Privacy Policy

Information We Collect

When you work with Brighton Ignitra for security testing and vulnerability assessments, we collect information necessary to provide effective cybersecurity services. Here's what we gather and why:

Business Contact Information

We collect your name, business email, phone number, company name, and job title when you reach out for consultations or services. This helps us understand your security needs and communicate effectively about your projects.

Technical Information During Assessments

All technical data collection happens only within the scope of authorized security testing. We never access systems or information beyond what you've explicitly approved for assessment.

How We Use Your Information

Your information serves specific, legitimate business purposes related to cybersecurity services:

Specific Usage Categories

We don't use your information for marketing to third parties, selling contact lists, or any purpose unrelated to the security services you've requested.

Data Sharing and Disclosure

Brighton Ignitra operates on a principle of minimal data sharing. We understand the sensitive nature of security information and limit disclosure accordingly.

When We Share Information

Situation	What We Share	With Whom
Subcontracted services	Specific technical data needed for specialized testing	Vetted security professionals under strict NDAs
Legal compliance	Required information only	Thai regulatory authorities when legally mandated
Business continuity	Client contact and project status	Qualified successor in case of business transfer

We never share your vulnerability data, security findings, or confidential business information with competitors, vendors, or unauthorized third parties. Any contractor or partner who might access your data signs comprehensive confidentiality agreements.

Your Privacy Rights

Under Thai privacy laws and our own ethical standards, you have significant control over your personal and business information.

To exercise these rights, contact us directly. We'll respond within 30 days and work with you to address any privacy concerns promptly and thoroughly.

Data Security and Protection

As a security testing company, we implement robust protection measures for all client information. Our approach combines technical safeguards with strict procedural controls.

Technical Security Measures

Procedural Safeguards

Our team follows strict protocols for handling sensitive information. All staff undergo comprehensive security training, sign detailed confidentiality agreements, and follow least-privilege access principles. We maintain detailed audit logs of all data access and processing activities.

Data Retention and Deletion

We keep your information only as long as necessary for legitimate business purposes and legal compliance. Here's our practical approach to data retention:

Retention Periods

When data reaches its retention limit, we use secure deletion methods that make information unrecoverable. For highly sensitive data, we employ cryptographic erasure and multiple overwrite cycles.

International Data Transfers

Brighton Ignitra primarily processes data within Thailand. However, some situations may require international data transfer, such as using cloud services with global infrastructure or collaborating with international security researchers.

When we transfer your data internationally, we ensure adequate protection through:

We'll always inform you if your specific project requires international data processing and obtain your explicit consent before proceeding.

Changes to This Privacy Policy

As our services evolve and privacy regulations change, we may update this policy. Significant changes will be communicated directly to active clients via email, with at least 30 days notice before new terms take effect.

We'll always maintain previous versions of our privacy policy available upon request, so you can understand how our privacy practices have evolved over time.