Privacy Policy

CyTech International ("CyTech," "we," "our," "us") is a global cybersecurity and governance organization. Privacy is a core component of our security philosophy. This Policy explains how we collect, use, process, store, and protect information when you visit our website or engage with CyTech as a client or partner. This Policy includes our Cookie Policy and our Data Processing Agreement (DPA), forming a single governance document for all data interactions with CyTech.

This policy covers cytechint.com, cytechint.com.ph, aquilawetware.com, aquilatouchstone.com, aquilac4i.com and chenheffer.com. For visitors and engagements in the Philippines, the CyTech Philippines Privacy Notice under the Data Privacy Act of 2012 supplements this Policy.

1. Information We Collect

1.1 Information You Provide

• Contact details (name, email, phone, company)
• Form submissions (inquiries, partnership requests, downloads)
• Communications sent to CyTech

1.2 Information Collected Automatically

• IP address, browser, device, OS, access times
• Pages viewed, navigation patterns, referring URLs
• Cookies, pixels, analytics, and security telemetry

1.3 Information from Third Parties

• Service providers supporting analytics, hosting, communication
• Public sources for verification or security

CyTech does not purchase personal data.

2. How We Use Information

We use information to operate securely, deliver services, and maintain governance integrity. Uses include:

• Providing access to CyTech content
• Responding to inquiries and support requests
• Improving website performance
• Conducting analytics
• Detecting and preventing security threats
• Meeting legal and regulatory obligations

CyTech does not sell personal information.

3. How We Share Information

3.1 Service Providers

Trusted vendors supporting hosting, analytics, communication, and security. All providers are contractually bound to strict confidentiality.

3.2 Legal and Compliance

We may disclose information to comply with laws, respond to lawful requests, and protect CyTech's rights and operations.

3.3 Business Operations

Information may be transferred during mergers, acquisitions, or restructuring. CyTech does not share information with advertisers.

3.4 Website Forms

When you submit a form on our sites, such as the CRAM™ Assessment, we collect your name, work email, company, and the campaign that brought you, so we can share your results and follow up. Your assessment answers themselves are not stored. Until our own intake system is connected, these contact details are delivered to us by FormSubmit (formsubmit.co), a form-delivery service acting on our behalf.

On chenheffer.com and aquilac4i.com, a short guided conversation can send your answers to Chen Heffer, our founder. Nothing is sent unless you press Send. Your answers are emailed from our own website servers and are not stored on the website.

4. Cookie Policy

4.1 Types of Cookies

• Essential
• Analytics
• Performance
• Security

4.2 Managing Cookies

You may change your analytics choice at any time through the “Privacy Choices” link in the footer of each site. You may also block or delete cookies via your browser settings.

4.3 Analytics and Your Consent

We use Google Analytics to understand which pages are useful to visitors. Google Analytics runs only after you press “Accept” on the consent bar. Until then, no analytics code loads and no analytics cookies are set. We do not use advertising cookies, and we do not share analytics data with Google for advertising.

5. Data Security

CyTech applies strict, enterprise-grade controls:

• Encryption
• Authentication and access controls
• Continuous monitoring
• Governance enforcement

6. Data Retention

We retain information only as long as necessary for operational, legal, and security requirements.

7. Your Rights

Depending on jurisdiction, you may request access, correction, deletion, restriction, or objection. Contact: privacy@cytechint.com.

8. International Data Transfers

CyTech operates globally and applies appropriate safeguards for all transfers.

9. Children's Privacy

CyTech does not knowingly collect information from children under 16.

10. Data Processing Agreement (DPA)

10.1 Roles — CyTech acts as a Processor; clients act as Controllers.

10.2 Purpose — Processing is limited to delivering contracted services.

10.3 Confidentiality — Personnel are bound by confidentiality obligations.

10.4 Security measures — Includes encryption, access controls, monitoring, and incident response.

10.5 Subprocessors — Used only when necessary and bound to equivalent obligations.

10.6 International transfers — Handled with appropriate safeguards.

10.7 Data subject rights — CyTech assists Controllers in fulfilling requests.

10.8 Incident notification — CyTech notifies Controllers without undue delay.

10.9 Return or deletion — Performed upon termination unless retention is legally required.

11. Changes to This Policy

Updates will be posted with a revised date.

12. Contact

CyTech International
Colorado, United States
privacy@cytechint.com
www.cytechint.com