GDPR Privacy Policy
Effective Date: June 2026
This GDPR Privacy Policy outlines how Init Cyber, LLC ("Init Cyber") collects, uses, and protects personal data in accordance with the European Union's General Data Protection Regulation (GDPR). This policy supplements our general Privacy Policy.
Data Protection Principles
Init Cyber processes personal data in accordance with the following principles:
- Data Minimization: We collect only the personal data necessary for our stated purposes
- Data Accuracy: We take reasonable steps to ensure personal data is accurate and current
- Data Retention: We retain personal data only for as long as necessary to fulfill the purposes for which it was collected
- Integrity and Confidentiality: We implement appropriate technical measures to protect personal data
Personal Data We Collect
Init Cyber collects the following categories of personal data:
- Analytics data: IP addresses (anonymized), browser type, device information, pages visited, and session duration — collected through Google Analytics
- Contact form data: Company name, email address, and compliance-related information you voluntarily provide when submitting an inquiry
- Preference data: Dark mode setting stored in your browser's local storage (never transmitted to our servers)
Legal Basis for Processing
- Legitimate Interest: We process analytics data based on our legitimate interest in understanding website usage and improving our services
- Consent: Contact form submissions are processed based on your voluntary consent when you submit the form
Your Rights Under the GDPR
If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:
- Right of Access: You may request a copy of the personal data we hold about you
- Right to Rectification: You may request correction of any inaccurate personal data
- Right to Erasure: You may request deletion of your personal data, subject to any legal retention obligations
- Right to Restrict Processing: You may request that we limit how we process your data
- Right to Data Portability: You may request your personal data in a structured, machine-readable format
- Right to Object: You may object to processing based on legitimate interest, including analytics
To exercise any of these rights, contact us at info@initcyber.com. We will respond to your request within 30 days.
Third-Party Data Sharing
We share data with Google Analytics for website analytics purposes. Google processes this data in accordance with Google's Privacy Policy. No personal data is sold to or shared with any other third party.
International Data Transfers
Google Analytics data may be transferred to and processed in countries outside the EEA, including the United States. Google relies on Standard Contractual Clauses and other approved transfer mechanisms to ensure adequate data protection during these transfers.
Data Security
We implement appropriate technical measures to protect personal data, including:
- HTTPS encryption for all website traffic
- Access controls on any systems that process personal data
- Regular review of data processing practices
Changes to This Policy
We will notify users of changes to this policy by posting the updated version on this page with a revised effective date.
Contact
For questions about this GDPR Privacy Policy or to exercise your data rights, contact us at info@initcyber.com.