Effective Date: January 1, 2025 | Last Updated: January 1, 2025
Babar Tech ("BabarTech", "we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information when you visit our website or use our MDR services.
Key Principle: We only collect data necessary to provide excellent MDR services. We never sell your information to third parties.
How We Use Information
We use your information to:
- Provide MDR Services: Detect threats, investigate alerts, respond to incidents
- Communicate: Respond to inquiries, send security alerts (clients only), provide service updates
- Improve Services: Analyze threat trends, improve detection rules, enhance website
- Legal Compliance: Meet legal obligations, enforce terms, protect rights
Data Security
We protect your data with industry-standard security measures:
Technical Controls
- TLS 1.2+ encryption in transit
- AES-256 encryption at rest
- Multi-factor authentication (MFA)
- Comprehensive audit logging
Organizational Security
- Background checks for all analysts
- Confidentiality agreements with staff
- Regular security training
- Annual third-party security audits
Data Retention
- Security Logs: 90 days (configurable)
- Incident Data: 1 year after closure
- Contact Info: 2 years or until deletion requested
Data Sharing & Disclosure
We do not sell, rent, or trade your personal information or security data to third parties.
Service Providers
We may share data with trusted providers who assist in service delivery:
- Cloud Infrastructure: AWS, Microsoft Azure, Google Cloud Platform
- Security Tools: SIEM, threat intelligence vendors
- Communication: Email service providers
All providers are bound by confidentiality agreements and data processing agreements.
Legal Requirements
We may disclose information when required by law (court orders, subpoenas). We will notify you of legal requests unless prohibited.
Your Privacy Rights
GDPR Rights (EU Residents)
- Access: Request a copy of your data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data
- Portability: Receive your data in machine-readable format
- Object: Object to certain types of processing
CCPA Rights (California Residents)
- Know: What information we collect and why
- Delete: Request deletion of your information
- Opt-Out: We don't sell data (nothing to opt out of)
- Non-Discrimination: Equal service regardless of rights exercise
Exercise Your Rights
Contact us at privacy@babartech.com with "Privacy Request" in the subject line. We'll respond within 30 days.
International Data Transfers
We operate globally. Data may be transferred to countries outside your own. We use Standard Contractual Clauses (SCCs) approved by the European Commission for EU data transfers.
Cookies
We use cookies for:
- Essential: Website functionality and navigation
- Analytics: Google Analytics (anonymized) for usage statistics
You can manage cookies through your browser settings. Learn more at AllAboutCookies.org.
Policy Changes
We may update this policy periodically. Material changes will be communicated via email 30 days in advance. Minor updates will be reflected in the "Last Updated" date above.