Privacy Policy

1. Scope

The purpose of this privacy policy is to provide you with information about how we handle your personal information. This policy clearly outlines the lawful reason why data is held and used by Elarian Cyber Daragh McDermott (hereafter referred to as Elarian Cyber) and to clarify the definition of a 'customer'.

Your personal data is controlled by Elarian Cyber, a company registered in Poland (REGON: 542799383).

2. About Us

Elarian Cyber is a Poland based cyber security company providing penetration testing services, social engineering services, Red Team services, and security consultancy.

We are committed to protecting and respecting your privacy and complying with the principles and spirit of any applicable data protection laws. This policy sets out the basis upon which any personal data that we either collect from you or is provided to us will be processed.

3. The Data We Collect

In order to deliver our service, we may ask you to provide personally identifiable information (PII) that can be used to contact you and identify you as part of the service. This information may include, but not be limited to, the following:

First Name and Last Name
Business Address
Phone Number
Email Address

We may additionally collect other information as part of the services we deliver, which will be covered under contracts with our clients.

4. How We Obtain Your Data

Most PII we process is provided to us directly by our customers for the following reasons:

Information provided by filling in forms on our website (contact form, job applications, etc.);
Information required in order to deliver the services you have contracted with Elarian Cyber;
Contact information to provide you with marketing and research information;
Information provided as an employee to process and manage your employment;

We may additionally receive PII indirectly from third parties as part of a sales referral.

5. How We Use Your Data

Elarian Cyber use the information that you have provided us in order to:

Ensure the content from our website is presented in the most effective manner;
Carry out our obligations resulting from contracts entered into between you and Elarian Cyber;
Provide you with information, products, or services that you request from Elarian Cyber or which we feel may be relevant to you;
To ask you to complete optional customer feedback surveys that will be used to enhance our services;
Maintain a record of communications we have sent to you and your interaction with them.

We will hold your data for one or more of the following reasons:

Legitimate Interest
Contractual
Opting In Consent

If Elarian Cyber ask you to provide personal information to comply with a legal requirement or to enter into a contract with you, we will make this clear at the relevant time and advise you whether the provision of your data is mandatory or optional.

6. Information Security

Elarian Cyber will take all necessary steps to ensure that your data is treated securely and protected from unauthorised and unlawful access or use. Per our obligations, Elarian Cyber will not transfer personal data relating to individuals based within the European Economic Area (EEA) outside of the EEA without your express consent.

7. Recipients of Personal Data

Elarian Cyber will share information about you with our suppliers who process data on our behalf to help us to provide services to you. These recipients will include:

Subcontractors used to assist in the delivery of our services.

8. Data Retention Period

Elarian Cyber will hold information about you in our systems only for as long as we need it and only for the purposes for which we collected the data, which is as follows:

If you have used our services (to include the purchase of services/products, engaging with email marketing, or downloading content) Elarian Cyber will retain and process information about you. In the event you would like to stop receiving marketing emails or require us to delete your data, Elarian Cyber. will comply with any request made by you.
Elarian Cyber will hold details for a primary contact for any ongoing services or contracts for as long as legitimate interest requires us to do so.
Personal data gathered as part of the delivery of services about you, your employees or customers will be maintained for the minimum period as stipulated by regulation and/or applicable legislation.
Data gathered by consent will be held until that consent is removed or revoked.
Personal data associated with the processing of subject access requests, disputes, disciplinary, or police matters will only be kept as long as necessary for those purposes.

9. Your Rights As A Data Subject

Per the General Data Protection Regulation (GDPR) you, the Data Subject, are granted individual rights, which are summarised below:

Right to be informed - You have the right to know what data we collect and why, and how that data is processed.
Right of Access - You have the right to obtain a copy of any information we hold about you.
Right of Rectification - If you feel any data that we hold about you is inaccurate, you have the right to ask us to correct or rectify it.
Right of Erasure/Right to Be Forgotten - You have a right to ask us to erase information about you where you can demonstrate the data we hold is no longer needed by us, or if you withdraw the consent upon which our processing is based, or if you feel your data is being unlawfully processed.
Right to Restriction of Processing - You have a right to request we refrain from processing your data where you contest its accuracy or the legality of processing and you have opposed its erasure, or where we do not need to hold your data any longer but you need us to in order to establish, exercise, or defend any legal claims, or we are in dispute about the legality of our data processing.
Right to Portability - You have a right to receive any personal data that you have provided to us in order to transfer it to another data controller. This is called a data portability request.
Right to Object - You have the right to object to our processing of your personal data where the basis of the processing is our legitimate interests.
Right to Withdraw Consent - You have the right to withdraw your consent for the processing of your data where the processing is based on consent. You additionally have the right to opt-out of any marketing communications we send to you at any time.

10. Updates To Our Policy

Last Policy Update: 12/09/2025

Any changes we make to our Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by timestamped communication.

11. Contact Us

If you have any questions about this Privacy Policy or would otherwise like to contact us to make a request, please email us at privacypolicy@elariancyber.com