Privacy Policy (Pentest Testing Corp)

Effective date: June 2, 2024
Last updated: Jan 15, 2025

This Privacy Policy explains how Pentest Testing Corp (“Pentest Testing,” “we,” “us,” “our”) collects, uses, discloses, and protects information when you visit or use:

• Our website: pentesttesting.com
• Our free tools/scanner: free.pentesttesting.com
• Any related pages, forms, and communications that link to this Policy (collectively, the “Services”).

If you do not agree with this Policy, please do not use the Services.

Cookies and similar technologies (summary)

We use cookies and similar technologies to make the Services work, to improve performance, and (where you allow) to understand usage through analytics.

Your choices:

• You can manage cookie preferences at any time using our Cookie Settings / Manage Preferences panel (accessible from the cookie banner and/or a persistent link on the website where available).
• You can also control cookies through your browser settings (block/delete cookies).
• If you reject non-essential cookies, the site will still function, but some features and measurement may be limited.

Types of cookies we may use:

• Strictly necessary cookies – required for core site functionality and security.
• Functional cookies – remember choices to improve your experience.
• Analytics cookies (optional) – help us understand traffic and improve the Services (for example, Google Analytics where enabled).
• Security cookies/logging – help detect abuse and protect the Services.

1) What information we collect

A. Information you provide to us

1. Contact & inquiry information
   If you contact us or request a quote, we may collect information such as name, email address, phone number, company name, and message details.
2. Consult scheduling information
   If you book a consultation using a scheduling provider (e.g., Calendly or similar), the information you enter (such as name, email, meeting details) is collected and processed to coordinate the meeting.
3. Newsletter / marketing subscription information
   If you subscribe to receive updates, we collect the information you provide (typically your email address and preferences). You can unsubscribe at any time using the link/button in our emails.

B. Information related to our Free Website Vulnerability Scanner

When you use the Free Website Vulnerability Scanner, we may process:

• The website URL you submit for scanning
• Scan outputs/results generated by the tool
• Optional email address (if provided) to deliver reports and/or send security notifications or updates about the scan

Important: The scanner is intended for security assessment and awareness. It is designed to run checks via standard web requests and does not require exploitation to generate high-level findings.

C. Information collected automatically (usage & device data)

When you use the Services, we (and our service providers) may automatically collect:

• IP address, browser type, device identifiers, operating system
• Approximate location (derived from IP), language settings
• Pages viewed, links clicked, time spent, referring/exit pages
• Diagnostic logs and event data used to secure, maintain, and improve the Services

2) How we use information

We use collected information to:

• Provide, operate, and maintain the Services (including generating scan results and reports)
• Respond to inquiries, requests, and customer support needs
• Coordinate consultations and communicate about services
• Send updates, newsletters, or service-related notifications (where you opt in or where permitted)
• Monitor and improve the Services, including analytics and troubleshooting
• Prevent abuse, fraud, and security incidents; enforce policies; protect rights and safety
• Comply with legal obligations and resolve disputes

3) Legal bases for processing (where applicable)

If you are located in a jurisdiction that requires a legal basis (e.g., GDPR/UK GDPR), we process information based on one or more of the following:

• Consent (e.g., optional analytics cookies, marketing emails where required)
• Contract (e.g., responding to a service request or providing requested reports)
• Legitimate interests (e.g., securing and improving the Services, preventing abuse)
• Legal obligation (e.g., compliance and record-keeping)

4) How we share information

We do not sell your personal information.

We may share information in limited circumstances:

• Service providers (processors): Companies that help us run the Services (hosting, analytics, scheduling, email delivery, customer support, security monitoring). They may access information only to perform services for us and must protect it.
• Legal and safety: If required by law, regulation, legal process, or to protect the rights, property, and safety of Pentest Testing, our users, or others.
• Business transfers: If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

5) Data retention

We retain information only as long as necessary for the purposes described in this Policy, including to:

• Provide the Services and user support
• Maintain records for legitimate business needs
• Meet legal, accounting, or security requirements

Retention may vary depending on the type of data (e.g., inquiry messages, scan results, or operational logs). When data is no longer needed, we delete, anonymize, or securely store it as required by law.

6) Security

We use administrative, technical, and organizational safeguards designed to protect information. However, no system is completely secure. You use the Services at your own risk, and we cannot guarantee absolute security.

7) International data transfers

Your information may be processed in countries other than your own, including where our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.

8) Your privacy rights

Depending on your location, you may have rights such as:

• Access to personal information we hold about you
• Correction of inaccurate or incomplete information
• Deletion of personal information (subject to legal/contractual limits)
• Objection to certain processing or restriction of processing
• Data portability (where applicable)
• Withdraw consent where processing is based on consent

To exercise these rights, contact us using the details below. We may need to verify your identity before fulfilling certain requests.

9) Third-party links and services

The Services may include links to third-party websites or services. Their privacy practices are governed by their own policies, not ours. We encourage you to review third-party privacy policies before providing information.

10) Children’s privacy

Our Services are not intended for children under 13 (or the minimum age required by local law). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us so we can take appropriate action.

11) Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date indicates when changes take effect. If we make material changes, we may provide additional notice on the website.

12) Contact us

If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, contact:

Pentest Testing Corp.
Email: [email protected]
Phone: +8801714-510827
Website: pentesttesting.com