Privacy policy

Who we are

H2 Security is H2Security LLC, a company registered in Wyoming, United States. We decide what happens to the personal data described here.

For anything on this page, e-mail [email protected] or use our contact form.

This website (h2security.io)

• Contact form: when you write to us, we receive your name, e-mail address, company, subject and message, delivered to our mailbox by a form-delivery service. We use it only to answer you and keep it as long as the conversation and our business records need it.
• E-mail: messages you send us are stored in our mailbox, run by our e-mail provider.
• Hosting: our hosting provider serves the pages and protects them from abuse, which means it sees the address of your connection.
• No analytics and no advertising trackers run on this site. The only script we did not write is a small one our hosting provider's network adds to hide e-mail addresses on the page from spam bots.

T Academy (academy.h2security.io)

The academy has its own privacy page with every detail: academy.h2security.io/privacy. In short:

• Your account: your name, e-mail address and the settings you choose, so we can give you an account and sign you in. Your password is stored only in a protected, one-way form: nobody, including us, can read it.
• Your learning: progress, completed lessons and tasks, notes, the work you submit, and exam and practical attempts.
• Your labs: when you start and stop a lab, which objectives you met, and a record of lab activity needed to check your work and keep the labs secure. We do not store the text of the commands you type.
• Payments: handled by our payment processor on its own checkout page. Your card details never reach our servers; we receive your subscription and its status.
• Account e-mails, such as confirming your address or resetting your password, are sent through our e-mail provider.

Server logs

Our servers log requests: the address of your connection, your browser type, the page and the time. We use these logs to keep our services secure and working, and delete them after 30 days.

Who else processes your data

We do not sell your data and we do not share it for advertising. Only providers we have chosen process it for us, under contract and only to run our services. The list of these providers is available on request:

• our hosting provider;
• our payment processor;
• our e-mail provider, for our mailbox and account e-mails;
• a form-delivery service, for the contact form.

Where your data is

Our own servers are in the United States. Some of our providers also process data in other countries, for example to deliver pages from a location near you. If you are in the European Union, the United Kingdom or elsewhere, your data is therefore transferred outside your country to provide the service you asked for. Wherever it goes, we rely on safeguards such as the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses.

Why we are allowed to use it

• To provide what you asked for: your academy account, your learning and your subscription, and answering your messages.
• Our legitimate interest in keeping our services secure and in knowing which sites send us visitors, in the limited way described on our cookie page.
• The law, where we must keep records such as payments.

How long we keep it

• Your academy account and learning record: as long as you have an account.
• Messages to us: as long as the conversation and our business records need them.
• Server logs: 30 days.
• Payment records: as long as the law requires.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to receive it in a portable form, or to stop a use of it. E-mail [email protected] or use our contact form, and we will answer within one month.

If you are in the European Union or the United Kingdom, you can also complain to your data protection authority.

Changes

When what we do with personal data changes, we update this page and the date below. If a change matters for your academy account, we tell you by e-mail first.