// Last updated: October 2026 · Template — have this reviewed by legal counsel before publishing.
01Who we are
Sploitless is a cyber security company based in Strovolos, Nicosia, Cyprus. We are the data controller for personal data collected through sploitless.com.
02What we collect
Information you give us: your name, company, email, phone number and anything you write in the contact form.
Technical data: IP address, browser type and pages visited, collected through essential cookies and — only with your consent — privacy-friendly analytics.
03How we use it
To respond to enquiries, scope and deliver engagements, send invoices, and meet legal obligations. We never sell your data and never use it for advertising.
04Engagement data
Data we encounter while testing your systems is handled under the engagement contract and NDA, stored encrypted, accessed only by assigned operators, and securely destroyed at the end of the retention period agreed with you.
05Cookies
Essential cookies keep the site working. Analytics cookies are off until you accept them in the cookie banner. You can change your choice at any time by clearing your browser storage for this site.
06Retention
Enquiry data is kept for up to 24 months unless it becomes part of a client relationship. Financial records are kept for as long as Cypriot law requires.
07Your rights
Under the GDPR you can request access to, correction, deletion or export of your personal data, object to processing, or withdraw consent. Contact us and we will respond within 30 days.
You may also complain to the Office of the Commissioner for Personal Data Protection in Cyprus.
08Contact
Questions about this policy or your data: privacy@sploitless.com.