Privacy Policy

1. Who we are

CyberSafe is a cyber-security training company registered in Estonia. Contact: info@cybersafe.ee.

2. What data we collect

Through our contact form you can send us your name, email address, phone number (optional), chosen course, preferred date and a message.

When you submit the form, we also record which marketing channel brought you to us (UTM tags, ad-click IDs such as gclid/fbclid, the referring page, the landing page and the time). Our server adds technical details as well: a short summary of your device and browser, your approximate location (country, region and city, based on network signals) and your IP address. These details are sent with your enquiry so we can see which campaign it came from. When the form is submitted successfully, a Google Analytics generate_lead event is triggered (source, medium, campaign and course).

When you visit the site, we collect anonymised usage statistics through Vercel Analytics: which pages were viewed, the type of device and the geographic region. This data cannot be used to identify you.

We also use Google Analytics (Google's gtag.js) to measure overall traffic. It sets cookies (for example _ga) that hold a pseudonymous identifier, and it may transfer data to Google. You can opt out through your browser settings, a Do-Not-Track signal or Google's opt-out add-on.

3. Why we collect data

We use your contact details only to reply to your enquiry, confirm your booking and send payment instructions.

After the course, we use your contact details to give you access to the Telegram channel.

We use statistics to improve the site. We do not sell data to third parties.

4. Where data is stored

The site is hosted on Vercel (US and EU regions). Telegram messages come directly to us (Telegram LLC). Our email runs on Google Workspace.

These services comply with GDPR and do not share data outside the EU.

5. Your rights

Under GDPR you have the right to request a copy of your data, have it corrected or deleted, restrict its processing and be told if a breach affects your data. Send any request to info@cybersafe.ee and we will reply within 30 days.

6. Data retention

We keep data on active students for 7 years to meet bookkeeping requirements. If you do not book a course, we delete your contact form data after 12 months.

7. Children's data

Children aged 9–14 are booked onto the children's course by a parent or legal guardian. The contact form is intended for adults, and we do not knowingly collect enquiries directly from children.

For the child, we only need what is necessary to run the course: their name for the attendance list and the certificate. We communicate through the parent's or guardian's contact details.

We keep the child's data for the same periods as in section 6 and delete it at the request of the parent or guardian.

8. Contact for questions

For privacy questions, write to info@cybersafe.ee. If you are not satisfied with our reply, you can contact the Estonian Data Protection Inspectorate: aki.ee.