at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time to reflect changes in law, our practices, or our services. We will notify you of material changes by updating the "Last updated" date at the top of this page and, where appropriate, by email.

Continued use of our website or services after changes take effect constitutes acceptance of the updated policy.