Privacy Policy.

01Consent

By accessing our website or engaging our services, you consent to this Privacy Policy and the practices it describes. If you do not agree with any part of this policy, please stop using the website and contact us so we can address your concern.

This policy applies to information collected through staatse.com, communications with our team, and the engagement portal we use to deliver work to our customers. It does not cover information collected by third parties whose services you reach through our site.

02Information we collect

We aim to collect only the information we need to deliver our services and communicate with you. The categories are:

• Contact information you provide - name, work email, phone number, company - when you fill in a form or send us an email.
• Engagement information we receive during a project - scope documents, asset inventories, findings, and reports. This is treated as confidential per our master services agreement.
• Technical information automatically logged when you visit the site - IP address, browser type, pages visited, and timestamps. We do not use these to identify individual visitors.
• Cookies and similar technologies, used to keep the site working and to measure aggregate visitor patterns. You can disable cookies in your browser at any time.

03How we use your information

We use the information described above for the following purposes:

• To respond to enquiries and provide the services you have requested.
• To send service-related communications - proposals, kickoff invitations, deliverables, and notices.
• To improve our website and security research, on the basis of aggregated, de-identified statistics.
• To comply with applicable law, regulation, and contractual obligations.
• With your express consent, to send occasional newsletters or research briefings - you can unsubscribe at any time.

We do not sell personal information. We do not share contact information with third parties for marketing purposes.

04Log files

Like most websites, ours uses log files. These files log visitors when they visit websites - information typically includes internet protocol (IP) addresses, browser type, internet service provider, date/time stamps, referring/exit pages, and the number of clicks. None of this is linked to information that is personally identifiable.

05Cookies, analytics, and your choices

We use a small number of cookies and similar storage technologies to keep the site working and to understand, in aggregate, how it is used. We have grouped them into four categories that you can control in the Customize Consent Preferences dialog (also reachable from the fingerprint icon at the bottom-right of every page):

• Strictly Necessary - required for the site to function (security, form submission). Always on; cannot be turned off.
• Functional - remembers preferences like language or region.
• Analytics - measures aggregate visitor behaviour so we can improve the site. We use Google Analytics 4 for this. Off by default until you grant consent.
• Marketing - reserved for advertising-related cookies. Currently unused; off by default.

Google Analytics 4. When you grant the Analytics category, we use Google Analytics 4 (operated by Google LLC) to record aggregate, anonymised statistics: page paths visited, approximate geographic region, browser and device type, time on page, and traffic source. IP addresses are anonymised before storage. We do not transmit any personal identifier (name, email, phone) to Google. Data is retained for 14 months and then automatically deleted.

We use Google Consent Mode v2: until you explicitly grant the Analytics category, Google Analytics is loaded but transmits no analytics or advertising pings at all. There is no cookieless modelled signal sent in the denied state - selecting "Reject all" means Google receives nothing about your visit.

How to opt out:

• Open the Customize Consent Preferences dialog (link above, or the fingerprint icon at the bottom-right of any page), uncheck Analytics, and save. Your choice is stored in your browser and respected on every subsequent visit.
• Or install Google's official Google Analytics opt-out browser add-on, which prevents Google Analytics from collecting data on any site.
• You can clear our consent record at any time by clearing site data for staatse.com in your browser - the consent dialog will then re-appear on your next visit.

For Google's own privacy practices, see Google's Privacy Policy and Google's privacy & terms for business.

06Advertising partners' privacy policies

We do not currently run third-party advertising on our website. Should that change, this section will be updated and we will publish the list of advertising partners and link to their privacy policies here.

07Third-party privacy policies

Our site may link to other websites and services - for example to research repositories, vendor documentation, or our scheduling tool. Staatse's Privacy Policy does not apply to those sites. We encourage you to consult the privacy policies of any third-party services you interact with through our website.

08CCPA privacy rights (do not sell my personal information)

Under the California Consumer Privacy Act, California consumers have the right to:

• Request that we disclose the categories and specific pieces of personal data collected about them.
• Request that we delete any personal data collected about them.
• Request that we do not sell their personal data - although we do not sell personal data.

To exercise any of these rights, contact us at the email below. We will respond within 30 days.

09Children's information

Our services are intended for businesses and security professionals. We do not knowingly collect any personal identifiable information from children under the age of 13. If you believe your child has provided this kind of information on our website, we strongly encourage you to contact us immediately so we can remove the information.

10Contact information

If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us.