home / privacy notice
// privacy
Privacy notice
How we collect, use and protect your personal data, and the rights you have under India's Digital Personal Data Protection Act.
Who we are
SecureDX Technologies (“SecureDX”, “we”) provides offensive security services. For any privacy question, contact contact@securedx.in.
What data we collect
- Enquiry data — name, company, email and the details you share when you request a quote or join the SDX Society waitlist.
- Engagement data — information needed to scope and deliver a security engagement, handled under a separate agreement.
- Usage data (only if you accept analytics cookies) — page views, referrers, device and approximate location, collected through Google Analytics. See Cookies below.
- Likes and comments — if you like or comment on a writeup: the name you type, your comment, and a random anonymous identifier our sign-in provider (Google Firebase) stores in your browser so we can count one like per visitor. We do not collect your email for this. Comments are reviewed before they are shown and can be removed on request.
- Account data — if you create an SDX Society account: your name, email address, and the articles and comments you post.
Why we use it
To respond to your enquiry, provide and improve our services, meet legal and contractual obligations, and maintain the security of our own systems. We rely on your consent and our legitimate and contractual interests as the basis for processing.
Cookies and analytics
We use Google Analytics to understand how this website is used. It is off by default: nothing is loaded from Google and no analytics cookie is set unless you click Accept on the cookie banner.
- What it sets: cookies named
_gaand_ga_*, which distinguish visitors and sessions. - What it collects: pages viewed, referrer, device and browser type, and approximate location derived from your IP address (we enable IP anonymisation).
- Who receives it: Google, as our analytics provider. Data may be processed outside India.
- Basis: your consent. Declining has no effect on how the site works.
Your choice is stored in your browser (as sdx-consent). You can change it at any time using Cookie settings in the footer. Declining or withdrawing consent removes the analytics cookies we set. The site also uses essential storage only to keep you signed in if you log in to SDX Society; this does not require consent.
Sharing
We do not sell your data. We share it only with service providers who help us operate (for example email and scheduling tools), under appropriate safeguards, and where required by law.
Retention
We keep enquiry data only as long as needed to respond and for a reasonable follow-up period. Enquiries are kept for 12 months after our last contact. Engagement evidence is encrypted and deleted 30 days after the final report and retest are signed off, unless the engagement agreement says otherwise. Account data is deleted within 30 days of your request.
Your rights
Under the DPDP Act you may request access to, correction of, or erasure of your personal data, and you may withdraw consent. To exercise these rights, email contact@securedx.in. We respond within 15 days.
Grievance contact
If you have a concern about how we handle your data, contact our grievance officer at contact@securedx.in. We acknowledge complaints within 3 working days and aim to resolve them within 15 days.
Security
We apply encryption, access controls and retention limits to the personal data we hold. To report a vulnerability in our own systems, see our responsible disclosure page.