Privacy Policy

  1. ABOUT CYMULATE
    1. This Cymulate.com website and other Cymulate websites and services (“the Platforms”) are owned and operated by Cymulate Ltd., whose principal office is at Cymulate Headquarters, David Sacharov St., Rishon Lezion,Israel, This Privacy Policy covers the Platforms owned by Cymulate, Cymulate operations and our Cymulate’s partners’ platform, and explains how we use personal information that we may obtain about you.
  2. THIS PRIVACY POLICY APPLIES
    1. By visiting our Platforms or using any of our products or services, you agree and consent to your personal information being used and disclosed in the manner set out in this Privacy Policy. In certain countries, we will not collect personal information from you unless you have specifically agreed or consented to us doing so (for example through your acceptance of this Privacy Policy or other similar measures as required by local privacy and data protection laws).
    2. You do not have to provide your personal information to us, but if you do not provide certain information we will only be able to provide limited products and services to you. Where you refuse to provide mandatory company information, we will not be able to provide you with our security assessment services.
    3. This Privacy Policy applies even if you have registered for products or services via a third party (such as a Cymulate partner), as this Privacy Policy forms part of your Conditions and your contract with us for the use of those products or services.
  3. THE PERSONAL INFORMATION THAT WE COLLECT
    1. When you use our Platforms, certain information is collected by us automatically such as your browser type and IP address (which is a series of numbers identifying your internet connection). These may be through the use of cookies (see Cookies and other tracking technologies below) or analytics services (see Aggregate data, data analytics and social media functionality below.
    2. We may collect personal data directly from you when you use our Platforms, contact us by telephone, by email or in person such as conventions, meetings etc. (“see Information Collected Using the Platform”).
    3. We may also collect personal information from third parties who you have authorised to provide your personal information to us (e.g., Cymulate partner’s, IT operators etc…).
    4. We will combine the information that we collect automatically from you with any other information that we collect directly from you or about you.
    5. We also collect and store certain personal information as set out below.
  4. INFORMATION COLLECTED USING THE PLATFORMS
    1. When you register an account with us we collect - title, first name, surname, gender, your organization name, phone number, email address; country of residence, preferred language, organization address and organization phone number password, physical address and IP address.
    2. From time to time we may update the methods of collection and data fields above. Where there are significant changes we will find a way to notify you, in accordance with the section Notification of changes to this Privacy Policy below.
  5. HOW WE USE PERSONAL INFORMATION?
    1. We use the information provided in the following ways:
    2. To fulfil our agreement with you and/or dealing with your security assessments, including processing your assessments, sending you your assessment results or other details relating to your assessments account, or contacting you if there is a problem with your assessments (for example by sending you a service message to inform you when your assessment has not been completed);
    3. Personalisation of the service you receive, for example being aware of previous assessments experiences or preferences, and tailoring the way we provide our products or services to you based on your preferences and profile;
    4. Interaction with you at different touch points throughout your membership (for example we may inform you that regarding new vulnerabilities and immediate threats to assess yourself);
    5. To register you with our Platforms and administer our Platforms’ products or services where you have registered to receive these. You can unsubscribe from these Platform products or services at any time (contact Cymulate Support);
    6. To administer any contest, competition, prize draw or your acceptance of any other promotional offer you may enter, and notify winners, as more fully set out in the applicable terms and conditions;
    7. To personalise the look and feel of our Platforms and our communications with you, so as to align with preferences you may have told us about or which we have inferred from your use of our Platforms, market research and, (where you have agreed to this) via social media and networks;
    8. To answer any queries which you may send to us by email or other forms of communication, and we may keep a record of these contacts including call recordings (to the extent permitted by applicable law);
    9. In order to conduct customer satisfaction surveys and improve the products and services we offer or create new products and services;
    10. To meet our legal compliance obligations or for accounting or audit purposes, including the prevention of fraud for online payments and use of loyalty schemes;
    11. For legal purposes, such as to respond to a valid legal subpoena or regulatory order;
    12. For direct marketing purposes, as set out in detail below in the section ;How do we use your personal information for marketing purposes?; and
    13. As you may authorise or consent to additionally from time to time.
  6. WHAT SENSITIVE PERSONAL DATA MIGHT YOU REQUIRE OR HOLD?
    1. Sensitive personal data includes data about an individual’s health and religion and other categories of personal data which are closely protected. We do not generally collect this information from you. In regards to the data we are collecting about you, see section “Information Collected Using the Platforms”.
    2. You agree that you have voluntarily provided that information to us and that you consent for us to use that information to provide you with these products or services.
    3. In each case, you specifically consent that we can use and transfer outside your local country to anywhere in the world where we provide products or services from Cymulate or Cymulate’s partners (see To whom do we disclose your personal information below).
  7. HOW DO WE USE YOUR PERSONAL INFORMATION FOR MARKETING PURPOSES?
    1. Where you have indicated, you would like to receive updates from us:
    2. We may send marketing information to you to tell you about developments in the products and services available through our Platforms and those of our carefully selected partners (provided that we will communicate these to you in conjunction with our own marketing);
    3. Where we are able to determine or you have indicated to us that you would like to receive it, other entities such as Cymulate’s partners and/or other third parties may also send you marketing or updates relating to their products or services; and
    4. We will use your personal preferences which you have told us about, which we have derived from Cookies and/or which we have inferred from your service usage (see Aggregate data, data analytics and social media functionality below) or market research. We will use this information to tailor the advertising and communications that you receive to be those of the most relevance and interest to you.
    5. You can also unsubscribe from receiving certain electronic messages (see Withdrawing your consent below).
  8. TO WHOM DO WE DISCLOSE YOUR PERSONAL INFORMATION?
    1. We may disclose information about you as follows:
    2. To other entities within the Cymulate entity and partners (as defined above) for fulfilment of the purposes listed above;
    3. We may also disclose your personal information as permitted or required by law. For example, we will disclose personal information to those governmental bodies who have authority to obtain it, in order to comply with a warrant or subpoena issued by a court of competent jurisdiction, and to comply with record production requirements;
    4. In the event of a sale of all or substantially all of the assets of Cymulate Ltd., sale or transfer of the business, such Cymulate Ltd. may transfer personal information in its control to a third-party purchaser that agrees to use personal information for the same reasons identified in this Privacy Policy;
    5. To anyone to whom we transfer or may transfer our rights and duties under our agreement with you;
    6. If we have a duty to do so or if the law allows us to do so; and to our employees and agents to do any of the above on our behalf, now or in the future.
  9. WORKING WITH OTHER SERVICE PROVIDERS AND CYMULATE’S PARTNER COMPANIES
    1. For operational reasons, we transfer personal information to service providers and Cymulate’s partner companies who help us manage our sales processes, and to deliver our products or services to users. We have implemented safeguards to ensure that our service providers treat personal information in a way that is consistent with the terms of this Privacy Policy and applicable laws, and that it is not used except to fulfil products or services to us or where we believe it is necessary for a legitimate reason connected with the products or services we offer, or as set out in the Information Collected Using the Platform section above.
    2. These service providers and partner companies may be located in your country, countries in the European Economic Area, the Americas or elsewhere in the world. Different privacy laws may apply in these countries See further detail in our Transfer of Your Personal Information section below.
  10. RETENTION
    1. We keep records for as long as required to manage Cymulate accounts and provide the other relevant products or services anticipated by this Privacy Policy, including keeping you up-to-date with our marketing, and where we are required to by law or for records purposes. We also retain your information to make your future interactions with us convenient and to personalise the products, services and communications with you.
  11. CONSENT
    1. By choosing to provide us with your personal information you are consenting to its use in accordance with the principles outlined in this Privacy Policy and as outlined at the time you are asked to provide any personal information. We may contact you by phone, email, SMS and mobile device messages or notifications (and gaining your consent where we are required to do so) in order to provide you with updates pertaining to our products or services as well as information about additional offers, products, services or events that we believe may be of interest to you.
  12. WITHDRAWING YOUR CONSENT
    1. You do not have to provide us with your personal information. However, if you choose not to provide certain personal information we request and/or require or consent to its use and disclosure, you will still be able to visit our Platforms but you may be unable to access certain options, products or services, and in some cases, we may not be able to provide you with complete scope of work.
    2. All marketing communications we send to you will provide you with a way to withdraw your consent to future marketing. If you no longer wish to receive promotional materials you may opt-out of receiving these communications by contacting Cymulate Support or changing your account settings, this will remove you from Cymulate marketing lists.
    3. Be aware that if you unsubscribe completely from our marketing communications we may be unable to notify you of tailored offers to meet your needs.
    4. Please note that if you unsubscribe from marketing communications you will still receive operational and service messages from us regarding your account use and responses to your enquiries made to us, and that we may hold your details on a suppression list so we don't send you marketing communications in the future.
  13. SECURITY
    1. We will take appropriate steps to protect the personal information you share with us. We have implemented technology and security features to safeguard the privacy of your personal information. We invest significant resources to protect your personal information, from loss, misuse, unauthorised access, modification or disclosure. However, no internet-based site can be % secure and we cannot be held responsible for unauthorised or unintended access that is beyond our control.
  14. AGGREGATE DATA, DATA ANALYTICS AND SOCIAL MEDIA FUNCTIONALITY
    1. We may aggregate personal information and remove any identifying elements in order to analyse patterns and improve our marketing and promotional efforts, to analyse Platform use, to improve our content and product offerings, and to customize our Platforms’ content, layout, products and services, and we may appoint third parties to do this on our behalf, as set out above.
    2. We gather certain usage information like the number and frequency of visitors to our Platforms. This information may include which webpage you just came from, which webpage you next go to, what browser you are using, your device and your IP address. We only use such data in the aggregate. This collective data helps us to determine how much our customers use parts of our Platforms, and do research on our users’ interests, and behavior to better understand and serve you.
    3. If you use buttons on our Platforms linked to social media or similar sites (for example Like and/or Share buttons), content from our Platforms may be sent back to that other website or service and, depending on your privacy settings, may be privately or publicly visible (for example to friends, followers or generally to anyone who has access to your profile page).
  15. COOKIES AND OTHER TRACKING TECHNOLOGIES
    1. Technologies such as: cookies and scripts are used by Cymulate in the platforms, they collect information as to how you navigate our Platforms and helps us provide better Platform services to you and tailor certain content. These technologies are used in analyzing trends, administering the site, tracking users movements around the site. We may receive reports based on the use of these technologies on an individual as well as aggregated basis. Users can control the use of cookies at the individual browser level. If you reject cookies, you may still use our Platforms, but your ability to use some features or areas of our Platforms may be limited.
    2. See also our section on Aggregate data, data analytics and social media functionality above.
  16. LINKS
    1. Our Platforms may contain links to other web sites. Please be aware that we are not responsible for the privacy practices of web sites not operated by us. We encourage you to read the privacy Policies of each and every web site that collects personally identifiable information. This Privacy Policy applies solely to information collected by our Platform.
  17. CORRECTION/UPDATING OF PERSONAL INFORMATION
    1. If your Personal Identifiable Information changes or is inaccurate, or if you no longer desire our service, we will provide a way to correct, update or suppress your personal information provided to us. If you are concerned that any of the information we hold about you is incorrect please contact us. These rights are without prejudice to any legal rights you may have in applicable laws, including your right to object to certain processing of data.
  18. ACCESS TO YOUR PERSONAL INFORMATION
    1. You may have the right to receive a copy of personal information we keep about you, including the sources of the data, the purposes and methods of processing, any electronic decision-making and the entities with whom we share your data. We will endeavour to provide the information you require within a reasonable time. There may be a small monetary charge for some requests, depending on the information requested, to the extent permitted by applicable law.
  19. TRANSFER OF YOUR PERSONAL INFORMATION
    1. Some parties that process or store personal information in accordance with this Privacy Policy may be located in jurisdictions outside your country of residence or our country of incorporation. Therefore, you understand and unambiguously agree that your information may be processed and stored in these jurisdictions and that different privacy laws may apply in these countries which may not ensure the same level of data protection as granted in your country of residence. We only make these arrangements or transfers where we are satisfied that adequate levels of protection are in place to protect any information held in that country or that the service provider acts at all times in compliance with applicable privacy laws. Where required under applicable laws we will take measures to ensure that personal information handled in other countries will receive at least the same level of protection as it is given in your home country.
    2. In the event your personal information is transferred to a foreign jurisdiction, it may be subject to the laws of that jurisdiction and we may be required to disclose it to the courts, law enforcement or governmental authorities in those jurisdictions but we will only do so where required by applicable laws.
  20. NOTIFICATION OF CHANGES TO THIS PRIVACY POLICY
    1. If we decide to change our Privacy Policy, we will post those changes on our Platforms. If at any point in time we decide to use personally identifiable information in a manner materially different from that stated at the time it was collected (and/or where we are required under applicable law), we will notify you. You will have a choice as to whether or not we use your information in this different manner. We will use information in accordance with the Privacy Policy under which the information was collected until you agree otherwise, but if you do not accept the amended Privacy Policy, please stop using our Platforms. Each version has a version number and date so you can check this easily.
  21. TECHNICAL RELATED QUERIES
    1. If you experience any technical problems during your interaction with this web site, please contact Cymulate Support.
  22. QUERIES, CONCERNS OR COMPLAINTS REGARDING YOUR PRIVACY OR THIS PRIVACY POLICY
    1. If you have queries regarding this Privacy Policy please contact us by either completing this form or contacting Cymulate’s Privacy Team