Cyber Castrum LLPPrivacy Policy
This notice explains how Cyber Castrum LLP (“we”, “us”) handles personal data in connection with this website, cybercastrum.com.
The short version. This website is a single static page. It sets no cookies, runs no analytics, and loads no third-party scripts, fonts or trackers. There is no contact form. We only hold personal data about you if you choose to email, message or call us.
1. Who we are
Cyber Castrum LLP is a cybersecurity practice based in Hyderabad, India, providing penetration testing, application and AI/LLM security, private on-premise AI, and cyber security training. For the purposes of India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”), we are the Data Fiduciary for the personal data described in this notice.
2. What this website collects
Directly: nothing. There is no contact form, no sign-up, no account, no newsletter, no comment box and no file upload on this site. The page stores nothing in your browser — no cookies, no local storage, no session storage.
Indirectly: as with any website, serving a page requires our hosting provider to process the technical details of your request. See section 4.
3. Personal data you choose to send us
The contact section offers an email link and a WhatsApp link. If you use either, we receive whatever you choose to include — typically your name, email address, phone number, company, and a description of what you need.
| What | Why | How long |
|---|---|---|
| Contact and enquiry details you send us | To answer your enquiry, scope the work, and provide the services you ask for | As long as needed to respond and, where we go on to work together, for the duration of the engagement plus any period required by law or contract |
| Correspondence with clients and prospective clients | Delivering the engagement, and meeting our legal and accounting obligations | As required by applicable Indian law |
We do not sell personal data. We do not share it for advertising. We do not use it to train machine learning models. We do not build profiles on visitors.
4. Service providers
Two providers process data on our behalf, purely as infrastructure:
| Provider | Role | What it involves |
|---|---|---|
| Cloudflare, Inc. | Website hosting and content delivery | Serving this page. Cloudflare processes request metadata such as IP address, user agent and timestamp in order to deliver and protect the site. We have not enabled Cloudflare’s analytics product on this domain. |
| Microsoft Corporation (Microsoft 365) | Business email | Receiving, sending and storing email sent to our cybercastrum.com addresses. |
If you contact us over WhatsApp, that conversation is also subject to WhatsApp’s own privacy terms, over which we have no control.
5. Links to other sites
This site links to third-party destinations, including our social media profiles. Once you follow such a link you are on someone else’s website, and their privacy practices apply rather than ours.
6. Security
The site is served over HTTPS only, with HTTP Strict Transport Security and a restrictive Content Security Policy. It is a static site with no database, no server-side application code and no user accounts, which means there is very little to attack. Enquiry correspondence is held in Microsoft 365 under access controls limited to the people who need it.
No system is perfectly secure and we will not pretend otherwise. Please do not send credentials, secrets or sensitive technical findings over unencrypted email — ask us and we will arrange a secure channel.
7. Your rights
Under the DPDP Act, and subject to its conditions and exemptions, you may:
- ask what personal data of yours we hold and how it is processed;
- ask us to correct data that is inaccurate, incomplete or out of date;
- ask us to erase personal data where we no longer need it for the purpose it was collected;
- withdraw a consent you previously gave, at any time;
- nominate another person to exercise these rights on your behalf in the event of your death or incapacity; and
- raise a grievance with us using the contact details below.
We will respond within a reasonable period. If you are not satisfied with how we handle your grievance, you may complain to the Data Protection Board of India.
8. Children
This website is aimed at organisations rather than children, and we do not knowingly collect personal data of children through it.
9. Changes to this notice
If we change how we handle personal data — for example by adding a contact form or enabling analytics — we will update this page and change the “last updated” date above.
10. Contact and grievance redressal
For any question about this notice, to exercise the rights above, or to raise a grievance: