Privacy Notice

Last updated: September 28, 2026

This Privacy Notice explains how Akita Cyber Security Ltd. (“Akita”, “the Company”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal data when you visit akitacyber.com (the “Website”), download resources, subscribe to our communications, book a meeting, contact us, apply for a position, or otherwise interact with us in connection with our cybersecurity services.

Akita Cyber Security Ltd. is an Israeli company. Our primary privacy and data protection framework is the Israeli Protection of Privacy Law, 5741-1981, as amended, together with the regulations and binding requirements issued under it, including applicable data security and cross-border data transfer requirements.

Where mandatory privacy or data protection laws of another jurisdiction apply to a particular processing activity, we will address those requirements to the extent applicable.

This Privacy Notice describes the information we collect, why we collect and use it, the parties with whom it may be shared, how we protect it, and the choices and rights available to individuals under applicable law.

1. Who We Are and How to Contact Us

Controller:
Akita Cyber Security Ltd.
Ehad Ha’am 9 St.
Tel Aviv, Israel

For questions about this Privacy Notice, our privacy practices, or Personal Data relating to you, please contact:

Email: AkitaPrivacyProtection AT akitacyber.com
(replace AT with @; this format is used to reduce automated scraping)

Where applicable law requires Akita to designate or publish details of an additional privacy contact or representative, those details will be provided as required.

2. Definitions

For the purposes of this Privacy Notice:

“Personal Data” means information relating to an identified or identifiable individual, as defined under applicable law.

“Cookies” means cookies and similar technologies used to store information on, or access information from, a device.

“Service Providers” means third parties that provide services to Akita or process Personal Data on our behalf, including providers of website hosting, information technology, cybersecurity, analytics, customer relationship management, email marketing, scheduling, communications and professional services.

“Usage Data” means technical and interaction information generated when you use the Website, such as IP address, browser and device information, pages visited, referral information and Website interactions.

“Services” means the Website and the cybersecurity, consulting, assessment, penetration testing, monitoring, GRC, CISO and related services offered by Akita.

“You” or “User” means an individual who accesses the Website or interacts with Akita, including an individual acting on behalf of an organisation.

The Website does not currently provide customer accounts or login functionality.

3. Personal Data We Collect

We seek to limit the Personal Data we collect to information reasonably relevant to the purposes described in this Privacy Notice.

3.1 Information You Provide Directly

When you contact us, request information, book a meeting, complete a form, subscribe to communications or otherwise interact with Akita, we may collect:

• Full name
• Business email address
• Company or organisation
• Job title or professional role
• Telephone number
• Information provided in an enquiry or contact form
• Meeting and scheduling information
• Communications you send to us
• Marketing and communication preferences
• Any other information you voluntarily choose to provide

Unless specifically stated otherwise, providing this information is voluntary.

If you choose not to provide information reasonably required for a particular purpose, we may be unable to respond to your enquiry, arrange a meeting, provide requested information or perform the relevant service.

3.2 Resources Centre

Our Resources Centre provides cybersecurity guides, checklists, explainers and other materials.

Resources may generally be accessed and downloaded without requiring you to submit Personal Data.

Subject to applicable law and your cookie or tracking preferences, we may collect information about interactions with the Resources Centre, such as:

• Pages viewed
• Resources selected or downloaded
• Referral source
• Campaign or UTM information
• Interactions with Website calls to action
• Interactions with meeting-booking links

This information helps us understand which content is useful to visitors and improve our Website, resources and business communications.

3.3 Newsletter and Marketing Subscriptions

If you voluntarily subscribe to our newsletter or other marketing communications, we may collect:

• First name
• Business email address
• Company name
• Subscription and consent information
• Information relating to engagement with emails or Website content, where permitted

Subscription is optional.

You may unsubscribe from marketing communications at any time by using the unsubscribe mechanism included in our emails or by contacting us.

3.4 Meeting Bookings

If you book a discovery call or other meeting with Akita, we may collect:

• Name
• Contact details
• Company information
• Meeting date and time
• Scheduling preferences
• Information you voluntarily provide during the booking process

Akita currently uses Microsoft Bookings and related Microsoft services to support meeting scheduling and communications.

3.5 Recruitment Information

If you apply for a position with Akita, we may collect:

• CV or resume
• Cover letter
• Contact details
• Employment history
• Professional qualifications
• Skills and experience
• References
• Interview information
• Any other recruitment-related information you choose to provide

3.6 Usage and Technical Data

When you use the Website, we may collect technical and Usage Data including:

• IP address
• General or approximate location derived from technical information
• Browser type and version
• Device type
• Operating system
• Pages viewed
• Date and time of visits
• Time spent on pages
• Referral URL
• Campaign and UTM information
• Website and content interactions

This information may be collected through server logs, Cookies and similar technologies.

3.7 Social Networks

The Website may contain links to Akita profiles or pages on third-party platforms such as LinkedIn and Instagram.

If you contact or interact with Akita through a social network, we may receive information that you make available through that platform, such as your name, role, profile information and messages.

The relevant third-party platform processes information according to its own privacy terms and policies.

4. How and Why We Use Personal Data

We collect and process Personal Data with the individual’s consent where consent is required, where the processing is permitted or required by applicable law, or where it is necessary to respond to a request, manage a business relationship, or provide our Services in accordance with applicable law.

We use Personal Data for the purposes communicated when the information is collected, purposes reasonably connected with those purposes, and other purposes permitted by applicable law.

We may use Personal Data for the following purposes.

4.1 Operating and Securing the Website

We may process information to:

• Operate and maintain the Website
• Protect the Website and our systems
• Detect and investigate security incidents
• Prevent abuse, fraud or misuse
• Diagnose technical problems
• Maintain Website availability and performance

4.2 Responding to Enquiries and Managing Business Relationships

We may process information to:

• Respond to enquiries and requests
• Provide information about Akita and our Services
• Arrange meetings and discovery calls
• Prepare proposals
• Communicate with customers and prospective customers
• Manage relationships with customers, suppliers, partners and other business contacts

4.3 Providing Cybersecurity Services

Where you or your organisation engages Akita, we may process information as necessary to:

• Provide and manage our Services
• Perform agreed assessments or engagements
• Communicate regarding an engagement
• Manage contractual and commercial relationships
• Provide customer support
• Meet security, operational or compliance requirements relevant to the engagement

Additional contractual or customer-specific privacy and confidentiality terms may apply to particular engagements.

4.4 Newsletter and Marketing Communications

We may send cybersecurity resources, news, guidance, event information, company updates and information about Akita Services in accordance with applicable law and your communication preferences.

Where consent is required, marketing communications will be sent on the basis of that consent.

You may unsubscribe or request that we stop sending marketing communications at any time.

4.5 Website Analytics and Improvement

We may use information to:

• Understand how visitors use the Website
• Measure Website performance
• Identify popular content and resources
• Improve navigation and user experience
• Evaluate the effectiveness of Website content and marketing campaigns
• Develop new content and resources

4.6 Resource and Content Engagement

Subject to applicable law and relevant cookie or tracking preferences, we may use information about interactions with the Resources Centre to understand:

• Which resources visitors find useful
• Which topics generate interest
• Which marketing sources or campaigns lead visitors to the Website
• Whether visitors interact with meeting-booking or other calls to action

Where you are already known to Akita as a business contact, permitted engagement information may be associated with your existing business contact record.

4.7 Business Development and Engagement Management

Where permitted by applicable law, Akita may use information about interactions with our Website, communications or resources to help our sales and marketing teams understand interest in Akita content and Services.

This may include:

• Resource downloads
• Page interactions
• Email engagement
• Campaign attribution
• Meeting-booking activity

Such information may be used to help prioritise appropriate B2B follow-up and make communications more relevant.

We do not use Website engagement information to make decisions about individuals that produce legal or similarly significant effects solely by automated means.

4.8 Recruitment

We may use recruitment information to:

• Review applications
• Evaluate candidates
• Conduct interviews
• Communicate with applicants
• Verify relevant professional information
• Consider applicants for current or future positions, where permitted

4.9 Legal and Regulatory Requirements

We may process or disclose information where reasonably necessary to:

• Comply with applicable law
• Respond to lawful requests by authorities
• Establish, exercise or defend legal rights
• Resolve disputes
• Enforce agreements
• Protect Akita, our customers, personnel or other parties

4.10 Corporate Transactions

Information may be processed or disclosed in connection with a proposed or completed:

• Merger
• Acquisition
• Investment
• Financing
• Reorganisation
• Sale of assets or business activities

Any such handling will be subject to appropriate confidentiality and legal protections.

5. Cookies and Similar Technologies

We use Cookies and similar technologies for purposes that may include:

• Strictly necessary Website functionality
• Website and information security
• Remembering Website preferences
• Analytics and performance measurement
• Understanding Website and content usage
• Measuring the effectiveness of marketing campaigns

Strictly necessary technologies may operate where required for the proper and secure operation of the Website.

Where applicable law requires consent before activating particular non-essential technologies, the relevant technologies will be handled in accordance with those requirements and the choices provided through our Website.

You may control available Cookie preferences through mechanisms provided on the Website and through your browser settings.

Disabling or blocking certain technologies may affect some Website functionality.

We may use third-party analytics and marketing technologies, including Google Analytics and ActiveCampaign, as described in this Privacy Notice.

6. Marketing, ActiveCampaign and Communications

Akita uses customer relationship management and marketing platforms, including ActiveCampaign, to support:

• Newsletter subscriptions
• Cybersecurity resource distribution
• Marketing communications
• Contact management
• Campaign measurement
• Business development activities

Where you voluntarily subscribe to our newsletter or other marketing communications, we may use information you provide and permitted engagement information to:

• Send requested communications
• Manage your subscription
• Understand engagement with our content
• Improve our resources and communications
• Support relevant B2B follow-up

You may unsubscribe from marketing emails at any time using the unsubscribe mechanism contained in the relevant email or by contacting Akita.

Where applicable Israeli direct-marketing requirements apply to a particular communication or database, Akita will handle requests for removal or cessation of communications in accordance with applicable law.

Unsubscribing from marketing does not prevent Akita from sending necessary non-marketing communications relating to an existing enquiry, contract, engagement, security matter or other ongoing business relationship.

7. Sharing of Personal Data

We may share Personal Data only where reasonably necessary for the purposes described in this Privacy Notice or where otherwise permitted or required by law.

7.1 Service Providers

We may use Service Providers that support:

• Website hosting and maintenance
• Cloud infrastructure
• IT services
• Cybersecurity
• Analytics
• Customer relationship management
• Email marketing
• Meeting scheduling
• Business communications
• Professional advice

These may include, where relevant:

• Microsoft, including Microsoft Bookings
• ActiveCampaign
• Google, including Google Analytics

Service Providers are permitted to process information only for authorised purposes and subject to relevant contractual and legal requirements.

7.2 Customers, Partners and Suppliers

Information may be shared where necessary to:

• Respond to a request
• Perform a contract or engagement
• Deliver Services
• Work with an authorised business partner or supplier
• Coordinate activities requested by a customer

7.3 Professional Advisers

Information may be shared where appropriate with:

• Lawyers
• Accountants
• Auditors
• Insurers
• Other professional advisers

7.4 Corporate Transactions

Information may be disclosed where reasonably necessary in connection with an actual or proposed corporate transaction, subject to appropriate confidentiality and legal protections.

7.5 Legal and Governmental Authorities

Information may be disclosed where required by:

• Applicable law
• Court order
• Lawful regulatory request
• Other legally binding requirement

We may also disclose information where reasonably necessary to protect our rights or the rights and safety of others.

7.6 With Your Consent or at Your Request

We may disclose information where you have asked us to do so or have otherwise provided valid consent.

Akita does not sell Personal Data.

8. International Transfers

Akita is based in Israel and uses Service Providers and business partners that may operate in other countries.

As a result, Personal Data may in some circumstances be transferred to or processed outside Israel.

Where information contained in a database in Israel is transferred abroad, Akita handles such transfers in accordance with the Israeli Privacy Protection Regulations (Transfer of Data to Databases Abroad), 5761-2001, and other applicable requirements.

Depending on the circumstances, applicable safeguards may include:

• Transfer to a jurisdiction providing the required level of data protection
• Contractual commitments by the recipient
• Consent, where legally appropriate
• Transfers required or permitted under another condition recognised by applicable law

Where the use of an external Service Provider involves access to an Akita database, additional data security and supplier-management requirements may apply.

Where a mandatory foreign law independently applies to a particular transfer or processing activity, additional requirements may apply.

9. Retention of Personal Data

We retain Personal Data only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, regulatory, contractual, security and business requirements.

Retention periods may depend on:

• The nature of the information
• The purpose for which it is processed
• The nature and duration of the business relationship
• Security requirements
• Applicable legal obligations
• Potential disputes or legal claims

Examples include:

• Business correspondence may be retained while relevant to an active or prospective business relationship.
• Customer information may be retained for the duration of an engagement and for an appropriate period afterward.
• Recruitment information may be retained for a reasonable period where permitted.
• Marketing subscription information may be retained while you remain subscribed.
• Limited suppression information may be retained after an unsubscribe request so that we can respect your preference not to receive further marketing communications.

When information is no longer reasonably required, it will be deleted, anonymised or otherwise handled in accordance with applicable law and Akita’s retention procedures.

10. Data Security

Akita implements technical and organisational measures designed to protect Personal Data against:

• Unauthorised access
• Unlawful processing
• Accidental loss
• Destruction
• Alteration
• Unauthorised disclosure
• Misuse

Measures may include, as appropriate:

• Identity and access controls
• Authentication
• Network and system security
• Endpoint security
• Logging and monitoring
• Backup and recovery
• Vulnerability and security management
• Policies and procedures
• Staff awareness and training
• Service Provider and supplier security controls

Akita manages security requirements applicable to Personal Data in accordance with the Israeli Privacy Protection Regulations (Data Security), 5777-2017, to the extent applicable to the relevant database and processing activity.

No security measure or method of transmission or electronic storage can guarantee absolute security.

11. Your Privacy Rights

Individuals may have rights in relation to Personal Data about them, subject to the conditions, procedures, limitations and exceptions provided by applicable law.

Under Israeli privacy law, these may include, where applicable:

• The right to request access to Personal Data held about you
• The right to request correction of Personal Data that is incorrect, incomplete, unclear or outdated
• The right to request deletion or other action in circumstances provided by law
• The right to request removal from certain direct-mailing databases or lists, where applicable

You may also unsubscribe from Akita marketing communications at any time.

Where mandatory privacy or data protection laws of another jurisdiction apply to a particular processing activity, you may have additional rights under those laws.

To submit a privacy-related request, please contact:

AkitaPrivacyProtection AT akitacyber.com

(replace AT with @)

We may request reasonable information to verify your identity and ensure that information is not disclosed to an unauthorized person.

We will consider requests and respond in accordance with the requirements applicable to the relevant request.

12. Information Provided to Us

Where Akita asks you directly to provide Personal Data, the information requested, its purpose and any relevant consequences of not providing it may be communicated through the relevant form, notice, business interaction or this Privacy Notice.

Unless expressly indicated otherwise, information submitted through general Website, newsletter, Resources Centre or meeting-booking interactions is provided voluntarily.

We use information collected for the purposes explained at the point of collection, in this Privacy Notice, or as otherwise permitted by applicable law.

13. Children’s Privacy

The Website and Akita’s Services are intended primarily for businesses and professional audiences.

We do not intentionally target the Website or our business-development activities at children and do not knowingly collect Personal Data from individuals under the age of 18 for marketing or business-development purposes.

If you believe that Personal Data concerning a child has been provided to us in circumstances that may not comply with applicable law, please contact us.

14. Third-Party Websites and Services

The Website may contain links to websites or services operated by third parties.

These may include:

• Social networks
• Microsoft Bookings
• Other business or communication platforms

When you follow a third-party link, that third party may collect and process information independently under its own privacy terms.

Akita does not control and is not responsible for the privacy practices, security or content of independent third-party websites or services.

We encourage users to review the relevant third party’s privacy information.

15. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect:

• Changes to the Website
• New or modified Services
• Changes to the technologies we use
• Changes to our business practices
• Changes in applicable legal or regulatory requirements

The date at the top of this Privacy Notice indicates when it was last updated.

Where required by applicable law, additional notice of material changes may be provided.

16. Contact Us

If you have questions about this Privacy Notice, Akita’s privacy practices, Personal Data relating to you, or wish to make a privacy-related request, please contact:

Akita Cyber Security Ltd.
Ehad Ha’am 9 St.
Tel Aviv, Israel

Email: AkitaPrivacyProtection AT akitacyber.com
(replace AT with @; this format is used to reduce automated scraping)