About this policy
This policy covers the InfoSec Group Ltd. website and enquiries about our cybersecurity services. InfoSec Group is based in Sofia, Bulgaria. Service engagements may include separate confidentiality and data-processing arrangements.
Contact and responsibility
For privacy questions or requests, email info@infosecgroup.io or call +359 876 830 388.
Information you provide
When you enquire, you may provide your name, work email, organisation, service interests, and message. The pricing calculator constructs an email draft on your device containing your selections, indicative estimate, and a calculation link. It does not submit the message to a website database. Calculation links contain service choices and can be read by anyone you share the link with. If you send the email, your email provider and our email service process the message. Avoid sending credentials, vulnerability details, or other sensitive material until a secure channel has been agreed.
Browsing and preferences
The website stores your selected display theme in browser local storage. You can clear it through your browser settings. The current pages load fonts from Google Fonts, which makes requests to Google servers and exposes connection information such as your IP address. Hosting providers may process technical request and security logs.
Purposes and lawful bases
We use enquiry information to respond to requests and discuss potential services. Where you request steps towards a contract, processing is based on those steps. For other business enquiries, our legitimate interest is to communicate with prospective clients. Client information may also be processed to perform a contract or meet applicable legal obligations.
Providers and external links
Email, hosting, and other service providers may process information on our behalf. WhatsApp, Viber, and Calendly links open external services whose own privacy notices apply. Clicking a link may share connection or account information with the destination. External services may process information outside the European Economic Area. Review their privacy notices before using them, and contact us for information about the providers involved in your enquiry or engagement.
Retention and protection
Enquiry records are retained for the time needed to handle the enquiry and any resulting business relationship. Retention of client records also depends on contractual obligations, applicable record-keeping requirements, and the need to establish or defend legal claims. Contact us for information about retention applicable to your records. No website or communication method can guarantee absolute security.
Your rights
Subject to the applicable conditions, you may request access, correction, erasure, restriction, or portability of personal information, and object to processing. Where processing is based on consent, you may withdraw it without affecting earlier lawful processing. Contact us to make a request. You may also lodge a complaint with the Bulgarian Commission for Personal Data Protection or your competent supervisory authority. The European Commission’s information for individuals explains these rights.
Changes to this notice
Last updated: 10 September 2026. We may update this policy as our website or information-handling practices change. The current version is available on this page.