1. Introduction
Phishnoo Limited respects your privacy. This policy explains what data we collect, how we use it, and your rights under applicable data protection laws including the General Data Protection Regulation (GDPR).
2. Data We Collect
We collect the following categories of information:
- Personal information: name, email address, phone number, company name
- Usage data: training progress, simulation results, reported threats
- Technical data: IP address, browser type, device information
- Cookies: session and analytics cookies
3. How We Use Your Data
We use your data to:
- Deliver and improve our platform
- Personalize security awareness training
- Generate analytics and reporting
- Communicate with you about your account and services
- Comply with legal obligations
4. Legal Basis (GDPR)
We process your personal data on the following legal bases:
- Contract performance: to deliver the services you have subscribed to
- Legitimate interests: to improve our platform and protect against threats
- Consent: where you have given explicit consent for specific processing
- Legal obligation: to comply with applicable laws and regulations
5. Data Sharing
We do not sell your personal data. We may share data only with:
- Hosting and infrastructure providers
- Analytics tools to improve our services
- Authorities when required by law
6. Data Retention
We retain your personal data for as long as your account is active or as needed for legal purposes. Training and simulation data is retained for reporting and compliance purposes.
7. Your Rights
Under the GDPR, you have the right to:
- Access your personal data
- Rectification of inaccurate data
- Erasure of your data
- Restriction of processing
- Data portability
- Object to processing
To exercise any of these rights, contact us at info@phishnoo.com.
8. Cookies
We use cookies for:
- Session management: to keep you logged in and maintain your preferences
- Analytics: to understand how our platform is used and improve it
You can manage cookie preferences through your browser settings.
9. Security
We protect your data using industry-standard measures including encryption, access controls, and regular security audits.
10. Changes
We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.
11. Contact
Phishnoo
K.P. van der Mandelelaan 41-43
3062 MB Rotterdam, The Netherlands
Email: info@phishnoo.com
Phone: +31 (0) 10 766 0700
