Privacy Policy

This Policy applies to website visitors, prospective clients, business contacts, newsletter subscribers, IAM assessment participants, job applicants, contractors, consultants and other individuals who interact with CYBRELI through our public website and related business communications.

This Policy covers personal information that CYBRELI controls for its own business purposes. Where CYBRELI processes personal information on behalf of a client during a professional services engagement, the applicable client agreement, statement of work, data processing addendum or client privacy notice may also apply.

This Policy covers:

• Website and footer newsletter interactions.
• Contact page business inquiries.
• Identity Security and IAM maturity assessment submissions.
• Careers page browsing, job applications and resume uploads.
• Business communications about advisory, managed services, implementation, training and IAM transformation services.

This Policy applies to CYBRELI website pages operated by or for CYBRELI, including the current website at https://cybreli.com and the final production domain once published.

The CYBRELI website may link to third-party sites, tools, platforms, social media pages, cloud services, analytics services, job boards or security tools. Those third parties are responsible for their own privacy practices. You should review their privacy notices before providing information to them.

CYBRELI limits collection to information reasonably necessary for identified business, website, recruitment, security and service purposes. The information collected depends on how you interact with us.

• Website and technical information: IP address, browser type, device type, pages viewed, referring page, timestamps, cookie identifiers, analytics events, security logs and interaction data.
• Newsletter information: Email address, subscription status, communication preferences, consent record and unsubscribe record.
• Contact form information: First name, last name, business email, organization, point of interest, message content and related consent confirmations.
• IAM assessment information: Name, business email, organization, role, industry, organization size, assessment responses, maturity indicators, security context, requested recommendations and communication preferences.
• Career and application information: Name, email, phone number, country or location, current role, years of experience, primary expertise, industry experience, current or recent company, tools and technologies, LinkedIn profile, key projects, resume or CV, availability, preferred work type, portfolio, compensation expectations and application responses.
• Business relationship information: Client, supplier, partner and professional contact details; meeting notes; communications; procurement, billing and contract records.
• Security and service information: Identity, access, log, diagnostic, threat, incident, ticketing and support information provided in connection with services or assessment discussions.

CYBRELI uses personal information for the purposes identified at or before collection and for related purposes that a reasonable person would consider appropriate in the circumstances.

• Operate, secure, maintain, analyze and improve the website.
• Respond to business inquiries and schedule advisory, managed services, implementation or training discussions.
• Provide IAM assessment experiences, analyze assessment responses and prepare relevant recommendations.
• Send newsletters, insights, event updates and service communications where permitted.
• Evaluate candidates, manage applications, schedule interviews, verify information where permitted, and consider applicants for current or future roles.
• Provide professional services, administer contracts, manage billing and procurement, support client delivery and maintain business records.
• Protect systems, investigate incidents, prevent spam or abuse, comply with legal obligations and enforce CYBRELI rights.

Where required, CYBRELI obtains meaningful consent before or at the time personal information is collected, used or disclosed. Consent may be express, implied by your interaction with us where permitted, or based on another lawful authority available under applicable law.

For individuals in jurisdictions that require a lawful basis, CYBRELI may rely on consent, steps taken before entering a contract, performance of a contract, legitimate business interests, legal obligations, security, protection of legal rights, or another lawful basis available under applicable law.

You may withdraw consent where processing is based on consent, subject to legal, contractual, security, backup, dispute resolution and retention limits. Withdrawing consent may affect CYBRELI's ability to provide a requested newsletter, response, assessment, application process or service.

CYBRELI does not sell personal information. We may disclose personal information where reasonably necessary for the purposes described in this Policy and where permitted by applicable law.

• Website, hosting, cloud, analytics, security, reCAPTCHA, email, CRM, applicant tracking, file storage, communications and business operations service providers.
• CYBRELI personnel, contractors, consultants, interviewers, hiring managers, subcontractors and delivery partners who need access for authorized purposes.
• Clients or prospective clients where relevant to service delivery, staffing, qualifications, project delivery, security requirements or contractual requirements.
• Professional advisors, insurers, auditors, legal counsel, banks, payment processors and other business advisors.
• Regulators, law enforcement, courts, government authorities or other parties where required or permitted by law.
• Transaction counterparties in connection with a merger, acquisition, financing, reorganization, sale of assets or similar transaction, subject to appropriate safeguards.

CYBRELI uses administrative, technical, physical and organizational safeguards appropriate to the sensitivity of the information. These safeguards may include access controls, least-privilege permissions, authentication controls, confidentiality obligations, secure storage, encryption where appropriate, monitoring, logging, backup controls, vendor due diligence and incident response practices.

No website, network, system or transmission method is completely secure. CYBRELI cannot guarantee absolute security, but we work to protect information against unauthorized access, use, disclosure, alteration, loss and destruction.

CYBRELI retains personal information only as long as reasonably necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law. Retention may depend on the type of information, collection purpose, contract requirements, consent records, legal obligations, dispute resolution needs, security requirements, backup cycles and business records.

Newsletter information is generally retained while the subscription remains active and for a reasonable period afterward to maintain unsubscribe and compliance records. Candidate information is retained for the recruitment process and, where permitted or consented to, for future opportunity consideration.

CYBRELI may use cookies, pixels, tags, local storage, analytics tools and similar technologies to operate the website, remember preferences, measure performance, understand content engagement, secure forms and improve services.

CYBRELI may use Google Analytics, LinkedIn Insight Tags or similar analytics and advertising technologies if configured on the website. Where required, non-essential analytics, advertising or profiling technologies should be subject to consent or preference controls. You may also use browser settings and third-party opt-out tools to manage certain tracking choices.

If CYBRELI uses Google reCAPTCHA to protect forms from spam and abuse, Google may collect information such as IP address, browser details and interaction data for security purposes. Use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.

• Digital Advertising Alliance opt-out portal
• Google Privacy Policy
• Google Terms of Service

Personal information may be processed, stored or accessed in Canada, the United States, India, the European Economic Area, the United Kingdom or other jurisdictions where CYBRELI personnel, contractors, consultants, service providers, clients or delivery partners operate.

When personal information is processed outside your province, state or country of residence, it may be subject to the laws of that jurisdiction, including lawful access by courts, regulators, law enforcement or government authorities. CYBRELI uses contractual, organizational and technical safeguards intended to protect personal information in cross-border processing.

For transfers from Quebec, the EEA, the United Kingdom or other jurisdictions that require transfer assessments or specific safeguards, CYBRELI should complete the required assessment and implement appropriate safeguards before the transfer occurs.

Subject to applicable law and verification of identity, you may request access to personal information CYBRELI holds about you, correction of inaccurate information, withdrawal of consent, deletion, restriction, portability, objection to certain processing, or information about CYBRELI privacy practices.

CYBRELI may decline or limit a request where permitted or required by law, including where access would reveal another person's information, confidential commercial information, privileged information, security-sensitive information, information subject to legal hold, or information CYBRELI is required to retain.

Depending on your jurisdiction, you may also have rights under Canadian provincial privacy laws, Quebec privacy law, EEA or UK data protection law, California or other U.S. state privacy laws, India privacy law, or other applicable privacy laws.

To exercise your privacy rights, submit a request, or ask questions about this Privacy Policy, please contact CYBRELI using the details below:

• Privacy Email: privacy@cybreli.com
• General Email: info@cybreli.com
• Phone: +1 506-429-7170
• Location: Fredericton, New Brunswick, Canada

We may need to verify your identity before processing your request and will respond within the timeframe required by applicable law.

If you have a privacy question, request or complaint, contact CYBRELI first so the matter can be reviewed and addressed. If you are not satisfied, you may have the right to contact the Office of the Privacy Commissioner of Canada, a provincial privacy commissioner, a data protection authority in your jurisdiction, or another applicable privacy regulator.

CYBRELI may update this Policy from time to time. The updated version will be posted on the website with a new last updated date. Where required by law, CYBRELI will provide additional notice or request renewed consent for material changes.