Privacy Policy

Last Updated: December 2024

At Eureka Engine Ltd. ("we", "our", or "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website eurekaengine.co.uk and use our services.

1. Information We Collect

1.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for product notifications
• Contact us via email or contact forms
• Subscribe to our newsletter or marketing communications
• Participate in surveys or feedback requests
• Purchase or inquire about our products and services

This information may include:

• Name
• Email address
• Company name
• Job title
• Phone number
• Billing and delivery addresses

1.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and browsing behavior, including:

• IP address
• Browser type and version
• Operating system
• Referring URLs
• Pages viewed and time spent on pages
• Device identifiers
• Cookies and similar tracking technologies

2. How We Use Your Information

We use the information we collect for the following purposes:

• Product notifications: To send you updates about our USB pen testing tool launch and other product announcements
• Customer service: To respond to your inquiries, provide support, and communicate with you
• Marketing: To send you promotional materials, newsletters, and information about our services (with your consent)
• Business operations: To process transactions, fulfill orders, and manage accounts
• Website improvement: To analyze website usage, improve functionality, and enhance user experience
• Legal compliance: To comply with legal obligations and protect our rights
• Security: To detect, prevent, and address fraud, security issues, and technical problems

3. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your personal data based on the following legal grounds:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes
• Contract: Where processing is necessary for the performance of a contract with you
• Legal obligation: Where we need to comply with legal requirements
• Legitimate interests: Where processing is necessary for our legitimate business interests, provided these don't override your rights

4. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Service providers: Third-party companies that help us operate our website, conduct business, or provide services (e.g., email service providers, hosting providers, analytics services)
• Business partners: Trusted partners who assist in delivering our services, subject to confidentiality agreements
• Legal authorities: When required by law, to enforce our policies, or protect our or others' rights, property, or safety
• Business transfers: In connection with a merger, acquisition, or sale of assets, where your information may be transferred as part of that transaction

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small data files stored on your device that help us:

• Remember your preferences and settings
• Analyze website traffic and usage patterns
• Improve website functionality
• Deliver targeted advertising

You can control cookie settings through your browser preferences. However, disabling cookies may limit certain website features.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication protocols
• Employee training on data protection
• Secure data storage and backup systems

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

8. Your Rights Under UK GDPR

As a data subject in the UK, you have the following rights:

• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Receive your data in a structured, commonly used format
• Right to object: Object to our processing of your personal data
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent
• Right to lodge a complaint: File a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us using the information provided below.

9. Third-Party Links

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information.

11. International Data Transfers

Your information may be transferred to and processed in countries outside the UK. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with UK GDPR requirements.

12. Marketing Communications

With your consent, we may send you marketing communications about our products, services, and promotions. You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in our emails
• Contacting us directly using the information below
• Updating your communication preferences in your account settings (when available)

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website with a new "Last Updated" date. We encourage you to review this policy periodically.

14. Contact Us

15. Data Protection Officer

For data protection inquiries or to exercise your rights under UK GDPR, you may contact our Data Protection Officer at:

Email: [email protected]

16. Supervisory Authority

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we have not handled your personal data in accordance with the law: