Privacy Policy

LahavSec is an offensive security practice operated by Yaniv Avisror in Israel. This page explains what this website collects, where it is kept, who processes it, and how to reach us about any of it. It covers this website only. Information handled inside a signed penetration testing engagement is governed by that engagement's agreement and its confidentiality terms, not by this page.

• This website has no login and no account area.
• The only personal information we receive is what you choose to send, through the engagement form or by email. Form submissions are stored in our CRM database.
• We run no analytics and set no tracking or advertising cookies.
• The fonts are served from our own domain, so no font provider sees your visit.

The engagement form collects your name, phone number and email address, and, if you give them, your organization, the service you are interested in, how urgent it is, and your message. It also records that you ticked the consent box and the address of the page you sent it from. To limit abuse, our endpoint keeps a one-way keyed hash of your IP address, never the address itself.

We use this information only to answer you and to scope work if that is what you are asking about. We do not use it for marketing, and we do not build a profile of you.

You are under no legal obligation to give us this information. Name, phone and email are required only because without them we cannot reply.

An inquiry that does not lead to an engagement is kept for up to 24 months after our last contact, then deleted. If it does lead to an engagement, the records follow that engagement's agreement. You can ask us to delete your information at any time, and we will remove it from the CRM.

Like any website, this one is served through a hosting and content-delivery provider that processes connection data such as IP address, user agent, requested URL and timestamp, in order to serve the page and to protect the site against abuse. We do not use those logs to build a profile of you.

This site sets no advertising or analytics cookies. The items below are the only things stored or transmitted, and none of them tracks you:

Our hosting provider may set a strictly necessary security cookie to protect the site and the form against bots. If we ever add advertising or analytics measurement, it will be off by default, a consent request will appear before anything is set, and this page will be updated first, as required by Israel's Protection of Privacy Law and the guidance of the Privacy Protection Authority.

We use a small number of service providers that process information on our behalf, only to provide their service to us: website hosting and bot protection, the database our CRM runs on, and the service that emails us when an inquiry arrives.

These providers operate outside Israel, so your information is stored and processed outside Israel. Each provider is bound by data processing terms and security commitments. You can ask us which providers are involved. We do not sell personal information, and we do not share it with anyone for their own marketing purposes.

Under Israel's Protection of Privacy Law, 5741-1981 (חוק הגנת הפרטיות, התשמ"א-1981), including Amendment 13, you may ask what information we hold about you, ask us to correct it, and ask us to delete it. If you are in the European Union or the United Kingdom, the GDPR gives you equivalent rights, including access, rectification, erasure, restriction, portability and objection, and the right to complain to your local supervisory authority. Write to us and we will answer.

We protect the information we receive with technical and organisational measures appropriate to it, including encryption in transit, bot protection on the form, input validation, and access to the CRM limited to authorised staff.

This site is aimed at organisations and the people who run their security. It is not directed at children, and we do not knowingly collect information about them.

If this policy changes, the revised version appears here with a new date at the bottom of the page.

For privacy questions, requests about your information, or accessibility issues, write to contact@lahavsec.com. The responsible person (בעל השליטה במידע) is Yaniv Avisror, founder of LahavSec.