Privacy Policy

This privacy policy describes how SiberGroup ("SiberGroup," "we," or "us") collects and uses the personal data you provide, or that we receive automatically, when you visit siber-group.com and use the features it offers.

1. Collection of Personal Data

When you contact us through the form on this website, we collect the details you provide — your name, company, email address, and the content of your message — solely so we can respond to your enquiry. Providing this information is necessary to use the contact form; without it, we won't be able to reply.

If you report a security vulnerability to us — for example, using the contact details published in our security.txt file — we collect whatever information you choose to include in that report, such as your name and email address, in order to investigate and respond to it.

We also automatically receive your IP address as part of any connection to our servers. This happens independently of cookies — it is a basic function of how web requests work, not something we collect through cookies — and may be used to derive general device and location information. See "Analytics and Cookies" below for how this applies to the analytics tools we use.

If you provide us with personal data about someone other than yourself, you must have that person's permission to do so.

2. Use of Personal Data and Purpose

We use personal data for the following purposes:

• Responding to enquiries submitted through our contact form
• Investigating and responding to vulnerability reports submitted to us
• Understanding how visitors use this website, and improving it
• Providing and maintaining the services we offer

We process this data because it is necessary to respond to your request or provide our services, or — for analytics — because you have given consent through the cookie preferences available on this site. We do not use your personal data for marketing communications, and we do not sell your personal data to third parties.

We may disclose personal data to trusted third parties who help us operate this website — such as our email delivery provider for contact form submissions, and the analytics providers listed below — strictly to provide those services. We may also disclose personal data where required by law, or to establish, exercise, or defend a legal claim.

Analytics and Cookies

We use Vercel Analytics, Google Analytics, and Microsoft Clarity to understand how visitors use this website — such as which pages are viewed and how visitors arrive at our site. Your IP address is automatically received as part of any connection to our servers (this happens independently of cookies) and may be used to derive general device and location information. These tools may also use cookies or similar technologies to distinguish sessions and visits, and collect data in aggregate or anonymised form. We do not use this data to individually identify visitors.

These analytics tools only run if you accept Performance cookies through the preference panel available on this site — you can change your choice at any time. Because these providers are based overseas, enabling them involves transferring data outside New Zealand.

3. Retention

We keep personal data only for as long as necessary to fulfil the purposes described above. Contact form and vulnerability report submissions are retained for as long as needed to respond to and resolve them, after which we delete them unless we are required to keep them for longer by law. Aggregated or anonymised analytics data may be retained for longer, since it no longer identifies you individually.

4. Consent

Where we rely on your consent — such as for analytics cookies — you may withdraw it at any time through the cookie preferences available on this site, or by contacting us at hello@siber-group.com. Withdrawing your consent will not affect the lawfulness of any processing carried out before you withdrew it, and will stop future processing based on that consent.

5. Security

We have implemented reasonable technical and organisational measures to protect your personal data, and we expect any third party that processes it on our behalf to do the same. As a cybersecurity company, protecting the data you share with us is something we take seriously.

6. Your Rights

Under the New Zealand Privacy Act 2020, you have the right to request access to the personal data we hold about you, and to request that we correct it if it is inaccurate. You may also ask us to delete personal data we hold about you, unless we are entitled or required to keep it for another lawful reason — for example, to comply with the law or to establish or defend a legal claim.

To exercise any of these rights, contact us at hello@siber-group.com with enough information for us to identify you and your request. We will respond as soon as possible and within the timeframe required by the Privacy Act 2020.

If you are unhappy with how we have handled your personal data, you may also lodge a complaint with the New Zealand Office of the Privacy Commissioner at privacy.org.nz.

Contact Us

If you have questions about this policy or how your information is handled, contact us at hello@siber-group.com.