Privacy Policy
Last updated: 1 September 2026
Who is responsible for your data
CyberSecurityArm is an independent security-testing practice operated by Florjan Llapi in Tirana, Albania. For privacy questions or requests, email [email protected].
Information we receive
- Contact-form details: name, business email, company, requested service and project description.
- Information you provide in direct email correspondence.
- Limited technical and request information used by hosting and security systems, such as IP address, request time, browser information and server logs.
- A one-way hash derived from the submitting IP address, stored temporarily to limit contact-form abuse.
Please do not submit passwords, API keys, live vulnerability details or other sensitive system information through the public form.
Why we use it
We use enquiry information to evaluate and respond to your request, prepare a proposal and take steps you request before a possible contract. We use limited technical information to operate, secure and troubleshoot the website and prevent abuse. We may also process information where needed to meet legal obligations or establish, exercise or defend legal claims.
Sharing and international processing
We do not sell personal data. Information may be processed by service providers that support website hosting, email delivery, content delivery and website security, including Namecheap and Cloudflare, under their applicable terms. We may also disclose information to professional advisers or public authorities where legally required. Some providers may process data outside Albania or your country; where required, appropriate transfer safeguards should apply.
Retention
The contact-form abuse-prevention file keeps recent submission times associated with the hashed IP value for up to one hour. Enquiry and correspondence records are kept only as long as reasonably necessary to respond, follow up and manage a resulting business relationship, or longer where legal, accounting, security or dispute requirements apply.
Cookies and measurement
The website does not currently configure advertising or analytics cookies. Hosting, content-delivery or security providers may use strictly necessary technologies to deliver and protect the site. If analytics or marketing technologies are introduced, this notice and any required consent controls should be updated first.
Your choices and rights
Depending on the law that applies, you may ask for access, correction, deletion, restriction, objection or portability of your personal data, and may withdraw consent where consent is the basis for processing. Contact us at the email above. You may also raise a concern with Albania’s Information and Data Protection Commissioner at idp.al, or with your local supervisory authority where applicable.
Changes
We may update this notice when the website, providers or legal requirements change. The current version and update date will remain available on this page.
To discuss an assessment, use the contact page.