Privacy Policy
Last updated: 2 September 2026
Who is responsible for your data
CyberSecurityArm is an independent security-testing practice operated by Florjan Llapi in Tirana, Albania. For privacy questions or requests, email [email protected].
Information we receive
- Contact-form details: name, business email, company, requested service and project description.
- Information you provide in direct email correspondence.
- Limited technical and request information used by hosting and security systems, such as IP address, request time, browser information and server logs.
- A one-way hash derived from the submitting IP address, stored temporarily to limit contact-form abuse.
Please do not submit passwords, API keys, live vulnerability details or other sensitive system information through the public form.
Why we use it
We use enquiry information to evaluate and respond to your request, prepare a proposal and take steps you request before a possible contract. We use limited technical information to operate, secure and troubleshoot the website and prevent abuse. We may also process information where needed to meet legal obligations or establish, exercise or defend legal claims.
Sharing and international processing
We do not sell personal data. Information may be processed by service providers that support website hosting, email delivery, content delivery and website security, including Namecheap and Cloudflare, under their applicable terms. We may also disclose information to professional advisers or public authorities where legally required. Some providers may process data outside Albania or your country; where required, appropriate transfer safeguards should apply.
Retention
The contact-form abuse-prevention file keeps recent submission times associated with the hashed IP value for up to one hour. Enquiry and correspondence records are kept only as long as reasonably necessary to respond, follow up and manage a resulting business relationship, or longer where legal, accounting, security or dispute requirements apply.
Cookies and measurement
With your permission, the website uses Google Analytics 4 to measure page visits, service-page interest, contact-page actions, email-link clicks and successful enquiry submissions. CyberSecurityArm does not send form names, email addresses, company names or project descriptions to analytics. Advertising storage, advertising user data, ad personalization and Google signals are disabled.
Analytics storage is denied by default and the Google Analytics tag is not loaded unless you select “Allow analytics.” Your choice is stored in your browser so it can be respected on later visits. You can change it at any time using “Analytics settings” in the footer. Declining analytics does not prevent you from using the website or contact form.
When analytics is allowed, Google may process device, browser, approximate-location, referral and interaction information under its applicable terms and privacy documentation. Hosting, content-delivery and security providers may separately process limited technical information needed to deliver and protect the website.
Your choices and rights
Depending on the law that applies, you may ask for access, correction, deletion, restriction, objection or portability of your personal data, and may withdraw consent where consent is the basis for processing. Contact us at the email above. You may also raise a concern with Albania’s Information and Data Protection Commissioner at idp.al, or with your local supervisory authority where applicable.
Changes
We may update this notice when the website, providers or legal requirements change. The current version and update date will remain available on this page.
To discuss an assessment, use the contact page.