Privacy Policy

1. Introduction

Welcome to Muratov IT Security Services ("I," "my," or "me"). This Privacy Policy explains how I handle information when you visit my website at muratov.it or engage my cybersecurity consulting services.

2. Information Collection

2.1 Information You Provide Voluntarily

I collect information you provide when contacting me or requesting services:

• Name
• Email address
• Company name
• Phone number (optional)
• Message content

2.2 Information Collected During Security Assessments

When performing security assessments, I may collect:

• Network and system configuration data
• Security vulnerability information
• User account information (for testing purposes)
• System logs and other technical data

This information is collected only with explicit client authorization as defined in engagement agreements.

2.3 Information Collected Automatically

My website collects standard server logs and analytics including:

• IP address
• Browser type and version
• Operating system
• Referral source
• Pages visited
• Time and date of visit

2.4 Cookie Policy

My website uses only essential cookies required for functionality. No third-party marketing or tracking cookies are deployed.

3. Use of Information

I use collected information for:

• Providing requested security assessment services
• Responding to inquiries
• Fulfilling contractual obligations
• Improving website functionality
• Maintaining security and preventing fraud

I do not:

• Sell personal data to third parties
• Use data for automated decision-making or profiling
• Retain data longer than necessary for service provision

4. Legal Basis for Processing

I process your data based on:

• Your explicit consent when submitting contact forms
• Contractual necessity when providing services
• Legitimate interests in providing and improving services
• Legal obligations for security, fraud prevention and regulatory compliance

5. Data Security

I implement appropriate security measures to protect your data:

• Encryption of sensitive information
• Secure storage of assessment findings
• Access controls and authentication
• Regular security updates and monitoring

6. Data Retention

I retain client data and security assessment information for the duration of our engagement plus:

• Contact information: 3 years after last interaction
• Security assessment data: 2 years after assessment completion
• Website analytics data: 1 year

Information may be retained longer if required by law or for legitimate business purposes.

7. Your Rights

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise these rights, contact me exclusively through the website contact form.

8. International Data Transfers

Your data is stored on secure servers within the European Union. If international transfers are necessary for service provision, appropriate safeguards will be implemented.

9. Third-Party Service Providers

I may use third-party service providers for specific business functions:

• Email services
• Website hosting
• Security testing tools

All service providers are carefully selected and required to maintain appropriate security and confidentiality measures.

10. Changes to This Policy

I may update this Privacy Policy to reflect changes to information practices. I will notify you of material changes via email or website notice before they take effect.

11. Contact Information

If you have questions about this Privacy Policy, please contact me exclusively through the website contact form. For security and privacy reasons, no direct email addresses are provided.