Effective Date: July 6, 2026
At Zaxtron ("Zaxtron," "we," "our," or "us"), we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, store, and safeguard your information when you visit our website, communicate with us, or use our cybersecurity risk management, AI risk management, governance, compliance, and consulting services.
By accessing or using our website, you agree to the practices described in this Privacy Policy.
Information We Collect
We may collect the following categories of information:
Personal Information
You may voluntarily provide:
- Full name
- Company name
- Job title
- Email address
- Phone number
- Business address
- Project information
- Billing information
- Any information submitted through contact forms
Technical Information
When you visit our website, we may automatically collect:
- IP address
- Browser type and version
- Operating system
- Device information
- Referring URLs
- Pages visited
- Time spent on pages
- Date and time of access
- Cookies and similar technologies
Service Information
When providing consulting services, we may process:
- Organizational security documentation
- Risk assessments
- Compliance documentation
- Vendor information
- Security questionnaires
- AI governance documentation
- Third-party risk data
- Business process information
We only collect information necessary to provide contracted services.
How We Use Your Information
We use your information to:
- Provide cybersecurity consulting services
- Deliver AI governance and AI risk management services
- Respond to inquiries
- Prepare proposals and statements of work
- Improve our website
- Monitor website performance
- Send requested communications
- Schedule meetings
- Process invoices
- Comply with legal obligations
- Protect our systems against fraud and cyber threats
- Improve our products and services
Legal Basis for Processing
Where applicable, we process personal information based on:
- Your consent
- Performance of a contract
- Compliance with legal obligations
- Legitimate business interests
- Protection of our legal rights
Cookies
Our website may use cookies and similar technologies to:
- Remember preferences
- Improve website performance
- Analyze website traffic
- Enhance user experience
- Maintain website security
You may disable cookies through your browser settings. Some website features may not function properly if cookies are disabled.
Analytics
We may use analytics services to understand website usage, including:
- Visitor activity
- Website performance
- Traffic sources
- User interactions
Analytics information is generally aggregated and does not directly identify individual users.
How We Share Information
We do not sell your personal information.
We may share information with:
- Cloud hosting providers
- Email service providers
- Payment processors
- Professional advisors
- Legal authorities when required by law
- Trusted subcontractors under confidentiality agreements
All service providers are expected to maintain appropriate security safeguards.
Data Security
Protecting sensitive information is central to our business.
We implement administrative, technical, and physical safeguards including:
- Encryption where appropriate
- Multi-factor authentication
- Role-based access controls
- Secure cloud infrastructure
- Continuous monitoring
- Security logging
- Regular security reviews
- Least-privilege access principles
While we strive to protect your information, no method of electronic transmission or storage is completely secure.
Data Retention
We retain personal information only as long as necessary to:
- Deliver services
- Meet contractual obligations
- Comply with legal requirements
- Resolve disputes
- Enforce agreements
When information is no longer needed, it is securely deleted or anonymized where practical.
Your Privacy Rights
Depending on your jurisdiction, you may have the right to:
- Access your personal information
- Correct inaccurate information
- Delete personal information
- Restrict processing
- Object to processing
- Request data portability
- Withdraw consent where applicable
To exercise these rights, please contact us using the information below.
California Privacy Rights
If you are a California resident, you may have rights under applicable California privacy laws, including the right to:
- Know what personal information we collect
- Request deletion of personal information
- Correct inaccurate information
- Limit certain uses of sensitive information where applicable
- Request disclosure of information-sharing practices
We do not sell personal information or share personal information for cross-context behavioral advertising.
International Users
If you access our website from outside the United States, your information may be transferred to and processed in the United States or other jurisdictions where our service providers operate.
We take reasonable measures to protect personal information during international transfers.
Children's Privacy
Our services are intended for businesses and professionals.
We do not knowingly collect personal information from children under the age of 13. If we become aware that such information has been collected, we will promptly delete it.
Third-Party Websites
Our website may contain links to third-party websites.
We are not responsible for the privacy practices or content of external websites. We encourage you to review their privacy policies before providing personal information.
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our business, legal requirements, or technology.
Updates will be posted on this page with a revised Effective Date.
Contact Us
If you have questions regarding this Privacy Policy or our privacy practices, please contact us.
Zaxtron
Email: [email protected]
Website: https://www.zaxtron.com
Data Protection Commitment
As a cybersecurity and AI risk management consulting firm, protecting confidential information is fundamental to our mission. We strive to apply industry-recognized security practices to safeguard client and visitor information while maintaining transparency, accountability, and compliance with applicable privacy laws.
