Last updated: 28 September 2026

This policy explains how HebeSec Technologies Private Limited (“HebeSec”, “we”, “us”) collects and uses personal data through hebesec.com and when you contact us about our services. It also explains the choices and rights you have.

1. Who we are

HebeSec Technologies Private Limited decides how the personal data described in this policy is used. We are the data controller under the GDPR and the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023.

Registered office: Navarathina Nagar, Opp. Shri CK Mahal, Karaikudi, Tamil Nadu 630001, India. Email: info@hebesec.com. Phone: +91 95660 22629.

2. What we collect

• Information you send through our forms. Our contact, appointment and service enquiry forms ask for your name, email address, mobile number, the service you are interested in and your message or requirements.
• Information you share when you contact us directly, for example by email, phone or WhatsApp.
• Website usage data. Our analytics and advertising tools collect information such as the pages you visit, how you interact with them, your device and browser, your approximate location and the site that referred you. Details are in section 3.
• Security data. Our web server and security software record IP addresses and request details to protect the site from attacks and spam.

When we deliver services to a client, such as VAPT, penetration testing, security assessments, forensics or training, any personal data we handle as part of that work is governed by the contract for that engagement.

3. Cookies and third-party tools

We use the following tools on hebesec.com. Some of them place cookies or similar technologies on your device.

• Google Analytics and Google Tag Manager: to understand how visitors use the site so we can improve it.
• Google Ads: to measure how well our advertising works and to show relevant ads.
• Microsoft Clarity: to see heatmaps and recordings of how visitors move through pages, so we can fix problems in the site’s design.
• Google reCAPTCHA: to protect our forms from spam and abuse. Google collects device and usage information to do this.
• Google Fonts and Google Maps: to display our fonts and the map on our contact page. Google receives your IP address when these load.
• WhatsApp and WhatsForm: to let you contact us over WhatsApp if you choose to.
• Instagram: to show posts from our Instagram account.

Analytics and advertising cookies are set only if you agree to them in our cookie banner. Until you do, Google’s tags and Microsoft Clarity run in a restricted mode that sets no cookies. Google reCAPTCHA, which protects our forms, is always on.

You can change your choice at any time with the Cookie settings button at the bottom left of every page. You can also block or delete cookies in your browser settings. Blocking some cookies may affect how parts of the site work.

4. How we use your data

• To reply to your enquiries and schedule appointments.
• To prepare proposals and deliver the services you request.
• To send you information about our services that you have asked for.
• To understand and improve how our website performs.
• To measure the results of our advertising.
• To keep our website and forms secure.
• To meet our legal obligations.

We do not sell personal data.

5. Legal basis

If you are in the European Economic Area or the United Kingdom, we process your data to take steps at your request before a contract (answering enquiries and preparing proposals), for our legitimate interests (running and securing our website), on your consent for analytics and advertising cookies, and to meet legal obligations.

Under India’s Digital Personal Data Protection Act, 2023, we process the data you choose to give us for the purpose you gave it, and on your consent where the Act requires it. You can withdraw consent at any time by emailing us. This does not affect processing that has already taken place.

6. Who we share it with

• Service providers that host our website, deliver our email and route form enquiries to our team (including Pabbly Connect), acting on our instructions.
• Google, Microsoft and Meta, as providers of the tools listed in section 3.
• Professional advisers such as lawyers and auditors, under a duty of confidentiality.
• Authorities, when the law requires us to disclose data.
• A buyer or successor if our business is sold or merged, who must continue to protect your data in line with this policy.

7. International transfers

We are based in India. Some of our service providers, such as Google, Microsoft and Meta, may process data in other countries, including the United States. When your data moves across borders, we rely on those providers’ contractual safeguards to keep it protected.

8. How long we keep it

We keep form submissions and enquiries for as long as we need them to respond and to manage any business relationship that follows, and then delete them. Analytics data is kept according to the retention settings of the tools listed in section 3. Security logs are kept for a limited period and then deleted.

9. Security

All traffic to hebesec.com is encrypted with HTTPS, the site is protected by a web application firewall and spam protection, and access to enquiries is limited to staff who need it. No system is completely secure, but we work to protect your data, and we will notify affected people and regulators of a breach where the law requires it.

10. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected or completed;
• have your data erased;
• withdraw consent you have given;
• object to or restrict certain processing, and receive your data in a portable format (EEA and UK);
• nominate another person to exercise your rights if you die or become incapacitated (India);
• complain to a regulator, such as your local data protection authority or the Data Protection Board of India.

To use any of these rights, email info@hebesec.com. We may need to confirm your identity first, and we will respond within the time the law allows.

11. Grievance Officer

If you have a concern about how we handle your personal data, contact our Grievance Officer at info@hebesec.com or by post at our registered office. We will acknowledge your complaint and respond within the time required by applicable law.

12. Children

Our website and services are meant for businesses and professionals and are not directed at children. We do not knowingly collect personal data from anyone under 18.

13. Other websites

Our site links to other websites and social networks, such as LinkedIn, Instagram, Facebook, WhatsApp and hebeguard.com. Their own privacy policies apply when you visit them.

14. Changes to this policy

If we change this policy, we will update the date at the top of this page. For significant changes, we will also add a notice here.

15. Contact us

HebeSec Technologies Private Limited, Navarathina Nagar, Opp. Shri CK Mahal, Karaikudi, Tamil Nadu 630001, India. Email: info@hebesec.com. Phone: +91 95660 22629.