Privacy Policy
LOZULA Cybersecurity · Privacy & Data Handling
1. Scope of This Policy
This Privacy Policy explains how LOZULA Cybersecurity collects, uses, stores, and shares personal information when you use our website, client portal, security tools, audit and assessment services, account-security or recovery-assistance workflows, support channels, and related services.
2. Information We Collect
Depending on the service you use, we may collect contact and account information, company or project details, authorized security scope, repository or source-code access information, URLs and technical identifiers, audit evidence, support messages, account-recovery information you choose to provide, and security-related files or documentation. We may also receive technical logs such as IP address, device, browser, session, and security-event information needed to operate and protect the service.
3. How We Use Information
We use information to provide and secure our services, scope and perform authorized security work, generate findings and reports, support legitimate account-recovery or appeal workflows, communicate with clients, process billing, prevent abuse and fraud, maintain service reliability, improve our workflows, and comply with applicable legal obligations.
4. Legal Bases Where Applicable
Where data-protection law requires a legal basis, processing may be based on performance of a contract, steps requested before entering a contract, legitimate interests in operating and securing our services, consent where requested, or compliance with legal obligations. The basis used depends on the context and jurisdiction.
5. Payments
Payments may be processed by third-party payment providers. LOZULA may receive transaction identifiers, payment status, billing contact details, and limited payment metadata needed for invoicing, fraud prevention, and support. Full payment-card details are handled by the payment provider rather than stored directly by LOZULA where the provider hosts the payment flow.
6. Sharing of Information
We do not sell personal information. We may share information with personnel assigned to an engagement and with service providers that support hosting, authentication, communications, payments, storage, security, and other operational functions. We may also disclose information when required by law, to protect rights or security, or in connection with a legitimate business transaction subject to appropriate safeguards.
7. Security
We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, loss, misuse, or alteration. No internet service or storage system can guarantee absolute security, so users should also protect credentials, enable multi-factor authentication where available, and avoid sending secrets through unsupported channels.
8. Data Retention
We retain information only for as long as reasonably necessary for the purpose for which it was collected, including service delivery, engagement verification, dispute handling, security, accounting, and legal requirements. Retention may vary by data type, contract, client instruction, and applicable law. When information is no longer required, we take steps to delete or de-identify it where appropriate.
9. Cookies and Similar Technologies
We may use cookies or similar technologies that are necessary for authentication, security, preferences, and core site functionality. If optional analytics or other non-essential technologies are enabled, we will handle them in accordance with applicable consent and notice requirements.
10. Third-Party Platforms and Account Recovery
If you request assistance involving a third-party platform, such as a social-media or account-recovery case, information you submit may be used to prepare or support an official recovery, appeal, or security process. Third-party platforms operate under their own privacy policies and make their own account-access and reinstatement decisions.
11. Your Privacy Rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection to certain processing, and to withdraw consent where processing is based on consent. Some rights may be subject to legal exceptions. You may also have the right to contact your local data-protection authority.
12. Policy Changes
We may revise this policy when our services, processing activities, or legal obligations change. Material changes will be communicated through the website, portal, or another appropriate channel where required.
13. Contact
For privacy questions or requests, contact LOZULA Cybersecurity at privacy@lozula.com. We may need to verify your identity before acting on a request involving personal information.