Privacy & data

Privacy Policy

How TSEC handles information when you browse our website, contact us, request a proposal, or purchase a digital product.

1. Information we collect

The information we collect depends on how you interact with TSEC. It may include:

• Contact and inquiry details: name, business email, company, role, phone number if supplied, selected services, and the contents of messages or proposal requests.
• Order and transaction details: product purchased, transaction status, order identifier, billing or tax details handled by the checkout provider, and information needed to help with a purchase. We do not ask you to send full payment-card numbers or security codes to us.
• Technical and usage data: information that may be logged by our website hosting, security, or delivery infrastructure, such as IP address, browser and device characteristics, requested pages, timestamps, and error or security logs.
• Communications: information you provide when you contact us for support, request a proposal, or otherwise communicate with us.

Please do not submit sensitive personal information, confidential client records, credentials, or regulated data through general website forms or ordinary email unless we have specifically agreed on an appropriate secure method.

2. How we use information

We may use information to:

• respond to questions, requests for proposals, and customer-support inquiries;
• process or verify orders, provide downloads, and resolve delivery or payment issues;
• operate, maintain, troubleshoot, and secure the website and products;
• maintain business, accounting, tax, and transaction records;
• detect fraud, misuse, unauthorized access, or other harmful activity;
• communicate important service, policy, or order information; and
• send marketing communications where permitted by law and consistent with your choices.

We process information as reasonably necessary for these purposes, to perform a contract or take steps at your request before entering a contract, to comply with legal obligations, and for legitimate business interests such as security and service improvement. Where consent is required, we will seek it.

3. Payments and service providers

Checkout may be provided by Paddle. Depending on the transaction and the role Paddle performs, Paddle may collect and process information such as contact, billing, tax, and payment details under its own privacy notice and terms. Please review the notices presented during checkout. We may receive order confirmations and limited transaction information needed to fulfill purchases, maintain records, and provide support. We do not intentionally store full payment-card numbers or card security codes on TSEC systems.

We may use service providers for website hosting, business email, file delivery, security, analytics, customer communications, and other operational functions. Providers may process information on our behalf or under their own terms, depending on the service. We seek to use providers and access arrangements appropriate to the function being performed.

4. Cookies and similar technologies

Our website or its providers may use essential technical storage, server logs, or similar technologies to deliver pages, maintain security, remember necessary settings, or understand technical performance. If optional analytics or advertising technologies are used, they should be disclosed and managed as required by applicable law. Browser settings may allow you to block or delete cookies, although some website functions may not work properly as a result.

5. When information is shared

We do not sell personal information for money. We may disclose information:

• to providers that support our business and need the information to perform their services;
• to payment providers, financial institutions, or relevant parties to complete, verify, or investigate a transaction;
• when required by law, legal process, or a valid request from a competent authority;
• to protect the rights, property, security, and safety of TSEC, our customers, or others, including investigating suspected fraud or misuse; or
• in connection with a merger, financing, acquisition, restructuring, or sale of all or part of our business, subject to appropriate safeguards and applicable law.

We do not authorize service providers to use personal information they process for us for their own unrelated purposes, except where their independent role or applicable terms permit it.

6. Retention and security

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including order fulfillment, customer support, recordkeeping, dispute resolution, security, and legal or tax compliance. Retention periods vary depending on the type of information and the reason it was collected.

We use reasonable administrative, technical, and organizational measures intended to protect information. No website, email transmission, or storage system can be guaranteed completely secure, and we cannot promise absolute security. You should use secure channels for sensitive information and notify us promptly if you believe an account, transaction, or communication involving TSEC has been compromised.

7. Your choices and privacy rights

Depending on where you live and the laws that apply, you may have rights to request access to, correction of, deletion of, or a copy of certain personal information; to object to or restrict certain processing; to withdraw consent where processing relies on consent; or to opt out of certain marketing communications. Some rights are subject to exceptions, verification, and legal retention requirements.

To make a privacy request, email info@tsecgrc.com with the subject “Privacy Request” and describe what you are requesting. Please do not send passwords, payment-card details, or identity documents unless we request information through an appropriate method. We may need to verify your identity or authority before acting. You may also have the right to complain to your relevant privacy regulator.

To stop receiving promotional emails from TSEC, follow the unsubscribe instructions in the message where available or contact us. We may still send non-promotional communications about purchases, support, security, or legal matters.

8. International processing

TSEC and its providers may process information in the United States or other countries where they operate. Data protection laws in those locations may differ from those where you live. Where required, we will use appropriate measures for cross-border transfers.

9. Children

The website and products are intended for business and professional use and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can review the matter and take appropriate action.

10. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, services, providers, or legal obligations. The “Effective date” above indicates the current version date. Material changes will be reflected by publishing the updated policy on this page, subject to any additional notice required by law.