Skip to content
AUSEC
Esc
  • Home/
  • Services/services/
  • Penetration testing/services/penetration-testing/
  • Vulnerability assessment/services/vulnerability-assessment/
  • Security audit/services/security-audit/
  • Compliance consulting/services/compliance-consulting/
  • Incident response and digital forensics/services/digital-forensics/
  • Corporate training and workshops/services/corporate-training/
  • Audit methodology/methodology/
  • Security posture quiz/#quiz
  • Threat Lab: attack simulator/threat-lab/#simulator
  • Threat Lab: cyber kill chain/threat-lab/#kill-chain
  • Threat Lab: defence in depth/threat-lab/#defence
  • Threat Lab: spot the phish/threat-lab/#phish
  • Threat Lab: terminal/threat-lab/#terminal
  • Frameworks hub/frameworks/
  • Framework cross-mapping/frameworks/#crossmap
  • PCI DSS v4.0.1/frameworks/pci-dss/
  • ISO/IEC 27001:2022/frameworks/iso-27001/
  • ISO/IEC 27002:2022/frameworks/iso-27002/
  • NIST Cybersecurity Framework 2.0/frameworks/nist-csf/
  • CERT-In Audit Guidelines (India)/frameworks/cert-in/
  • Training and internships/training/
  • Resources: articles and checklists/resources/
  • PCI DSS v4.0.1: what changed, and what it means now/resources/pci-dss-4-0-1-changes/
  • ISO/IEC 27001:2022 Annex A for beginners/resources/iso-27001-annex-a-beginners/
  • NIST CSF 2.0: the Govern function explained/resources/nist-csf-govern-function/
  • How to prepare for a CERT-In audit/resources/prepare-cert-in-audit/
  • Glossary/resources/#glossary
  • Team and certifications/team/
  • About Ausec/about/
  • Contact and book an assessment/contact/
  • Privacy policy/privacy/
  • Terms of use/terms/
  • Responsible disclosure/responsible-disclosure/
  • Design system/styleguide/

Privacy policy

Last updated

Draft privacy policy, pending legal review by Ausec. Not yet in force.

Who we are

This policy explains how Ausec, Valliammai Building, 9/5 4th Cross Street, Trustpuram, Kodambakkam, Chennai 600 024, handles personal data collected through this website, in line with India's Digital Personal Data Protection Act, 2023. Contact us about privacy at info@ausec.in.

What we collect

  • Enquiry and checklist forms: your name, email address, company, phone number, the service or framework you are interested in, and your message.
  • Internship applications: your name, email address, phone number, institution, area of interest, message and resume.
  • Security data: our hosting provider processes IP addresses and request details to protect the site from abuse, including the Turnstile spam check on forms.
  • Preferences: your theme, reduced-effects setting and Threat Lab progress are stored only in your own browser and are never sent to us.

Why we use it

We process your data with your consent, which you give when you submit a form, and only to:

  • Respond to your enquiry and follow up about it
  • Send the checklist you requested
  • Assess your internship application
  • Keep the website secure

Who we share it with

We do not sell your data. We use a small number of service providers who process it on our behalf: Cloudflare (hosting and security) and Resend (email delivery). The contact page embeds a Google Maps view, which loads content from Google and is subject to Google's privacy policy. Some providers may process data outside India.

Cookies and analytics

Necessary function uses only local browser storage (your theme, reduced-effects and progress), which never leaves your device and sets no cookies.

With your consent, we use Google Analytics and Google Ads to understand which marketing campaigns bring visitors to our site and whether they get in touch. These set cookies in your browser and send data to Google, which may process it outside India. We use Google Consent Mode, so these load only after you choose Accept in the cookie banner. If you Decline, or ignore the banner, they do not load.

You can change your mind at any time by clearing this site's data in your browser, which brings the banner back.

How long we keep it

We keep enquiries and applications only as long as needed for the purpose they were collected for, then delete them. Analytics data is retained according to our Google Analytics settings. Specific retention periods are to be confirmed.

Your rights

Under the DPDP Act you can:

  • Ask for a summary of the personal data we hold about you
  • Ask us to correct, complete or erase it
  • Withdraw your consent at any time
  • Nominate someone to exercise your rights if you are unable to
  • Raise a grievance with us, and if unresolved, with the Data Protection Board of India

Children

This website is not aimed at children. If you are under 18, please apply for an internship only with the consent of a parent or guardian.

Changes

We will update this page if our practices change and show the date of the latest version.