Privacy Policy

1. Personal data we collect

We collect personal data you give us directly, for example when you complete the contact form, write to us by email, sign a contract with us or apply for a position. This typically includes your name, work email address, organisation, role and the content of your message.

We also collect limited technical data automatically when you visit our websites: IP address, browser type, device type, pages visited and the time of the visit. We use this for security, to diagnose problems and to understand how the site is used.

Our websites are not directed at children under 13 and we do not knowingly collect their data.

2. Cookies and analytics

Our websites use strictly necessary cookies, which are required for the site to function, and, with your consent, performance cookies that let us count visits and understand traffic sources through tools such as Google Analytics and Microsoft Clarity. Performance data is aggregated and does not identify you.

You can refuse or withdraw consent for performance cookies through the consent banner or your browser settings. The site works without them.

3. Why we use personal data and on what legal basis

• To respond to your enquiry and provide the services you request (performance of a contract or steps before a contract).
• To operate, secure and improve our websites and services (legitimate interest).
• To comply with legal obligations such as tax and accounting records (legal obligation).
• To send you information about our services where you have agreed to receive it (consent, which you can withdraw at any time).

We do not sell personal data and we do not use it for automated decisions that produce legal or similarly significant effects on you.

4. Client data in our engagements

In the course of our services we may access data held in a client's systems. We process that data as a processor on the client's instructions, inside the client's cloud tenancy, under the client's access controls. We do not copy client data to our own systems. The terms of that processing are set out in each contract.

5. Sharing personal data

We share personal data only with service providers who help us run our business, such as hosting, email and form providers, under contracts that require them to protect it; between Cybernip México and Cybernip, LLC where an engagement involves both entities; and with courts, regulators or authorities where the law requires. Transfers outside your country are protected by appropriate safeguards, such as standard contractual clauses or, for Mexico, the requirements of the LFPDPPP.

6. Your rights

Depending on where you live you have rights to access, correct, delete and port your personal data, to object to or restrict its processing, and to withdraw consent. In Mexico these are the ARCO rights under the LFPDPPP. Residents of certain US states have rights under state privacy laws. People in the European Union have rights under the GDPR.

To exercise any of these rights, write to [email protected]. We will respond within the period set by the applicable law, and in any case within 30 days. You may also complain to your data protection authority, which in Mexico is the INAI.

7. Security and retention

We apply technical and organisational measures appropriate to the risk, including encryption in transit and at rest, access limited to people who need it, and logging of access to systems that hold personal data. We keep personal data only as long as needed for the purposes above or as required by law, and then delete or anonymise it.

8. Changes and contact

We may update this policy. When we do, we change the date at the top of this page. Questions about this policy or about how we handle personal data can be sent to [email protected], or by post to either entity at the addresses given in our contracts.