Privacy Policy

Last Updated: March, 2025

At CybelAngel (“us”, “we”, “our” or the “Company”), as a cybersecurity company dedicated to protecting the data security and privacy of consumers worldwide, we place great value on the privacy of users and visitors of our Website. This Privacy Policy (the “Policy”) describes our privacy practices for the activities set out in this Policy. In accordance with your rights, we inform you how we gather, use, store, access, and otherwise process information relating to individuals who access this Website. In this Policy, personal data (“Personal Data”) refers to any information that on its own, or in combination with other available information, can be used to identify an individual.

Our Company is committed to protecting your privacy in accordance with the following regulations:

  • the EU’s General Data Protection Regulation (GDPR)
  • California’s Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA) and California Online Privacy Protection Act (CalOPPA)
  • Colorado Privacy Act (CPA)
  • Utah Consumer Privacy Act (UCPA)
  • Connecticut Data Privacy Act (CTDPA)
  • Virginia Consumer Data Protection Act (VCDPA)
  • Brazil’s Data Protection Legislation (LGPD)
  • South Africa’s Protection of Personal Information Act (POPIA)
  • Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and the applicable provincial legislations
  • Quebec Law 25

Scope of the Policy & Exclusions

This Policy applies to the CybelAngel Website (www.cybelangel.com) and when you interact with our Company by doing any of the following:

  • Visit our Website and any of its pages which link to this Policy
  • Receive any communication from us including newsletters, emails, calls, or texts / SMS

This Policy does not apply to the use of the CybelAngel platform or any CybelAngel Products or Services–please instead refer to the Data Processing Policy.

This Policy also does not apply to third-party applications, websites, products, services or platforms that you may access through non-Company links which may appear on the Website (“Third-Party Links”). These Third-Party Links are owned and operated independently from us, and have their own separate privacy and data collection practices. Any Personal Data provided by you to these Third-Party Links will be governed by the third-party’s own privacy policy. Our Company accepts no liability for the actions or policies of these Third-Party Links, and we are not responsible for the content or privacy practices of such Third-Party Links.

If you do not agree with any aspect of the Policy, please do not continue to use our Website and be aware that continued use of our Website represents your agreement to follow the terms of this Policy.

CybelAngel’s California Privacy Policy applicable to all website users is available here.

Processing Activities

This Policy applies when you interact with us by doing any of the following:

  • Make use of our application and services as an authorized user
  • Visit any of our websites that link to this Privacy Statement
  • Receive any communication from us including newsletters, emails, calls, or texts / SMS

What Information Do We Collect?

(1) Personal Data (having the same meaning as under GDPR): examples include your name, demographic information, physical location, phone number and other information that could be used to identify who you are. CybelAngel is a data controller for all Personal Data collected from our website.

(2) Professional information: examples include your profession, job title, career activities, employer, or other information about your past or current professional life.

(3) Browsing information: examples include information collected when you interact with our website, like your IP address, the specific webpages you visited, and when you accessed them.

(4) Website form and chat data: any information provided by submitting a website form or interacting with our chat bot.

We do not knowingly collect Personal Data from children under the age of 18 Years

How Do We Collect Personal Data and Information?

Our Company collects Personal Data from the following sources:

  • From You. You may give us your email, job title, email, phone number, employment data, feedback and other related information, by filling in forms, entering information online or by corresponding with us by phone, email or otherwise. This includes Personal Data you provide, for example, when you:
    • Express interest in our products or services;
    • Request a demonstration of our products or services;
    • Subscribe to our newsletter or other similar communications;
    • Contact us with an inquiry or to report a problem (by phone, email, or social media).
  • Automated technologies or interactions: As you interact with our Website, we may automatically collect the types of data as described above as well as: device data about your equipment, usage data about your browsing actions and patterns, and contact data where tasks carried out via our Website remain uncompleted, such as incomplete orders or abandoned baskets. We collect this data by using cookies, server logs and other similar technologies. Please see our Cookies and Tracking Technologies section (below) for further details.
    • Cookies & Tracking Technologies: Our website uses cookies and tracking pixels to facilitate your browsing, improve the website for all visitors, and collect personal information used by third-party service providers to personalize ads that you may see on the Internet. Some cookies and tracking pixels are necessary, and you cannot opt-out of them when using our site. Deleting them will impair the functionality of our website. Those related to service providers for analytics and third-party advertising are optional, such as tracking pixels implemented in cooperation with our partner NextRoll (https://www.nextroll.com/privacy), and you can opt-out of them any time by clicking the button here: Decline
Some Internet browsers include “Do Not Track” tools, and you can use these tools to control how your browser interacts with and uses cookies. Such tools facilitate private browsing or may enable a “Do Not Track” feature. For more information about the relevant capabilities of common browsers in relation to these and similar tools, please see below:
Should you provide us, or our service providers, with any Personal Data relating to other third party individuals, you represent that you have the authority to do so and acknowledge that it will be used in accordance with this Policy. If you believe that your Personal Data has been provided to us improperly, or to otherwise exercise your rights relating to your Personal Data, please contact us by using the information set out in the “Contact Us” section below.

How Do We Use Information We Collect?

We collect and use your Personal Data with your consent for the purposes of providing, maintaining, and developing our products and services and understanding how to improve them.

These purposes include:

(1) To enable visitors to access and navigate our website, to keep the website functioning properly and efficiently, to troubleshoot, and for other strictly necessary purposes.

(2) To analyze behavior on our website for the purpose of improving its design and functionality, your browsing experience, our services, or to help make internal business decisions made by different teams at CybelAngel.

(3) For internal marketing and sales purposes, including identifying and reaching out to visitors who might be interested in receiving more information about our services, or to help schedule a meeting with someone at CybelAngel.

(4) To facilitate a transaction or carry on a business conversation or relationship already involving you or someone affiliated with your business.

(5) To respond to any request or inquiry that you or someone at your company may have made to CybelAngel, or to solicit your opinion about our website or services.

(6) To help resolve commercial and other disputes related to our business and make legally required disclosures in response to requests or demands from courts or government authorities.

(7) To enable third-party marketing efforts by our services providers, including by assisting these service providers to show you personalized ads on other websites. Email addresses collected may be hashed, stored and combined with other identifiers for cross-device recognition purposes, personalized ads, measurement, and analytics. To learn more, and exercise your rights related to this use of information, please see the Cookies & Tracking Technologies section above.

(8) To prevent and detect security problems, illegal activities and illicit business activities, including fraud.

Where we process your Personal Data to provide a product or service, we do so because it is necessary to perform contractual obligations. All of the above processing is necessary in our legitimate interests to provide products and services and to maintain our relationship with you and to protect our business, for example, against fraud. Consent will be required to initiate services with you. New consent will be required if any changes are made to the type of data collected. If you fail to provide consent, some services may not be available to you.

Disclosures & Sharing

We will share your Personal Data with third parties only in the ways set out in this Policy or set out at the point when the Personal Data is collected.

(1) We disclose information as needed to prevent or respond to security problems, illegal activities, illicit behavior, fraud, legal process, court or government inquiries, contract violations, policy violations, or to protect the property or safety of ourselves, our customers or others, in each case only to the extent permitted or required (as the case may be) by applicable laws, rules, and regulations.

(2) We disclose information to third-party service providers that we engage for hosting services, data analytics, financial processing, and digital communications, in each case to the extent strictly necessary. Accordingly, under GDPR, you do not have the right to opt-out of these disclosures. These service providers are Salesforce/Pardot (forms), HubSpot, Chili Piper, Google (hosting services) and Drift.

(3) We also disclose information to third-party marketing providers that we engage to show you more personalized and relevant ads on the Internet. These services providers are LinkedIn, Google (advertising services), Facebook, ZoomInfo, Salesforce/Pardot (tracking), HubSpot, and RollWorks. To learn more, and exercise your rights related to these disclosures, please see the Cookies & Tracking Technologies section above.

(4) For all of the foregoing purposes, CybelAngel affiliates share information with each other. These affiliates include our companies located in the United States, France and the United Kingdom, as well as any affiliated companies that are subsidiaries of or under common control with these companies, as well as their investors.

International Data Transfer and Storage

Where possible, we store and process data on servers within the general geographical region where you reside (this may not be within the country in which you reside). Your Personal Data may also be transferred to, and maintained on, servers residing outside of your state, province, country or other governmental jurisdiction where the data laws may differ from those in your jurisdiction. We will take reasonable steps to ensure that your Personal Data is treated securely and in accordance with this Policy and applicable data protection laws. Data may be kept in other countries that are considered adequate under your laws. 

Data Retention

CybelAngel will only retain your Personal Data for as long as needed for the purpose for which that data was collected and to the extent required by applicable law. Once we no longer need the Personal Data, we will remove it from our systems and/or take steps to anonymize it.

Merger or Acquisition

In the event that CybelAngel is involved in a merger, acquisition or asset sale, we may transfer Personal Data. We will provide notice via this webpage before your personal information is transferred and becomes subject to a different privacy policy. 

How We Secure Your Data

CybelAngel has implemented appropriate operational safeguards and security measures to prevent Personal Data from being used, lost, or accessed in an unauthorized way, altered or disclosed. Any third party who is contracted with us to process Personal Data on our behalf is required to have security measures in place to protect Personal Data in accordance with applicable law. In the event of a Personal Data breach, we will notify you and any applicable regulator as legally required.

Visitor Rights

Your rights are subject to local data privacy regulations based on your geographical location and citizenship. These rights may include:

  • Right to Access – You have the right to learn if we are processing your Personal Data and to request a copy of your Personal Data being process.
    • Applicable regulations: CCPA/CPRA, CPA, CTDPA, GDPR Article 15, LGPD, PIPEDA, POPIA, UCPA, VCDPA 
  • Right to Rectification – You have the right to have incomplete or inaccurate Personal Data belonging to you and processed by us rectified.
    • Applicable regulations: CPRA, CPA, CTDPA, GDPR Article 16, LGPD, PIPEDA, POPIA, VCDPA 
  • Right to be Forgotten (right to erasure) – You have the right to request deletion of Personal Data that we process about you, unless we need to retain such data to comply with our legal obligations or  establish, exercise or defend legal claims.
    • Applicable regulations: CCPA/CPRA, CPA, CTDPA, GDPR Article 17, LGPD, POPIA, UCPA, VCDPA
  • Right to Restriction of Processing – You have the right to restrict our processing of your Personal Data under certain circumstances. In this case, we will not process your Data for any purpose other than storing it.
    • Applicable regulations: GDPR Article 18, LGPD 
  • Right to Portability – You have the right to obtain Personal Data in a structured, electronic format, held by us about you, and to transmit such Personal Data to another data controller, provided the Personal Data is (a) provided to us by you, and (b) processed on the basis of your consent or to perform a contract with you or a third party that subscribes to our services.
    • Applicable regulations: GDPR Article 20, LGPD, PIPEDA
  • Right to Opt Out – You have the right to opt out of the processing of your Personal Data for purposes of: (1) Targeted advertising; (2) selling Personal Data; and/or (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. Under the CPRA, you have the right to opt out of the sharing of your Personal Data to third parties and our use and disclosure of your Sensitive Personal Data necessary to provide the products and services reasonably expected by you.
    • Applicable regulations: CPRA, CPA, CTDPA, UCPA, VCDPA 
  • Right to Objection – If our legal justification for processing your Personal Data is our legitimate interest, you have the right to object to such processing based on your particular situation. We will abide by your request unless we have an overriding, compelling legitimate grounds for processing or if we need to continue to process the Personal Data to establish, exercise or defend a legal claim.
    • Applicable regulations: GDPR Article 21, LGPD, POPIA 
  • Nondiscrimination/nonretaliation – You have the right not to be denied service for exercising your rights.
    • Applicable regulations: CCPA/CPRA, CPA, CTDPA, UCPA, VCDPA 
  • File an Appeal – You have the right to file an appeal based on our response to your exercise of your rights hereunder. Should you disagree with the resolution of the appeal, you have the right to contact the relevant attorney general.
    • Applicable regulations:
      • CPA: If you are based in Colorado, please visit this website to file a complaint.
      • CTDPA: If you are based in Connecticut, please visit this website to file a complaint.
      • VCDPA: If you are based in Virginia, please visit this website to file a complaint.
  • File a Complaint – You have the right to bring a claim before their competent data protection authority.
    If you are based in the EEA, please visit https://edpb.europa.eu/about-edpb/about-edpb/members_en for a list of local data protection authorities.
    • Applicable regulations: GDPR Article 77, LGPD, POPIA 

If you have consented to allow us to process your Personal Data, you have the right to withdraw your consent at any time, free of charge.. If you wish to withdraw your consent, please use the Contact Us section below.

You can make a request to exercise any of your rights listed above in relation to your Personal Data by sending the request to our DPO using the Contact Us section below. For your own privacy and security, at our discretion, we may require you to prove your identity before providing the requested information.

Modifications to this Policy

We may modify this Policy at any time. If we make changes to this Policy then we will post an updated version of this Policy at this website. You can check to see the timing of our last update by referring to the “Last Updated” date above.

Contact Us

To exercise any of your rights, unsubscribe from our email list, request your data to be deleted, or ask a question about your data privacy, we can be contacted as detailed below:

(1) By email, at [email protected]

(2) At the following address: CybelAngel, ATTN: Data Privacy Officer, 51 rue Le Peletier, 75009 Paris.