Privacy Policy

Cyber Falcon Cybersecurity

Last updated: July 20, 2026

1. Who We Are

Cyber Falcon Cybersecurity ("Cyber Falcon," "we," "us," or "our") operates the website at cyberfalcon.us (the "Site") and provides cybersecurity consulting and managed security services. This Privacy Policy describes how we collect, use, disclose, and protect personal information in connection with the Site and, where applicable, our services.

For any matter arising under this Policy, contact us at support@cyberfalcon.us or (740) 206-7225.

2. Information We Collect

2.1 Information you provide

Inquiries and contact forms. When you contact us through the Site, we collect the information you submit, such as your name, work email address, phone number, company, industry, and the content of your message. This information is used to respond to your inquiry and to manage the prospective business relationship.
Live chat. If you use the chat feature on the Site (provided by a third-party chat service), we collect the content you choose to share and basic session information necessary to operate the conversation.
Direct correspondence. If you contact us by email or phone, we retain the correspondence for as long as reasonably necessary to serve you and maintain business records.

2.2 Information collected automatically

Site analytics. With your consent, we use third-party analytics services to collect information about Site usage, including pages viewed, approximate location (city level), device and browser type, and referral source. IP addresses are anonymized where the service supports it. This information is used in aggregate to understand how the Site is used and to improve its content.
Usage and interaction data. With your consent, our analytics services may collect aggregate interaction patterns, including scrolling, clicks, and session replays that record on-page behavior (masking input by default), to improve page layout and usability.
Advertising and outreach measurement. If you consent to marketing cookies, we use advertising and business-to-business measurement services for purposes such as conversion measurement, remarketing, and visitor measurement. These are disabled by default and only run after you opt in.
Server and security logs. Standard request logs are maintained by our hosting and content-delivery infrastructure and are used for the security, integrity, and availability of the Site.

2.3 Information processed in the course of services

When we deliver contracted services (such as security assessments, managed monitoring, or incident response), we may process data on behalf of our clients, which can include system logs, alerts, and other technical data originating from client environments. That data is processed under the terms of the applicable services agreement and any associated data-processing terms — not under this Policy — and we act with respect to it at the client's direction. If you believe your personal information is contained in data processed for one of our clients, please direct your inquiry to that organization.

3. Cookies and Your Choices

On your first visit, a consent banner lets you accept or decline non-essential cookies and similar technologies. Only essential cookies operate before you choose. Essential cookies are required for the Site to function and include the cookie that stores your consent choice. The non-essential technologies fall into these categories, and all stay disabled until you opt in:

Analytics — understanding how the Site is used, in aggregate.
Advertising — conversion measurement, remarketing, and visitor measurement.
Functional — features such as live chat.

For cookies set by our advertising and analytics partners, we use a consent-management mechanism so those partners honor your choice at the source. You can change or withdraw your consent at any time using the "Cookie preferences" link in the Site footer, and you may also block or delete cookies through your browser settings. The Site continues to function if you decline; the live-chat feature requires the functional category to operate.

4. How We Use Information

We use the information described above to: (a) respond to inquiries and communicate with you; (b) manage sales and business relationships; (c) operate, secure, and improve the Site; (d) comply with legal obligations; and (e) establish, exercise, or defend legal claims. We do not use personal information collected through the Site for automated decision-making that produces legal or similarly significant effects.

5. Disclosure of Information

We do not sell personal information, and we do not share it with third parties for their own marketing purposes. We disclose personal information only:

To service providers. We use a limited set of third-party providers to operate the Site and our business, by category: a hosting and content-delivery provider; a customer-communications and CRM provider (including live chat); analytics providers; a tag-management provider; and, only with your consent, advertising and outreach-measurement partners. Each processes personal information on our behalf or as an independent controller for its own stated purposes, subject to its own contractual and legal obligations and our configuration. We can identify the specific providers on request.
For legal reasons. We may disclose information where required by law, regulation, legal process, or enforceable governmental request, or where necessary to protect our rights, safety, or property or those of others.
In a business transfer. If we are involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy.

6. Data Retention

Sales and business inquiries: retained for the duration of the business relationship, or until you request deletion.
Analytics data: retained per the analytics platform's configured retention period before aggregation or deletion.
Chat transcripts: retained per our account retention settings.
Correspondence and business records: retained as reasonably necessary for business, legal, and audit purposes.

7. Your Rights and Choices

You may contact us at support@cyberfalcon.us to request access to the personal information we hold about you, to correct it, or to request its deletion. We honor these requests regardless of where you reside, including rights available under the EU/UK General Data Protection Regulation (access, rectification, erasure, portability, restriction, and objection) and under the California Consumer Privacy Act and other U.S. state privacy laws (the rights to know, delete, correct, and opt out of sale or sharing).

We do not sell personal information for money. If you consent to marketing cookies, the resulting advertising measurement and remarketing may constitute "sharing" or "targeted advertising" as those terms are defined under certain U.S. state privacy laws. You can opt out at any time, and prevent it entirely, by declining non-essential cookies through the "Cookie preferences" link in the Site footer. We also treat a recognized Global Privacy Control browser signal as a valid opt-out.

We will respond to verified requests within 30 days. We will not discriminate against you for exercising any privacy right.

If you are located in the EU/UK, you also have the right to lodge a complaint with your local supervisory authority.

8. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include encryption of data in transit, access controls based on least privilege, and multi-factor authentication for systems that store personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; we commit to handling personal information with the same discipline we advise our clients to apply.

9. International Transfers

We are based in the United States, and the Site is operated from the United States. If you access the Site from outside the United States, your information will be transferred to and processed in the United States, where data-protection laws may differ from those of your jurisdiction. Where required, we rely on appropriate safeguards for such transfers.

10. Children's Privacy

The Site is intended for businesses and is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

11. Changes to This Policy

We may update this Policy from time to time. The "Last updated" date above reflects the current version, and material changes will be noted on this page. Your continued use of the Site after changes take effect constitutes acceptance of the revised Policy.

12. Contact