Privacy Policy
Draft for review — last updated October 2026.
This notice explains how T.S Squire Assurance Ltd (“we”, “us”), which operates the NetDefenders brand, handles personal data collected through netdefenders.com and during penetration testing engagements.
Who we are
T.S Squire Assurance Ltd, a company registered in the Republic of Cyprus (Company No. [HE______]), registered office [address], Cyprus. Contact: [email protected].
What we collect
- Test requests: your name, company, email, phone (optional), country, the scope you describe, and any notes you send.
- Engagement data: contact details of your staff, and any data we encounter while testing systems you have authorised.
- Technical data: server and security logs (such as IP address and browser) kept to protect this website.
Why we use it, and the legal basis
- To respond to your request and prepare a quote: steps taken at your request before entering a contract (GDPR Art. 6(1)(b)).
- To deliver and invoice the engagement: performance of a contract and legal obligations (Art. 6(1)(b) and (c)).
- To secure this website: our legitimate interests (Art. 6(1)(f)).
We do not sell personal data or use it for advertising. This site does not use tracking or analytics cookies.
Data encountered during testing
We access only what the agreed scope requires, avoid copying personal data wherever possible, store any evidence encrypted, and delete engagement data [X days] after the final report unless you ask otherwise in writing.
Who we share it with
Only service providers that help us run the business (email and hosting providers, our accountant) under appropriate agreements, or authorities where the law requires it.
How long we keep it
Enquiries that do not lead to an engagement: [12 months]. Contract and invoicing records: as long as Cypriot law requires.
Your rights
You can ask for access, correction, deletion, restriction, portability, or object to processing by emailing [email protected]. You may also complain to the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy).