Who we are
This website, hackysecurity.com, is run by Hacky Security Private Limited, a company registered in India with its registered office in Shimla, Himachal Pradesh, India. We also work from offices in Chandigarh, Delhi, Dubai and London. In this notice "we", "us" and "Hacky Security" mean Hacky Security Private Limited.
For the personal data described here we are the data fiduciary under India's Digital Personal Data Protection Act, 2023, and the controller under the UK GDPR.
This notice covers hackysecurity.com. Our learning portals (LMS, labs, vendor labs, mock exams and resources) run on their own sub-domains; where a portal collects more than is described here, it tells you so when you sign up.
What we collect, and why
We only collect what you type into a form, plus the minimum technical data needed to keep the site safe.
- Enquiry forms (training, corporate, products, custom software, consulting, contact, workshops, vendor labs): your name, email, and whatever else you choose to give — phone, company, the course or service you are asking about, and your message. Why: to answer your enquiry and, if you go ahead, to prepare a quote or booking.
- Syllabus download: your name, email, optional phone and the course. Why: to give you the syllabus and to follow up once about batch dates.
- Incident report form: your name, phone, email, organisation and what you are seeing. Why: to respond to a security incident as fast as possible.
- Job applications: your name, contact details, location, the role and a link to your CV. Why: to consider you for the role.
- Partner registration: your company, contact details, market and what you sell. Why: to assess the partnership.
- Newsletter: your email address. Why: to send occasional updates you asked for.
- Certificate verification: you type a certificate ID. We show the holder's name, course and dates printed on that certificate — nothing more. Why: so employers and others can confirm a certificate is genuine.
- Security data: when you send a form we record the time, the page you sent it from and your browser type. To stop spam we keep a short-lived counter tied to a one-way scrambled (hashed) version of your IP address — never the address itself.
We do not ask for payment card details, government ID numbers or sensitive personal data on this website, and we ask you not to put them in a message.
Our legal basis
- Consent. Every form has a consent box. You can withdraw consent at any time by emailing info@hackysecurity.com; withdrawing does not affect anything done before.
- Taking steps towards a contract you ask for (a booking, a quote, a job application).
- Legitimate uses and legitimate interests: keeping the site secure, preventing spam and abuse, and verifying certificates.
- Legal obligations, for example tax and accounting records once you become a customer.
Cookies and tracking
This website does not set cookies and does not use advertising trackers. Our fonts are served from our own server, not a third party.
Some pages embed videos from YouTube (in its privacy-enhanced mode), Vimeo or Google Drive. Those services may set their own cookies once the video loads or you press play; their own privacy notices apply.
If we ever add analytics or other cookies, we will update this notice first and ask for consent where the law requires it.
Who we share it with
We do not sell your personal data, and we do not share it for anyone else's marketing.
- Our hosting and email provider, Hostinger, stores the website, the saved form submissions and our email on our behalf.
- Our own team in India, the UAE and the UK, only where they need it to answer you.
- Certification bodies, only if you buy an exam voucher through us — the body needs your name and email to issue it.
- WhatsApp (Meta), only if you choose to contact us through the WhatsApp button. Your chat is then also subject to WhatsApp's terms.
- Authorities, where the law requires it.
International transfers
We work across India, the UAE and the UK, so your data may be accessed from any of those countries, and our hosting provider may store it outside the country you are in. Where UK data leaves the UK we rely on the safeguards the UK GDPR allows, such as the International Data Transfer Agreement. We do not transfer data to any country the Government of India has restricted under the DPDP Act.
How long we keep it
- Enquiries and incident reports: 24 months from your last contact, unless you become a customer — then for as long as the contract runs plus the period tax and company law require.
- Job applications: 12 months, so we can contact you about later roles. Tell us if you want yours deleted sooner.
- Newsletter: until you unsubscribe.
- Spam-protection counters: under 24 hours.
- Certificate records: for as long as the certificate is valid, so it can be verified.
How we protect it
Form submissions are sent over an encrypted (HTTPS) connection and stored in a private folder that is not reachable from the web. Our email passwords are kept outside the website's public files. Access is limited to the people who need it. We are a security company; we apply to our own systems what we teach.
If a breach affecting your personal data happens, we will tell you and the relevant regulator — the Data Protection Board of India and, for UK data, the Information Commissioner's Office — as the law requires.
Your rights
Everyone can ask us to: tell you what personal data we hold about you and who we shared it with; correct or complete it; delete it; and stop using it for anything you consented to.
In India (DPDP Act, 2023) you also have the right to grievance redressal and to nominate someone to exercise your rights if you die or become unable to.
In the UK (UK GDPR) you also have the right to restrict or object to our use of your data, and to data portability. You can complain to the Information Commissioner's Office at ico.org.uk.
In the UAE, the Personal Data Protection Law gives you similar rights of access, correction and erasure.
To use any of these rights, email info@hackysecurity.com with the subject line "Privacy request". We reply within 30 days, and sooner where the law requires.
Grievance officer
Gaurav Sharma, Founder & Chief Information Security Officer Hacky Security Private Limited, Shimla, Himachal Pradesh, India Email: info@hackysecurity.com — subject "Privacy grievance" · Phone: +91-8091900310
If you are not satisfied with our answer, in India you may approach the Data Protection Board of India.
Children
Our courses and services are for adults. We do not knowingly collect data from anyone under 18 without the consent of a parent or guardian. If you think a child has sent us their details, email info@hackysecurity.com and we will delete them.
Changes to this notice
If we change how we use personal data, we will update this page and the date at the top. For significant changes we will also tell people who have an active relationship with us.
