Privacy Policy

Last updated: July 2026

This policy covers what happens when you visit this website (kovacsecurity.com). It does not cover the handling of client security data processed through the KOVACS reporting service itself, that's governed by a separate Data Processing Agreement signed directly with each client.

Information we collect

This site does not run any forms, account creation, or file uploads. The information collected is limited to:

• Standard technical data that any web server or hosting provider logs automatically, such as IP address, browser type, and pages visited.
• Font requests: this page loads fonts from Google Fonts, which means your browser makes a direct request to Google's servers, sending your IP address to Google in the process. See Google's own privacy policy for how they handle that.
• Booking information: if you book a call through the Calendly link on this site, the name, email, and any details you provide go directly to Calendly and to us as the person you're booking with. Calendly's own privacy policy governs how they store and process that.
• Anything you send directly, for example via email or a LinkedIn message, which we keep only as long as needed to respond and follow up.
• Analytics: this site uses Microsoft Clarity and Google Analytics to understand how visitors use it, page views, session recordings, clicks, and general behavior on the page. Both set first-party cookies to do this. See the Cookies section below and how Google uses information from sites that use its services.

How we use information

Solely to respond to inquiries, schedule and conduct calls, and understand how the site is used so it can be improved. Nothing collected here is sold or shared with third parties for their own marketing purposes.

Cookies

Microsoft Clarity and Google Analytics set first-party cookies on this site to track sessions and general usage patterns, for example, distinguishing a returning visitor from a new one. Third-party embeds (Calendly, Google Fonts) may also set cookies under their own policies when you interact with them, we don't control those directly.

Data retention

Contact and booking information is kept only as long as reasonably needed for the business relationship it relates to, and deleted or anonymized once it's no longer needed.

Your rights

If you're in the EU/UK, you have rights under GDPR to access, correct, or request deletion of personal data we hold about you, and the right to lodge a complaint with your local data protection supervisory authority if you believe those rights haven't been respected. If you're a California resident, similar rights apply under the CCPA. To exercise any of these, contact us using the details below.

International data transfers

This site uses services (Google Fonts, Google Analytics, Microsoft Clarity, Calendly) that may process data outside your own country, including in the United States. Where required, these providers rely on their own approved transfer mechanisms, such as EU Standard Contractual Clauses, to do so lawfully.

Security

This site is served over HTTPS. No sensitive data is stored on the website itself, contact and booking information lives in the third-party tools (email, Calendly) used to manage it.

Children's privacy

This site is intended for business use and is not directed at anyone under 16.

Changes to this policy

If this policy changes materially, the update date at the top of this page will change to reflect it.

Contact

Questions about this policy: daniyal@kovacsecurity.com