Privacy Policy

PhishSheriff recognises the importance of maintaining your privacy. We value your privacy and appreciate your trust in us. This Policy describes how we treat information we collect from online and other offline sources. This Privacy Policy applies to current and former visitors to our website and to our online Clients and Users. By visiting and/or using our website, you agree to this Privacy Policy.

We firmly believe that you should always know what data we collect from you, the purpose for which such data is used, and how it is secured, and that you should have the ability to make informed decisions about what you wish to share with us.

Therefore, we want to be transparent about: (i) how and why we collect, store and use your data in the various capacities in which you interact with us; and (ii) the rights that you have to determine the contours of this interaction. Terms not defined in this Privacy Policy are defined in our Terms of Service.

1. What Data We May Collect

Depending on whether you are a Visitor, Client or User, the type of data we collect and the purpose for which we use it will differ, as set out below.

1.1 Contact Information — We may collect information including but not limited to your name, email address, mobile number, phone number, location, street, city, state, PIN code, country and IP address, together with other necessary details of you or your representative.

1.2 Information You Post — We collect information you post in a public space on our website or on a third-party social media site.

1.3 Demographic Information — We may collect demographic information about you, the products and services you like, what you intend to buy, what you buy, or any other information provided by you during your use of our website. We may collect this as part of a survey.

1.4 Other Information — we may collect:

• How you behave in the relevant product environment and use its features.
• How you behave on the website, including which pages you land on and how much time you spend.
• The device you use to access the website and its details, such as model and operating system.
• Cookies and web beacon data.
• If you submit an enquiry through the website, we will ask for your name, email address, organisation details and contact number.
• Data from third parties who have your explicit consent to lawfully share that data.
• Emails, where you have opted to sync your email with PhishSheriff.
• Information about your IP address and the browser you are using.
• The site you came from, the duration of time spent on our website, the pages accessed, and the site you visit when you leave us.
• The type of device you are using, your location, and the version of the operating system your computer or device is running.

2. How and Why We Use It

Our primary purpose in collecting personal information is to provide you with a secure, smooth, efficient and customised experience. We may use the information collected for the following purposes.

2.1 To Contact You — We may use the information you provide to contact you for confirmation of a purchase on our website, for other promotional purposes, or for the betterment of our products and services.

2.2 To Respond to Your Requests or Questions — We may use your information to confirm your registration for products and services. We collect Client and User data in order to help you register for and facilitate provision of our products and services.

2.3 To Analyse Site Trends and Client Interests — We may use your information to improve our website, products and services. We may combine information we obtain from you with information about you obtained from third parties. We use visitor information to analyse and identify behaviour and to enhance your interactions with the website. We may also conduct anonymised usage behaviour analysis at an aggregate level to determine how the features of a particular service are being used.

2.4 For Security Purposes — We may use information to protect PhishSheriff, our Clients, our websites, and our products and services, including to ensure network and information security and to prevent unauthorised access to our computer and electronic communications systems.

2.5 For Marketing Purposes — We may send you information about special promotions or offers, and may tell you about new features or products. These may be our own offers or products, or third-party offers, products or services which we think you may find interesting. If you submit your details and give us your consent, we may use your data to send you emails and newsletters, re-target PhishSheriff advertisements, or re-market our services using third-party services including but not limited to Facebook, Yahoo, Bing and Google. We will occasionally send you emails regarding changes or updates to the service you are using.

2.6 For Business and Operational Analysis — We may use information to perform research and business or operational analysis; to generate internal reports about our user base and product and service usage patterns; to analyse the accuracy, effectiveness and popularity of our products and services; and for internal purposes such as auditing and data analysis for business development.

3. Sharing of Information with Third Parties

We may share your information in the following circumstances.

3.1 Parties Who Perform Services on Our Behalf — We share information with vendors or service providers who help us manage our online registration process, payment processing or transactional message processing. Some vendors may be located outside of India.

3.2 Our Business Partners — This includes any third party who provides, operates or supports our products and services. Our partners use the information we give them as described in their privacy policies.

3.3 To Comply with the Law or Protect Ourselves — We will share information to respond to a court order or subpoena. We may also share it if a government agency or investigatory body requests it, or when we are investigating potential fraud.

3.4 Any Successor to All or Part of Our Business — For example, if part of our business is sold, we may provide our Client list as part of that transaction. We will inform you before we do this.

3.5 Other Parties — PhishSheriff may share information with other parties in cases where it is imperative to do so in order to protect our products and services, or where we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss.

4. How We Collect Information in Different Ways

4.1 Directly from You — We collect information directly from you when you register or subscribe for an account. We also collect information if you post a comment on our websites or ask us a question by telephone or email.

4.2 Passively — We use tracking tools such as Google Analytics, Google Webmaster, browser cookies and web beacons to collect information about your usage of our website.

4.3 From Third Parties — For example, if you use an integrated social media feature on our websites, the third-party social media site will give us certain information about you. This could include your name and email address.

5. Retention of Personal Information

We will store any personal data we collect from you for as long as is necessary in order to facilitate your use of the products and services, and for ancillary legitimate and essential business purposes. These include, without limitation, improving our services, attending to technical issues, and dealing with disputes.

We may need to retain your personal data even if you seek deletion thereof, where it is needed to comply with our legal obligations, resolve disputes and enforce our agreements.

After you terminate your usage of a service, we may, unless legally prohibited, delete all data provided or collected by you, including lead information, from our servers.

6. Cookie Policy

A "cookie" is a small piece of information stored by a web server on a web browser so that it can later be read back from that browser. Our website uses cookies to enhance our services based on user preferences. We use cookies and similar technologies such as web beacons, pixel tags and local shared objects to deliver, measure and improve our services.

We use these cookies when you visit our site and use our services through a browser. As we adopt additional technologies, we may also gather additional data through other methods. When you use PhishSheriff, we use cookies to track and monitor some of your activities on and off the PhishSheriff website, and to store and access certain data about you, including your browsing history and your usage of the website.

We use both session cookies and persistent cookies. Session cookies expire when you close your browser, while persistent cookies remain stored in your browser even after you turn off your computer. Session cookies are used to identify you during a single browsing session, while persistent cookies identify you over a longer period.

Cookies allow PhishSheriff to identify and track users as they navigate different pages on our publicly accessible website (www.phishsheriff.com) and to identify users returning to the website. This helps make navigating and interacting with our website and account portal easier and more efficient. You can turn off your web browser's ability to accept cookies. However, if you do so, certain parts of the PhishSheriff site or account portal may not work for you.

7. What We Use Cookies For

• To validate the authenticity of persons attempting to gain access to a user account.
• To allow users to opt out of certain types of personalisation in our products and services.
• To provide and administer the products and services.
• To maintain the operations of our advertising and marketing functions.
• To help diagnose and correct downtime, bugs and errors, and to ensure that our product operates efficiently.
• To identify individual users in order to attribute different activities while using various parts of the site.
• To remember data about your browser and your preferences.
• To remember the settings and other choices you have made at our website.

8. Anonymous Information Collected Automatically

In addition to personal information, certain anonymous information about your visit is automatically captured when you visit the site. This anonymous information is used to help improve our site, analyse trends and administer the site. This information includes:

• The name of the Internet Service Provider (ISP) and the Internet Protocol (IP) address through which you access the internet.
• The date and time you access the site.
• The web pages that you access while at the site.
• Occasional geographic data.
• The internet address of the website from which you linked directly to our site.

We may also use your IP address to determine the organisation with which you are affiliated. We may monitor your interactions with the site to maintain your information within your site profile, including pages you visit, content you review and comments you make.

9. Beacons

PhishSheriff may, together with third parties, use technologies known as beacons or pixels which enable PhishSheriff to collect information from your device to a server. Beacons can be embedded in online content, videos and emails, and can allow a server to read certain types of information from your device, determine when you have viewed particular content, an email or a message, and record the time and date on which you viewed the beacon together with the IP address of your device. This technology is used for various purposes, including analysing the use of our products and services and offering content and advertisements which are relevant to the user.

10. Tracking by Our Advertisement Partners

Upon receiving your specific consent, we may share the data we collect from cookies or web beacons with our advertisement partners to track your visits, establish your non-personal identity, and present you with targeted advertisements and information about our products and services.

11. Persons Under the Age of 18

PhishSheriff does not knowingly collect or solicit any information from anyone under the age of 18, nor knowingly allow such persons to register for the products and services. The products, website, services and their content are not directed at children under the age of 18. In the event that we learn that we have collected personal information from a child under the age of 18, we will delete that information as quickly as possible.

12. Third Party Links

We may display links to third-party websites or applications on our website for advertising purposes or to provide you with relevant content. We will not be responsible for such third-party websites or applications if you choose to access them. If you click on one of the links to a third-party website, you may be taken to a website we do not control. This Policy does not apply to the privacy practices of those websites. Please read the privacy policy of other websites carefully. We are not responsible for these third-party sites.

13. Email Opt-Out

You can opt out of receiving our marketing emails. To stop receiving our promotional emails, please email technology@phishsheriff.com. It may take approximately ten (10) working days to process your request.

14. Security of Your Personal Information

We implement industry-standard technical and organisational measures, using a variety of security technologies and procedures, to preserve the integrity and security of all information and to protect your data from unauthorised access, use, loss, destruction or disclosure. However, no security system is impenetrable, and we cannot guarantee the absolute security of our systems.

15. Privacy Options

Most browsers automatically accept cookies, but you can change your browser settings to decline cookies by consulting your browser's support documentation. If you decide to decline cookies, please note that you may not be able to sign in, customise or use some interactive features on our website.

16. Compelled Disclosure

In addition to the purposes set out in this Policy, we may disclose any data we have collected or processed from you if it is required:

• Under applicable law, or to respond to a legal process such as a search warrant or court order;
• To protect our safety, your safety or the safety of others, or in the legitimate interest of any party in the context of national security, law enforcement, litigation or criminal investigation, or to prevent death or imminent bodily harm;
• To investigate fraud or violation of our Acceptable Use Policy;
• In connection with legal proceedings brought against PhishSheriff, its officers, employees, affiliates, Clients or vendors; or
• To establish, exercise, protect, defend and enforce our legal rights.

17. Governing Law

If you choose to visit the website, your visit and any dispute over privacy is subject to this Policy and the website's terms of use. Any disputes arising under this Policy shall be governed by the laws of India. Jurisdiction shall lie with the courts at Mumbai, Maharashtra.

18. Acknowledgement

By using the platform, products and the services provided therein, you agree and consent to the collection, transfer, use, storage, disclosure and sharing of your information as described and collected by us in accordance with this Policy. Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information.

If you have any questions about how we handle user data and personal information, please feel free to contact us. If you do not agree with this Policy, please do not use or access the platform. You are free to refuse our request for your personal information, with the understanding that we may be unable to provide you with some of your desired services.

19. Updates to This Policy

We may occasionally make changes to this Policy. If we make any material changes, we shall notify you either by sending you an email or by sending you a notification. We will also post an updated copy on our website. Please check our site periodically for updates.

20. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, our Grievance Officer can be reached as follows.

Designation

Grievance Officer

Registered Address

1st Floor, A Wing, Lodha iThink Techno Campus, Pokhran Road No. 2, Off Eastern Express Highway, Thane, Mumbai, Maharashtra

Email

technology@phishsheriff.com

If you have any questions about this Policy or other privacy concerns, you may also email us at technology@phishsheriff.com. If you believe that any information we hold about you is incorrect or incomplete, please write to or email us as soon as possible at the address above. We will promptly correct any information found to be incorrect.