Who we are
CyberSecureToday (“we”, “us”) operates the website at cybersecuretoday.com. We are the data controller for personal data collected through this site. For any privacy question, contact info@0daysecure.com.
What we collect
Information you give us
- Newsletter subscription: your email address, and the date you subscribed.
- Correspondence: your email address and whatever you choose to include when you contact us.
Information collected automatically
- Technical data: IP address, browser type and version, device type, operating system and referring URL.
- Usage data: pages viewed, time on page and navigation paths, collected in aggregate.
We do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
Why we use it
| Purpose | Lawful basis (UK/EU GDPR) |
|---|---|
| Sending the newsletter you asked for | Consent |
| Responding to your enquiry | Legitimate interests |
| Understanding aggregate site usage | Legitimate interests |
| Protecting the site from abuse and attack | Legitimate interests |
| Meeting legal obligations | Legal obligation |
What we do not do
- We do not sell your personal data. Not to advertisers, not to data brokers, not to anyone.
- We do not rent or trade mailing lists.
- We do not build advertising profiles about individual readers.
- We do not share your email address with sponsors.
Service providers
We use a small number of third-party processors to run the site. Each has access only to the data needed for its function and is bound by contract to protect it:
- Hosting: our hosting provider processes server logs including IP addresses.
- Email delivery: our newsletter provider stores subscriber email addresses and delivery statistics.
- Analytics: aggregate traffic measurement.
Cookies
We use a minimal set of cookies. Full detail, including how to control them, is in our cookie policy.
How long we keep data
- Newsletter subscribers: until you unsubscribe, after which your record is deleted.
- Email correspondence: up to 24 months, unless a longer period is needed for a legal reason.
- Server logs: typically 30 days.
- Aggregate analytics: retained in non-identifying form.
Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time.
To exercise any of these, email info@0daysecure.com. We will respond within one month. If you are unhappy with our response, raise it through our complaints process, or complain to your local data protection authority.
If you are in California
Under the CCPA/CPRA you have the right to know what personal information we collect, to request deletion, and to opt out of “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined. We will not discriminate against you for exercising your rights.
If you are in India
The Digital Personal Data Protection Act, 2023 applies to personal data we process about individuals in India. For that data we act as a Data Fiduciary and you are a Data Principal.
You have the right to:
- Obtain a summary of the personal data we process about you and how we process it.
- Have inaccurate or misleading personal data corrected, completed or updated.
- Have your personal data erased where it is no longer needed for the purpose it was collected for.
- Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
- Have a grievance addressed by us before escalating it.
Exercise any of these by writing to info@0daysecure.com with the subject line DPDP. Our Grievance Officer and the timescales we work to are published on our complaints page.
If you are not satisfied with how we have handled your grievance, you may complain to the Data Protection Board of India.
Publishing journalism is not the same activity as processing a subscriber's email address, and the two are treated separately here. This policy governs personal data you give us or that we collect from your use of the site. It does not govern the personal information that appears within published journalism, which is handled under our editorial policy and challenged through our complaints process.
International transfers
Our service providers may process data outside your country. Where data leaves the UK or EEA, we rely on adequacy decisions or standard contractual clauses.
Security
We serve the site over HTTPS, apply security headers, keep dependencies patched and limit access to subscriber data to those who need it. No system is perfectly secure, but we take this seriously — it would be a poor look for a security publication not to.
Changes to this policy
We will update this page when our practices change and revise the date at the top. Material changes affecting newsletter subscribers will be notified by email.
Contact
Privacy questions: info@0daysecure.com. Everything else: contact page.