Privacy Policy

About DefenXee

This Privacy Policy applies to DefenXee Private Limited (“DefenXee”, “we”, “our”, or “us”), a cybersecurity company incorporated in India and operating globally. DefenXee is the data controller for personal information collected through this website. For privacy-related queries, contact us at privacy@defenxee.com

.

Information We Collect

Information You Provide Directly
  • Contact and enquiry form submissions (name, email, company, message)
  • Demo or product request details
  • Partner or channel programme applications
  • Security vulnerability reports
  • Email correspondence with DefenXee teams
Information Collected Automatically
  • IP address and approximate geolocation
  • Browser type, version, and device information
  • Pages visited, time on site, and referral source
  • Cookie identifiers and session data (see §10)
  • Server log data and error reports
Information from Third Parties
  • Analytics data from third-party providers (e.g. Google Analytics)
  • Business contact information from publicly available sources or partners

How We Use Information

Purpose Examples
Responding to enquiries Contact forms, demo requests, partner applications
Providing services Delivering products, managing accounts, support
Security operations Investigating vulnerability reports, fraud detection
Website analytics Understanding traffic patterns, improving content
Marketing communications Newsletters, product updates (with consent where required)
Legal compliance Regulatory obligations, responding to lawful requests
Business operations Internal record-keeping, audit, and governance

DefenXee will not use your personal information for purposes incompatible with those stated here without first obtaining your consent or establishing another lawful basis.

Legal Basis for Processing (GDPR / UK GDPR)

Where GDPR or UK GDPR applies to our processing of your personal data, we rely on the following legal bases:

Legal Basis When We Rely On It
Consent (Art. 6(1)(a)) Marketing emails, non-essential cookies, optional data sharing
Contract (Art. 6(1)(b)) Processing necessary to fulfil a service or respond to a request
Legal obligation (Art. 6(1)(c)) Compliance with Indian, EU, or other applicable law
Legitimate interests (Art. 6(1)(f)) Website security, fraud prevention, analytics, and business operations — where not overridden by your rights

Where we rely on legitimate interests, you may object to such processing. Please see §09 for how to exercise this right.

Data Sharing

DefenXee does not sell personal data. We may share personal information in the following circumstances:

  • Service providers: Third-party vendors who assist in operating the website, analytics, email delivery, or hosting — under data processing agreements ensuring equivalent protection.
  • Business transactions: Shared in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality obligations.
  • Legal requirements: Disclosed where required by law, court order, or regulatory authority in any applicable jurisdiction.
  • Security: Used to investigate, prevent, or respond to fraud, security incidents, or policy violations.
  • With your consent: For any sharing not described above, we will obtain your prior consent.

International Transfers

DefenXee is headquartered in India. If you access our website from outside India, your personal data may be transferred to, stored, and processed in India or in other jurisdictions where our service providers operate.

Where personal data is transferred from the EU/EEA or the UK to countries that do not have an adequacy decision, we implement appropriate safeguards to ensure data protection. These may include:

  1. Standard Contractual Clauses (SCCs) approved by the European Commission

  2. UK International Data Transfer Agreements (IDTAs)

  3. Other legally recognised transfer mechanisms under applicable data protection laws

In accordance with India’s Digital Personal Data Protection Act, 2023 (DPDP Act), DefenXee will comply with any cross-border data transfer requirements or restrictions as notified by the Government of India, as and when they come into effect.

Where we rely on legitimate interests, you may object to such processing. Please see §09 for how to exercise this right.

Data Retention

DefenXee retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law.

Data Category Retention Period
Enquiry and contact form submissions 3 years from last interaction
Marketing preferences and consent records Until withdrawal of consent + 1 year
Website analytics data 24 months (aggregated/anonymised thereafter)
Security incident reports 5 years from closure
Legal correspondence and contracts 7 years or as required by applicable law
Server and access logs 90 days

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised.

Security Measures

DefenXee implements technical and organisational security measures appropriate to the nature of the data we process and consistent with our position as a cybersecurity company. These include:

  1. Encryption of data in transit (TLS) and at rest where applicable
  2. Access controls and role-based permissions for internal systems
  3. Regular security assessments and vulnerability management
  4. Incident response procedures aligned with applicable breach notification laws
  5. Staff training on data protection and information security obligations

Notwithstanding these measures, no method of transmission over the internet is completely secure. DefenXee cannot guarantee absolute security of data transmitted to or from this website.

In the event of a personal data breach that is likely to result in risk to individuals, DefenXee will notify the relevant supervisory authority and affected individuals in accordance with applicable law.

Your Privacy Rights

Depending on your jurisdiction, you may have some or all of the following rights regarding your personal data:

Right Description Jurisdictions
Access Obtain a copy of your personal data we hold India, EU/EEA, UK, Canada, US (CA), Singapore, Brazil, UAE
Correction Correct inaccurate or incomplete data India, EU/EEA, UK, Canada, Brazil, UAE
Erasure Request deletion of your personal data India, EU/EEA, UK, Brazil
Portability Receive your data in a structured, machine-readable format EU/EEA, UK, Brazil
Objection Object to processing based on legitimate interests or for direct marketing EU/EEA, UK
Restriction Restrict processing in certain circumstances EU/EEA, UK
Withdraw consent Withdraw consent at any time without affecting prior processing All jurisdictions where consent is the legal basis
Non-discrimination Not be discriminated against for exercising privacy rights US (CA — CCPA/CPRA)
Grievance redressal Lodge a complaint with DefenXee’s designated grievance officer India (DPDP Act 2023)

How to Exercise Your Rights

Privacy Requests privacy@defenxee.com

We will respond within the timeframe prescribed by applicable law. You also have the right to lodge a complaint with your local data protection authority.

Cookies & Tracking

This website uses cookies and similar tracking technologies. For full details of the cookies we use, your choices, and how to manage consent, please refer to our Cookie Policy.

In summary, we use strictly necessary cookies for website operation, analytics cookies to understand visitor behaviour (with consent where required), and functional cookies to remember preferences. We do not currently deploy third-party advertising or cross-site tracking cookies.

Children's Privacy

This website is not directed at children under the age of 18. DefenXee does not knowingly collect personal data from minors. If you believe we have inadvertently collected personal data from a child, please contact us at privacy@defenxee.com and we will delete it promptly.

Changes to This Policy

DefenXee may update this Privacy Policy from time to time to reflect changes in law, our practices, or the services we offer. We will publish the updated policy on this page with a revised Last Updated date. Where changes are material, we will use reasonable efforts to notify you — for example, via a website notice or email to registered contacts.

Continued use of the website after an updated policy is published constitutes acceptance of the revised terms.

Contact

For privacy questions, data subject requests, or complaints:

DefenXee Private Limited

India | defenxee.com