Privacy Policy
Last updated: April 2026
At Spartan Cybersecurity, we take the privacy of our users very seriously. This policy describes how we collect, use, store, and protect your personal information when you use our website, our cybersecurity training programs, and our hands-on lab platform Spartan Labs.
01Data Controller
Spartan Cybersecurity acts as the data controller for the personal information processed through its website, training programs, lab environments, and certification exams. You can reach our privacy team at privacy@spartancybersecurity.com to exercise your rights or raise concerns about how your data is handled.
02Information We Collect
We collect information you provide directly when you register, enroll in courses, deploy lab environments, take certification exams, or contact us. This includes: full name, email address, country, billing and tax information, employment or organization data, and profile details. We also collect learning data such as course progress, lab attempts, submitted flags, exam results, and certifications. Finally, we automatically collect technical data: IP address, browser type, operating system, device identifiers, request logs, and session metadata.
03Use of Information
We use your information to: provide, maintain, and improve our training services and lab platform; authenticate you and protect your account; provision and monitor your lab environments; issue and verify certifications; process payments and prevent fraud; send transactional and service-related communications such as security alerts, receipts, and product updates; respond to your inquiries and support requests; and comply with legal, accounting, tax, and regulatory obligations.
04Legal Basis for Processing
Where applicable law requires it, we process personal data based on: (i) the performance of the contract you enter when using our services; (ii) compliance with our legal obligations; (iii) our legitimate interest in operating, securing, and improving the platform, balanced against your rights; and (iv) your consent for any optional processing, which you may withdraw at any time without affecting prior processing.
05Cookies and Similar Technologies
We use essential cookies required for the site and platform to function, including authentication cookies for session continuity and a preference cookie that stores your selected language. We may also use analytics cookies to understand how you interact with the platform; you can configure your browser to reject non-essential cookies, although this may affect functionality. We do not currently use third-party advertising cookies or behavioral tracking.
06Sharing with Third Parties
We do not sell or rent your personal information. We share data only with trusted providers that help us operate the service, including identity and infrastructure providers (such as AWS), hosting and edge security providers (such as Cloudflare), our content management system, and payment processors. All processors are bound by contractual and security obligations to handle your data only on our instructions. We may also disclose information when required by law or to protect our legal rights and the safety of our users.
07International Data Transfers
Your information may be processed and stored in countries outside your residence, including the United States and the European Union, where our infrastructure providers operate. When required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms approved by the relevant data protection authorities.
08Data Retention
We retain personal data while your account is active and for the period necessary to fulfill the purposes described in this policy. As a guideline: account and learning data is kept while the account is active and up to 24 months after deletion to support recertification and audits; lab telemetry is typically kept for 12 months; billing records are retained as required by tax and accounting law (typically 5 to 10 years); and security logs are kept for up to 18 months. When personal data is no longer needed, we either delete it or anonymize it so it can no longer be linked to you.
09Data Security
As a cybersecurity company, we implement robust technical and organizational measures to protect your information. This includes encryption in transit (HTTPS) and at rest, authentication tokens stored in httpOnly cookies, isolated and sandboxed lab environments separated from production data, role-based access controls under the principle of least privilege, edge protection with web application firewall and rate limiting, continuous monitoring, and incident response procedures. No system can be guaranteed to be 100% secure; you remain responsible for keeping your credentials confidential and notifying us immediately of any suspected compromise.
10Your Rights
Subject to applicable law, you have the right to: access and obtain a copy of your personal data; rectify inaccurate or incomplete data; request the deletion of your data, subject to legal retention obligations; object to or restrict certain processing activities; receive your data in a structured, machine-readable format (data portability); withdraw any consent you have granted, without affecting prior processing; and lodge a complaint with the competent data protection authority — in Colombia, the Superintendencia de Industria y Comercio (SIC). To exercise these rights, contact privacy@spartancybersecurity.com. We may need to verify your identity before responding.
11Children's Privacy
Our services are not directed at individuals under 18 years of age. We do not knowingly collect information from minors. If you believe a minor has provided us with personal data without the consent of a parent or legal guardian, please contact us so we can take appropriate action.
12Changes to This Policy
We may update this privacy policy periodically. The "last updated" date at the top reflects the latest revision. Material changes will be communicated through a notice on our website or by email. Continued use of our services after the changes take effect constitutes acceptance of the updated policy.
13Contact
If you have questions about this privacy policy or about how your personal data is handled, please contact our privacy team at privacy@spartancybersecurity.com. For general support, please write to support@spartancybersecurity.com.