1Our approach
We built this site to collect as little as it can. It works fully without any optional cookie. Analytics runs only if you allow it, you can change your mind at any time, and we never sell what we learn.
- Always on: the details you type into a form, what our servers and our content delivery network need to deliver the site and protect it, and a check that a form is sent by a person, not a bot.
- Only with your consent: Google Analytics 4, to count visits and see which pages are read. There are no advertising or social media trackers.
2Who we are
NxSCORE is built and run by eSec Forte Technologies Pvt. Ltd. ("eSec Forte", "we"), a company registered in India (CIN U72900DL2011PTC213201), with its registered office in New Delhi and its headquarters at Plot 888, Phase V, Udyog Vihar, Sector 19, Gurugram 122016, Haryana, India. We decide how the details described here are used.
This notice covers this website. When your organisation uses NxSCORE, the data in your cloud accounts is covered by your agreement with us and its data processing terms, which we share with you separately; the trust centre sets out what NxSCORE can and cannot read.
3What we collect
| Source | What | Why |
|---|---|---|
| Free cloud assessment form | Name, work email, organisation, the clouds and CNAPP you use, and anything you add in the message | To arrange your assessment |
| Contact form | Topic, name, email, organisation if you give it, and your message | To reply to you |
| Delivering the site | IP address, browser and device type, the page requested, the referring page and the time, seen by our servers and by Cloudflare | To deliver pages quickly and protect the site and its forms from attacks and bots |
| The bot check on the forms | When you reach a form, Cloudflare Turnstile reads signals from your browser and your IP address to tell a person from a bot. It sets no cookies. | To keep automated spam out of the forms |
| Analytics, with consent | Pages viewed, how you arrived, approximate location (city or country), device and browser, and a random identifier stored in a cookie | To count visits and see which pages are useful |
4How we use it
- To reply to you and arrange what you asked for.
- To deliver the site and keep it secure.
- With your consent, to understand how the site is used.
- To meet our legal obligations.
- We do not sell your details, and we do not add you to a mailing list because you sent a form.
5Why we may use it
Under India's Digital Personal Data Protection Act, 2023, we rely on your consent: you give it when you send a form, for the purpose shown beside that form, and in the cookie banner for analytics. Delivering and protecting the site is a use the Act allows without separate consent.
Where the EU or UK General Data Protection Regulation applies, we rely on our legitimate interest in answering enquiries and securing the site, on steps you asked for before an agreement, and on your consent for optional cookies.
You can withdraw consent at any time: in the cookie settings for cookies, or by writing to privacy@esecforte.com for form details. Withdrawing does not affect what was done before.
7Where it is kept
Form details are stored in a database on servers that eSec Forte runs in India, and are read only by the eSec Forte people who handle your enquiry. Colleagues in our offices in Sri Lanka, Singapore and the United States may read them when they are the right people to reply.
Cloudflare serves the site from its network around the world, and Google processes analytics data outside India. Where data leaves India, we rely on the safeguards the law requires, such as contracts that hold those providers to protecting it.
8How long we keep it
- Form details: until your enquiry is closed, then for up to 24 months so we can follow up on the same conversation. After that we delete them.
- Server and security logs: up to 90 days.
- Analytics: up to 14 months, then Google deletes it.
- Cookies: as listed on the cookie page.
- If you become a customer, your agreement with us sets how long we keep what.
9How we protect it
The site is served over HTTPS only. Form records sit in a database that is not reachable from the internet, and only named eSec Forte staff can sign in to read them. If we learn of a breach that affects your details, we tell you and the authorities the law requires us to tell.
10Your rights
You can ask us to:
- tell you what we hold about you and how we use it;
- correct or complete it;
- delete it;
- stop using it, by withdrawing consent;
- act for someone else you nominate, if you are unable to, as the Indian law allows.
Write to privacy@esecforte.com. We reply within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India, or to the data protection authority where you live.
11Children
This site is for organisations. It is not meant for anyone under 18, and we do not knowingly collect their details.
12Changes and contact
When this notice changes, the date at the top changes with it, and if we add a new kind of tracking we ask for your consent again. Questions about privacy: privacy@esecforte.com, or write to eSec Forte at the Gurugram address above.