Skip to content
CyberSure, Underwriting Readiness & Insurance GRC
Book a call
Menu

Privacy Policy

Draft awaiting legal approval. This text may still change.

Last updated: [date] · Controller: CyberSure Risk Advisory Ltd., company no. [number], [address] ("CyberSure", "we")

CyberSure respects your privacy. This policy explains what information we collect on cybersure.co.il (the "Site"), why, who we share it with, how long we keep it and what rights you have — under Israel's Protection of Privacy Law, 5741-1981 (including Amendment 13), the Protection of Privacy Regulations (Data Security), 5777-2017, and, where applicable, the EU/UK GDPR.

1. Information we collect

  • Information you provide: name, role, company, business email, mobile number, notes — when you unlock your assessment results, book a consultation, use the contact form or subscribe to updates.
  • Assessment answers and results: your answers to the seven questions, your score, heatmap zone and the revenue tier you selected. Answers are not stored unless you explicitly consent via the consent checkbox before unlocking the dashboard. Without consent, the score is shown in your browser only and is not retained by us.
  • Technical data: IP address (stored hashed), browser and device type, pages viewed, timestamps — for security, abuse prevention and aggregate statistics. See also our Cookie Policy.
  • Correspondence: emails and WhatsApp messages exchanged with us after you book a consultation.

2. How we use it

  1. To display your assessment results and email them to you.
  2. To schedule, confirm and remind you of consultations, including sending the Zoom link.
  3. To send service messages by email and WhatsApp about a meeting or a proposal you requested.
  4. To manage our business relationship with you (lead and proposal management).
  5. To send professional updates — only if you subscribed and confirmed (double opt-in); you can unsubscribe at any time.
  6. To secure the Site, prevent fraud and comply with legal obligations.

Providing information is voluntary, but without it we cannot provide the services above. Where the GDPR applies, our legal bases are consent (results, updates), performance of pre-contractual steps (consultations, proposals) and legitimate interests (security, relationship management).

3. Privilege and confidentiality

Assessment results are a preliminary indication only and do not create an engagement for legal advice. Attorney-client privilege applies to advice provided under a signed engagement. Regardless, everything you submit on the Site is kept confidential and is never disclosed to insurers, brokers or any third party for marketing purposes.

4. Who we share it with

Service providers that process data on our behalf under data processing agreements and security obligations: cloud hosting (Google Cloud), email delivery (SendGrid/Twilio), WhatsApp Business (Meta), Zoom, Google Calendar, bot protection (Cloudflare Turnstile), and the Site's development and maintenance provider (WebXL Digital Solutions). Some providers may process data outside Israel/the EEA, in jurisdictions recognised as providing adequate protection or under appropriate contractual safeguards. We also disclose data where required by law or court order.

5. Retention

  • Assessment results that did not lead to a meeting or enquiry: up to 12 months, then deleted or anonymised.
  • Leads, meetings, proposals and correspondence: for the duration of the business relationship and up to 7 years thereafter, as required by law.
  • Subscriptions: until you unsubscribe.
  • Technical logs: up to 12 months.

6. Your rights

You may access, correct or request deletion of your data, object to marketing and ask how your data is used by contacting [privacy@cybersure.co.il]. We respond within 30 days. Where the GDPR applies, you also have the rights to portability, restriction and to lodge a complaint with a supervisory authority.

7. Security

The Site is served over HTTPS only; data is stored on encrypted servers with access control, two-factor authentication for every authorised user, encrypted backups and monitoring. No system is perfectly secure, but we implement the measures required by the Data Security Regulations and industry practice.

8. Minors

The Site is intended for corporate officers and is not directed at minors. We do not knowingly collect data from anyone under 18.

9. Changes

We may update this policy from time to time; the current version is published on the Site with its date.

Contact: [privacy@cybersure.co.il] · [phone] · [address]

Privacy Policy · CyberSure