Satender Kumar | Information Security Portfolio

1Introduction

This Privacy Policy explains how Satender Kumar("I", "me", or "my") collects, uses, and discloses your information when you visit www.satenderkumar.com (the "Website"), whether you are located in Canada or elsewhere.

This Website complies with applicable privacy regulations including the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada, and the General Data Protection Regulation (GDPR) for visitors from the European Economic Area (EEA).

By using the Website, you agree to the practices outlined in this Policy, which are designed to ensure data is collected, stored, and processed securely and transparently.

2Why Privacy Matters

In today's digital world, your privacy is more important than ever. As a cybersecurity professional, I understand that:

Your personal data is valuable and deserves protection
You have the right to know how your information is being used
Transparency builds trust between us
Security and privacy go hand-in-hand

I implement the same security principles I advocate for professionally to ensure your data is handled with care.

3Information I Collect

I may collect the following types of information:

Personal Information

When you submit a contact form or request my resume, I collect your name, email address, and any other information you provide in your message.

Usage Data

I collect information about how you interact with my Website, including pages visited, time spent on pages, and other analytical data.

Technical Data

I collect your IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform.

Cookies & Similar Technologies

I use cookies to enhance your browsing experience, analyze site traffic, and understand where visitors are coming from.

4How I Use Your Information

I use the information I collect for the following purposes:

To respond to your inquiries and provide the information you request
To improve my Website and user experience
To analyze usage patterns and trends
To protect the security and integrity of my Website
To comply with legal obligations

Important: I will never sell your personal information to third parties or use it for purposes other than those listed above without your explicit consent.

5Legal Basis for Processing

Under the General Data Protection Regulation (GDPR) and Canadian privacy laws, I process your personal data under the following legal bases:

Consent

When you submit the contact form or explicitly agree to certain processing activities.

Legitimate

To improve and secure the Website, analyze usage patterns, and enhance user experience.

Legal

When I need to comply with a legal or regulatory obligation.

Contract

When processing is necessary to fulfill my obligations to you, such as responding to your inquiries.

6Cookies and Similar Technologies

I use cookies and similar tracking technologies to track activity on my Website and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier.

Cookie Type	Purpose	Duration
Essential	Necessary for the Website to function properly	Session to 1 year
Analytical	Allow me to recognize visitors and analyze website usage	Up to 2 years
Functionality	Remember your preferences and settings	Up to 1 year

You may see a cookie consent banner when visiting the Website. This allows you to opt in or out of non-essential cookies, in line with GDPR, PIPEDA, and ePrivacy rules.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of my Website.

7Third-Party Services

I use the following third-party services that may collect information about you:

Formspree

For processing contact form submissions

Google reCAPTCHA

To protect forms from spam and abuse

Vercel

For hosting and analytics

These third parties have their own privacy policies addressing how they use such information.

8Data Retention

I retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, or as required by applicable laws. Specifically:

Contact form submissions are retained for up to 1 year after our last communication.
Analytics data is retained in an anonymized format for up to 26 months.
Server logs containing IP addresses are automatically deleted after 30 days.

When your personal data is no longer needed for the purposes for which it was collected, it will be securely deleted or anonymized.

9Data Security

I implement appropriate security measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure, and I cannot guarantee absolute security.

HTTPS Encryption

All data transmitted to and from the website is encrypted

Regular Security Assessments

The website undergoes regular security testing and updates

Limited Data Access

Access to personal data is restricted on a need-to-know basis

Secure Cloud Providers

All data is stored with providers that maintain robust security practices

Additional Security Measures: This website implements Content Security Policy (CSP), input validation, and data sanitization to protect against common web vulnerabilities.

9A. No Professional or Legal Relationship

Submitting a form, visiting the Website, or viewing its content does not establish a business, professional, or legal relationship between you and me. The Website content is for informational and showcase purposes only.

No information provided on this Website constitutes professional advice, and you should not rely on any information on this Website as an alternative to professional advice.

10. International Data Transfers

Your information may be transferred to and processed in countries other than the one in which you reside, including Canada, where the Website is primarily operated.

I take reasonable steps to ensure that appropriate safeguards are in place to protect your personal data during such transfers, including Standard Contractual Clauses (SCCs) or equivalent mechanisms where required by law (e.g., GDPR-compliant regions).

By continuing to use this Website, you consent to such international data transfers in accordance with this Privacy Policy.

11Your Rights

Depending on your location, you may have the following rights regarding your personal data:

The right to access your personal data

The right to rectify inaccurate personal data

The right to request deletion of your personal data

The right to restrict processing of your personal data

The right to data portability

The right to object to processing of your personal data

The right to withdraw consent at any time

The right to lodge a complaint with a supervisory authority

To exercise any of these rights, please contact me using the information provided in the "Contact Me" section. I will respond to your request within 30 days.

12Children's Privacy

My Website is not intended for children under the age of 16. I do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided me with personal information, please contact me so that I can take necessary actions.

Note: The age threshold of 16 applies as per GDPR requirements. For visitors from countries with different age thresholds (such as 13 under COPPA in the US), the applicable local age threshold will apply.

13Changes to This Privacy Policy

I may update this Privacy Policy from time to time. I will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

You are advised to review this Privacy Policy periodically for any changes.

14. Contact Me

If you have any questions about this Privacy Policy, please contact me at:

Email: satenderkumar.analyst@gmail.com

Please note: I am not responsible for any third-party misuse of data you may share publicly or through your own browser/device settings. Always use secure and updated systems when submitting forms online.