Privacy Policy

Last Updated: October 22, 2026

1. Introduction

Sunvak Boreal Technologies Private Limited (“Sunvak Boreal,” “we,” “our,” or “us”) respects your privacy and is committed to protecting the personal information you share with us.

This Privacy Policy explains how we collect, use, store, disclose, and protect your information when you visit https://sunvakboreal.com/, contact us, submit an enquiry, or request our cybersecurity services.

By using our website, you acknowledge this Privacy Policy. Where consent is legally required, we will obtain it before processing your personal information.

2. Information We Collect

We may collect the following categories of information:

A. Personal and Contact Information

When you submit a contact form, request a consultation, or enquire about our services, we may collect:

• Full name
• Business email address
• Phone number
• Company or organization name
• Service requirements and enquiry messages
• Other information you voluntarily provide

B. Technical Information

When you visit our website, certain information may be collected automatically, including:

• IP address
• Browser type and version
• Device and operating system information
• Pages visited and time spent on the website
• Referring website or traffic source
• Cookies and similar tracking technologies, where applicable

C. Advertising and Analytics Information

If we use Google Ads, Google Analytics, or similar services, we may process information about website visits, advertising interactions, conversions, and campaign performance, subject to applicable settings, consent requirements, and the relevant service providers’ policies.

3. How We Use Your Information

We may use your information to:

• Respond to enquiries and consultation requests.
• Provide information about our penetration testing, vulnerability assessment, VAPT, application security, API security, and related services.
• Contact you regarding your requested services or quotation.
• Understand your business requirements and recommend appropriate services.
• Improve our website, services, and user experience.
• Measure advertising performance and website conversions.
• Maintain website security and prevent spam, fraud, and unauthorized activity.
• Comply with applicable legal and regulatory obligations.

We will not use your personal information for unrelated purposes without an appropriate legal basis.

4. Legal Basis and Consent

We process personal information where permitted by applicable law, including when:

• You provide consent where required.
• Processing is necessary to respond to your request or take steps at your request before entering into a business relationship.
• Processing is necessary to comply with legal obligations.
• Another lawful basis is available under applicable data protection legislation.

Where processing relies on consent, you may withdraw your consent, subject to applicable law.

5. Cookies and Tracking Technologies

Our website may use cookies, pixels, tags, and similar technologies to:

• Enable essential website functionality.
• Remember preferences.
• Understand website traffic and performance.
• Measure advertising campaigns and conversions.
• Improve website security and user experience.

You may be able to manage cookies through your browser settings or any cookie preference tool available on our website. Disabling certain cookies may affect website functionality.

Where required by applicable law, non-essential analytics and advertising technologies will be used only after obtaining the necessary consent.

6. Google Ads and Third-Party Services

We may use Google Ads and other third-party services to advertise our services, measure campaign effectiveness, and understand how visitors interact with our website.

These services may use cookies or similar technologies to measure conversions and deliver or personalize advertisements, depending on the configuration and your consent preferences.

We may also use third-party providers for:

• Website hosting and maintenance
• Email delivery and communication
• Spam prevention and website security
• Analytics and advertising measurement
• Customer relationship management and lead management

These providers may process information on our behalf or under their own privacy policies, depending on the service. We encourage you to review the privacy policies of relevant third-party providers.

7. How We Share Your Information

We do not sell your personal information as part of our ordinary business practices.

We may share information:

• With authorized employees or representatives who need it to respond to your enquiry.
• With service providers who support our website, communications, analytics, and business operations.
• Where required by law, regulation, court order, or a lawful request from a competent authority.
• When necessary to protect our rights, website, users, or business against fraud, abuse, or security threats.
• In connection with a merger, restructuring, acquisition, or transfer of business, subject to applicable law.

We take reasonable steps to ensure that information shared with service providers is handled appropriately.

8. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, including responding to enquiries, managing business relationships, maintaining records, resolving disputes, and meeting legal requirements.

Retention periods may vary depending on the type of information, the nature of the enquiry, applicable legal requirements, and operational needs.

When information is no longer required, we will take reasonable steps to delete it or anonymize it, subject to applicable law and legitimate record-retention requirements.

9. Data Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure.

However, no website, electronic transmission, or storage system can be guaranteed to be completely secure. You should avoid submitting passwords, confidential credentials, payment card details, or sensitive security information through general enquiry forms.

If you identify a potential security o