PRIVACY POLICY

Last updated: November 22, 2025

Blackhawk Security ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our penetration testing services or visit our website.

Information We Collect

Personal Information

  • Name and job title
  • Email address
  • Phone number
  • Company name and address
  • Payment information (processed securely through third-party providers)

Technical Information

  • IP addresses and domain names of systems tested (with your explicit consent)
  • Security vulnerabilities discovered during testing
  • System configurations and network architecture details
  • Log data from your systems during testing periods

How We Use Your Information

We use the collected information for the following purposes:

  • To perform penetration testing services as contracted
  • To generate security assessment reports
  • To communicate with you about our services
  • To improve our testing methodologies and tools
  • To comply with legal obligations
  • To protect against fraudulent or illegal activity

Data Security

We implement industry-standard security measures to protect your information:

  • End-to-end encryption for all data transmissions
  • Encrypted storage of all testing results and reports
  • Multi-factor authentication for all team members
  • Regular security audits of our own infrastructure
  • Strict access controls and need-to-know policies

Data Retention

We retain your information only as long as necessary:

  • Testing data: 90 days after report delivery
  • Reports: 1 year unless otherwise agreed
  • Business records: As required by law (typically 7 years)
  • You may request deletion of your data at any time

Confidentiality

All information obtained during penetration testing is treated as strictly confidential. We will never:

  • Share your vulnerabilities with third parties
  • Use your data for marketing without consent
  • Retain testing access after engagement completion
  • Discuss your security posture publicly

Your Rights

You have the right to:

  • Access your personal information
  • Correct inaccurate data
  • Request deletion of your data
  • Object to certain processing activities
  • Receive your data in a portable format

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: