Skip to main content

    Privacy Policy

    Last updated: 1 April 2026

    1. Who We Are

    Budget Security B.V. ("we", "us", "our") is a self-serve penetration testing platform registered in The Hague, the Netherlands. Our office is located at Prisma 17 A, 2495 AS, The Hague. We are the data controller for personal data collected through budgetsecurity.com and our platform at portal.budgetsecurity.com.

    2. What Data We Collect

    We collect the following categories of personal data:

    • Account data: Name, email address, company name, and phone number when you request access or create an account.
    • Usage data: Pages visited, browser type, device information, and IP address collected via server logs.
    • Communication data: Any messages or inquiries you send to us.

    3. How We Use Your Data

    • To provide, operate, and improve our penetration testing platform.
    • To process your account registration and service requests.
    • To communicate with you about your account, engagements, and deliverables.
    • To comply with legal obligations, including those under Dutch law and the GDPR.

    4. Legal Basis (GDPR)

    We process personal data on the following legal grounds:

    • Contract: Processing necessary to provide our services to you.
    • Legitimate interest: Website analytics and service improvement.
    • Legal obligation: Compliance with Dutch and EU law.

    5. Data Sharing

    We do not sell your personal data. We may share data with service providers who assist in operating our platform (hosting, email delivery) under appropriate data processing agreements. We use Cloudflare for hosting and Microsoft Power Automate for form processing.

    6. Data Retention

    We retain personal data for as long as necessary to provide our services and comply with legal obligations. Account data is retained for the duration of your account plus 12 months. Server logs are retained for up to 90 days.

    7. Your Rights

    Under the GDPR, you have the right to:

    • Access the personal data we hold about you.
    • Request correction of inaccurate data.
    • Request deletion of your data.
    • Object to or restrict processing.
    • Data portability.
    • Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

    8. Cookies

    budgetsecurity.com does not use tracking cookies or third-party analytics. We use essential server-side logging only. No cookie consent banner is required as we do not place cookies on your device.

    9. Security

    We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS), access controls, and regular security assessments of our own infrastructure.

    10. Contact

    For privacy-related inquiries, contact us at [email protected] or call +31 (0)70 22 121 14.