Last updated on June 19, 2024

At Testudo Infosec Inc. ("we", "our'', or"us") our utmost commitment is to protect the data privacy of the ofour website ("site" or "platform") and customers("clients", “you”) using our services ("services"). PotentialClients and current clients expect us to maintain their information accurately,protected against errors and manipulation, free from unwarranted disclosure andsecure from theft. We take responsibility for complying with the Philippine Data Privacy Act of 2012 (“DPA”), all relevant local laws, and ensure compliance byour staff with strict standards of security and confidentiality.

This Privacy Policy ("Policy") gives you notice on our online and offline information practices and provides what personal information ("Personal Data") we may collect from and about you, why we use that Personal Data, how we intend to use it, and how we will ensure to protect it.  It also provides to whom your Personal Data may be shared and how to access, review and amend your personal data.  For any inquiries and concerns regarding this Policy, you can contact us by sending an email to info@testudo-infosec.com.

‍

ACCEPTANCE OF PRIVACY POLICY

By submitting your contact information via the Contact Us page, you accept our Privacy Policy; and acknowledge our collection, use, disclosure, and retention of your personal information as described in ourPrivacy Policy. If you do not agree with our Privacy Policy you may opt to not send your personal information or, if already submitted, send an e-mail to info@testudo-infosec.com  to request data deletion of your personal data.

‍

INFORMATION WHICH TESTUDO INFOSEC COLLECTS

You provide us with information in the following circumstances:

• When you submit through our contact us page. You provide personal information when contacting us through our website. We will     collect your given name and email address. If given through message input or direct e-mail, we may also collect information such as your company name, company website, company address, phone number, and mobile number.
• When you request a proposal or send inquiries through e-mail, SMS, or messaging platforms. We may collect your given name,     email address, company name, company address, mobile number, and phone number, if given.

HOW TESTUDO INFOSEC USES INFORMATION

We process your personal information for the following purposes:

• To manage our contact list
• To exercise account management functions
• To Communicate with you about present or future services or about future changes to this privacy statement.
• To design new or enhance existing services provided by us
• To Exercise or defend our legal rights, or
• To assist in law enforcement purposes, investigations by police or other government or regulatory authorities and
• To meet requirements imposed by applicable laws and regulations or other obligations committed to government or regulatory authorities‍
     

HOW TESTUDO INFOSEC SHARES AND DISCLOSES YOUR INFORMATION

Testudo Infosec only shares the data subject’s information as outlined in this Policy (to comply with legal responsibilities, protect and defend our rights and privacy) with express written consent.

• We may share your personal information with government authorities, regulatory agencies, quasi-judicial, administrative, and/or judicial agencies in order to comply with regulations and respond to lawful requests and legal processes, or protect against harm to the rights, property, or safety of Testudo Infosec, its users or the public as required or permitted by law.

‍

WHERE TESTUDO INFOSEC STORES YOUR PERSONAL INFORMATION

Our sites and servers are hosted in a location in Switzerland and the United States of America. The personal information we obtain from you will be transferred and stored to a server located in Switzerland and the United States of America. We will take all reasonable steps to ensure that your personal information is handled and processed securely and in accordance with our policy.

‍

SECURITY AND RETENTION

To protect the personal information submitted to us, we follow generally accepted industry standards, from during transmission until we receive it in our system. We will retain your Personal Information only for the period necessary to fulfill the purposes for which we collected it, such as for satisfying any legal, accounting, or reporting requirements and where we are required to assert or defend against claims, until the end of the relevant retention period or until the claims in question have been settled. To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information, and whether we can achieve those purposes through other means and the applicable legal requirements. Following the applicable retention period, we will promptly and securely destroy your Personal Information under applicable laws and regulations.

We apply reasonable security measures to prevent unauthorized or accidental access, processing, erasure, loss or use within our System.

‍

YOUR DATA PRIVACY RIGHTS

You have several rights under relevant data privacy laws, including the National Privacy Commission's Data Privacy Act of 2012. Depending on where you are based, those rights can include the right to:

• Request access or copies of your personal information;
• Modify incorrect or updated personal information;
• Delete or remove your personal information;
• Restrict the processing and retention of your personal information;
• Request a copy of your personal information;
• Send complaints to appropriate authorities in your country; and
• Request a list containing the names and addresses of any potential recipients of your personal information.
     

All other rights granted to you as a data subject under prevailing Data Privacy laws and Regulations

To exercise one or more of these Data Privacy rights, you may send inquiries or concerns by sending us an email at info@testudo-infosec.com.

‍

OBJECTION TO PROCESSING AND RETENTION

As a data subject, you have the right to opt-out from our data processing and retention. You can also send requests about changes to your contact preferences, changes to your information, affiliated companies/organizations by sending us an email at info@testudo-infosec.com.

‍

UPDATES AND CONTACT

We update our Privacy Policy from timeto time. When we update our Privacy Policy, we will revise the"Updated" date above, inform you via email, and post the new PrivacyPolicy to our website.

‍

For questions about accessing,changing, or deleting your personal information, please visit www.testudo-infosec.com or send us an email at info@testudo-infosec.com.