Privacy Policy
PSYBEROLOGY
Effective Date: October 1, 2026
Last Updated: October 1, 2026
1. Introduction
Psyberology ("Psyberology," "Company," "we," "us," or "our") respects the privacy of individuals who visit our website, inquire about our services, or schedule consultations.
As a cybersecurity consulting organization, we recognize the importance of protecting personal information, maintaining confidentiality, and implementing responsible data protection practices.
This Privacy Policy explains how personal information may be collected, processed, used, disclosed, retained, and protected when individuals access our website (the "Website") or interact with our online scheduling services.
Our privacy practices are designed to incorporate principles established by applicable data protection legislation, including, where applicable:
The European Union General Data Protection Regulation (EU GDPR), Regulation (EU) 2016/679.
The United Kingdom General Data Protection Regulation (UK GDPR).
The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).
Other applicable United States federal and state privacy and data protection laws.
Our Privacy Commitment
Psyberology follows a data minimization approach. We do not intentionally collect or maintain personal information from general website visitors beyond what is reasonably necessary to facilitate requested interactions, including consultation scheduling.
We do not sell personal information, maintain advertising profiles of website visitors, or use information submitted for appointment scheduling to conduct unsolicited marketing.
Certain technical information may nevertheless be processed by our website hosting provider and integrated third-party services, as described below.
2. Scope of This Privacy Policy
This Privacy Policy applies to:
Visitors accessing or interacting with the Website.
Individuals scheduling consultations or meetings through the Website.
Prospective clients communicating with Psyberology through website-associated services.
Personal information processed by authorized service providers on our behalf in connection with Website functionality.
This Privacy Policy does not supersede confidentiality agreements, Master Services Agreements (MSAs), Statements of Work (SOWs), or separate data protection agreements executed between Psyberology and its clients.
Personal information processed during contracted cybersecurity consulting engagements may be subject to additional contractual and regulatory requirements.
3. Information We Collect
3.1 General Website Visitors
Psyberology does not require visitors to create an account, register, or submit personal information to access publicly available Website content.
We do not intentionally establish individual visitor profiles or independently maintain a database of visitor browsing activity.
However, our hosting provider and other integrated service providers may automatically process limited technical information necessary to operate, secure, and deliver the Website.
Such information may include:
Internet Protocol (IP) addresses.
Browser type and version.
Device and operating system information.
Website access timestamps.
Referring URLs.
Pages accessed and basic website interaction information.
Cookie identifiers and similar technical information.
The availability, processing, and retention of this information depend on the applicable service provider and the Website's configured features.
3.2 Consultation and Appointment Scheduling
When an individual voluntarily schedules a consultation or meeting, Psyberology may collect or receive limited personal information necessary to administer the requested appointment.
This information may include:
First and last name.
Business or organization name, if provided.
Email address.
Telephone number, if requested.
Requested appointment date and time.
Meeting preferences or scheduling details.
Information voluntarily entered into appointment-related fields.
This information is used exclusively for legitimate appointment-related and business communication purposes, including scheduling, confirming, rescheduling, conducting, or canceling consultations and responding to associated inquiries.
Appointment information may be maintained within the scheduling platform, connected calendar applications, or related business communication systems.
Psyberology does not use appointment information to create marketing profiles, sell contact information, or enroll individuals in unsolicited promotional mailing lists.
3.3 Sensitive Personal Information
Psyberology does not request sensitive personal information through its public Website or consultation scheduling process.
Visitors should not submit passwords, authentication credentials, financial account information, protected health information, government identification numbers, proprietary source code, confidential security configurations, or other sensitive information through general scheduling fields.
Where sensitive information is required for a prospective or active consulting engagement, Psyberology will establish an appropriate and separately authorized communication or information-transfer process.
4. Purposes and Legal Bases for Processing
Psyberology limits its processing of personal information to legitimate, specified, and necessary purposes.
Where the GDPR applies, processing may be based on one or more of the following lawful grounds:
Contractual Necessity — Article 6(1)(b)
Processing information necessary to schedule requested consultations, respond to pre-contractual inquiries, or take steps requested by an individual before entering into a service agreement.
Legitimate Interests — Article 6(1)(f)
Processing limited information reasonably necessary to maintain Website functionality, protect against unauthorized access, prevent abuse, administer business communications, and safeguard our information systems, subject to applicable balancing requirements.
Legal Obligations — Article 6(1)(c)
Processing information where necessary to comply with applicable laws, regulatory requirements, valid legal processes, or legally enforceable obligations.
Consent — Article 6(1)(a)
Where required, obtaining consent before processing information for purposes that require such authorization, including certain non-essential cookies or similar technologies.
Where consent is the lawful basis for processing, individuals may withdraw their consent at any time without affecting the lawfulness of processing performed before withdrawal.
Psyberology does not rely on consent as a substitute for another applicable lawful basis where consent is not appropriate.
5. Data Minimization and Retention
Psyberology applies the principle of data minimization and seeks to limit personal information to what is necessary for the purposes identified in this Privacy Policy.
We do not intentionally retain personal information submitted through general Website interactions except where needed to fulfill an expressly requested service, including appointment scheduling.
Appointment-related information is retained only for as long as reasonably necessary to:
Schedule, conduct, and administer requested consultations.
Maintain necessary records of business communications.
Address appointment-related questions or disputes.
Meet applicable legal, regulatory, or contractual obligations.
Establish, exercise, or defend legal claims where necessary.
When information is no longer required, Psyberology will delete, anonymize, or otherwise securely dispose of it where reasonably practicable and legally permissible.
Information maintained by third-party providers may remain subject to their documented retention schedules, backup procedures, and applicable contractual requirements.
Psyberology does not guarantee immediate deletion from independent third-party systems or backup environments.
6. Cookies and Similar Technologies
The Website is hosted using third-party website infrastructure that may employ cookies and similar technologies.
These technologies may support:
Essential Website functionality.
Website availability and security.
Session management.
Appointment scheduling functionality.
User preference management.
Technical performance and operational diagnostics.
Psyberology does not intentionally deploy third-party behavioral advertising technologies or use visitor information for targeted advertising.
Depending on the configuration of the Website, hosting-provider analytics or performance technologies may process limited visitor information.
Where required by applicable law, non-essential cookies and similar technologies will be subject to appropriate notice, consent, or preference-management mechanisms.
Visitors may also manage or restrict cookies through their browser settings, although disabling certain cookies may affect Website functionality.
7. Disclosure to Third-Party Service Providers
Psyberology does not sell personal information to data brokers, advertisers, or other third parties.
Limited personal information may be processed or disclosed to authorized service providers where necessary to deliver Website functionality or requested services.
Such providers may include:
Website hosting and infrastructure providers.
Appointment scheduling and calendar management platforms.
Business email and communication services.
Video conferencing providers used for scheduled consultations.
Information security and technical support providers.
These providers may process information in accordance with their respective contractual obligations, privacy notices, and applicable data protection requirements.
Psyberology seeks to use reputable service providers and appropriate contractual safeguards where required.
Personal information may also be disclosed where necessary to comply with applicable law, respond to valid legal process, protect legal rights, or address material security threats.
8. Information Security
Psyberology recognizes that protecting the confidentiality, integrity, and availability of information is fundamental to responsible cybersecurity practices.
We apply a risk-based approach to protecting personal information within systems under our control.
Depending on the systems and services involved, safeguards may include:
Encrypted communications using HTTPS/TLS.
Access controls and authentication protections.
Restricted access to business scheduling information.
Security-conscious configuration of third-party services.
Data minimization and retention management.
Periodic evaluation of relevant security risks.
Appropriate administrative, technical, and organizational safeguards.
Although Psyberology takes reasonable measures to protect information, no Internet transmission, application, or electronic storage environment can be guaranteed to be completely secure.
Accordingly, Psyberology cannot warrant absolute protection against every potential cybersecurity threat.
9. GDPR and UK GDPR Privacy Rights
Where the EU GDPR or UK GDPR applies, individuals may exercise applicable rights concerning their personal information.
These rights may include:
Right of Access — Article 15: Request confirmation of whether personal information is being processed and obtain access to that information.
Right to Rectification — Article 16: Request correction of inaccurate or incomplete personal information.
Right to Erasure — Article 17: Request deletion of personal information when applicable legal conditions are satisfied.
Right to Restriction — Article 18: Request restriction of processing under specified circumstances.
Right to Data Portability — Article 20: Receive qualifying personal information in a structured, commonly used, machine-readable format, where applicable.
Right to Object — Article 21: Object to certain processing activities, including processing based on legitimate interests.
Rights Regarding Automated Decision-Making — Article 22: Exercise applicable protections concerning qualifying solely automated decisions.
Right to Withdraw Consent: Withdraw previously granted consent where processing relies on consent.
Right to Lodge a Complaint: Submit a complaint to a competent data protection supervisory authority.
Psyberology does not use Website-submitted personal information for solely automated decisions that produce legal or similarly significant effects.
Requests may be submitted using the contact information in Section 16.
We will respond within applicable statutory timeframes, subject to lawful extensions, identity verification, and relevant exceptions.
10. California Privacy Rights — CCPA and CPRA
Psyberology respects the privacy rights established by the California Consumer Privacy Act, as amended by the California Privacy Rights Act.
To the extent these laws apply to Psyberology and the personal information concerned, California residents may have the following rights:
Right to Know: Request information concerning categories and specific pieces of personal information collected, subject to applicable limitations.
Right to Delete: Request deletion of qualifying personal information.
Right to Correct: Request correction of inaccurate personal information.
Right to Opt Out: Opt out of the sale or sharing of personal information for cross-context behavioral advertising.
Right to Limit: Restrict certain uses or disclosures of sensitive personal information where applicable.
Right to Non-Discrimination: Exercise statutory privacy rights without unlawful discriminatory treatment.
10.1 Categories of Personal Information
Depending on visitor interactions and Website configuration, categories of personal information that may be processed include:
Identifiers: Names, email addresses, telephone numbers, business contact information, and IP addresses.
Internet or Electronic Network Activity: Technical browsing and interaction information processed through Website infrastructure.
Professional Information: Business affiliation or professional contact details voluntarily provided when scheduling consultations.
Psyberology does not intentionally collect sensitive personal information through the Website for purposes requiring a California right-to-limit mechanism.
10.2 Sale and Sharing of Personal Information
Psyberology does not sell personal information or intentionally share personal information for cross-context behavioral advertising.
We do not knowingly sell or share personal information belonging to individuals under 16 years of age.
We do not use information provided through consultation scheduling for targeted advertising.
10.3 Exercising California Privacy Rights
California residents may submit applicable privacy requests using the contact information provided in Section 16.
Psyberology will evaluate and respond to requests in accordance with applicable law.
We may request information reasonably necessary to verify identity or authority before disclosing, correcting, or deleting personal information.
Where applicable, authorized agents may submit requests on behalf of California residents, subject to legally permitted verification requirements.
Psyberology will not unlawfully discriminate against individuals for exercising applicable privacy rights.
11. International Data Transfers
Psyberology operates from the United States.
Information submitted through scheduling systems or processed by Website infrastructure may be transferred to, stored in, or accessed from the United States or other jurisdictions where authorized service providers operate.
Where the GDPR or UK GDPR applies to restricted international transfers, Psyberology will use appropriate transfer mechanisms and safeguards as required by applicable law.
These may include applicable adequacy decisions, approved Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, or other legally recognized transfer mechanisms.
The specific safeguards applicable to a transfer depend on the service provider, relevant jurisdiction, and processing arrangement.
12. Children's Privacy
The Website and Psyberology's professional cybersecurity consulting services are intended for business and professional audiences.
They are not directed toward children under the age of 16.
Psyberology does not knowingly solicit personal information from children through the Website.
If we become aware that personal information has been collected from a child in circumstances requiring deletion, we will take appropriate action consistent with applicable law.
Parents or legal guardians may contact us regarding potential collection of a child's personal information.
13. Third-Party Websites and External Links
The Website may contain links to third-party websites, professional resources, social media platforms, or external services.
These websites and services operate independently and may maintain their own privacy policies, cookies, and information-processing practices.
Psyberology is not responsible for the independent privacy practices of third parties that are outside our control.
Visitors are encouraged to review the applicable privacy policies before submitting personal information to external services.
14. Data Protection Roles and Client Engagements
For personal information collected directly for Psyberology's own business administration and consultation scheduling, Psyberology may act as a data controller or business, as defined under applicable law.
When providing cybersecurity consulting services to clients, Psyberology may act as an independent controller, processor, service provider, contractor, or other legally recognized party, depending on the nature of the engagement and applicable contractual arrangements.
Where client information is processed under an MSA, SOW, Data Processing Agreement, or other executed agreement, the relevant contractual provisions govern the respective parties' responsibilities to the extent permitted by law.
This Website Privacy Policy does not authorize clients or prospective clients to transmit sensitive, regulated, or confidential information through unapproved Website communication channels.
15. Changes to This Privacy Policy
Psyberology reserves the right to update this Privacy Policy to reflect changes in applicable law, Website functionality, business practices, service providers, or information security requirements.
Material revisions will be reflected through an updated effective date or other notice where required by law.
The current version will remain accessible through the Website.
Any additional notice or consent required by applicable law will be provided before implementing relevant changes.
16. Contact Information and Privacy Requests
Questions concerning this Privacy Policy, personal information processing, or applicable privacy rights may be directed to:
Psyberology
Privacy and Data Protection Inquiries
Email: consulting@psyberology.com
Subject Line: Privacy Rights Request
Please include sufficient information to identify the nature of your request. Do not include passwords, government identification numbers, or other sensitive information in an initial privacy inquiry.
Psyberology will review and respond to privacy requests in accordance with applicable legal requirements.
Psyberology — Privacy by Design. Security by Principle.
© 2026 Psyberology. All Rights Reserved.