Last updated: Feb 2, 2022

Privacy Policy

Sorb Security Pte. Ltd. Company and its subsidiaries and affiliates ("sorb", "sorbsec", "sorbcloud", "we", "our", or "us") knows that you value your privacy. This Privacy Policy ("Policy") explains the information we collect through the websites available via sorbsecurity.com and its subdomains as well as through other Sorb-managed websites or pages where this privacy policy is posted or linked (collectively, the "Sites"). This policy also describes the information collected from or on behalf of end users of our software-as-a-service products (the "Sorb Services"). This Policy will feature explanations regarding how information that we collect about an identified or identifiable natural person ("Personal Information") is collected, used, shared, and secured, as well as your related choices regarding the use, access, and correction of that Personal Information.

Please note that this Policy does not apply to the information collected by our customers from the use of the Sorb Services within their own infrastructure; that is, our customers remain responsible for their own privacy and security practices, which may differ from ours. If you are an employee of a company that uses the Sorb Services, those Sorb Services are governed by a separate agreement whose provisions take precedence over any conflicting language in this Policy.

By accessing or browsing the Sites and/or using the Sorb Services, you confirm that you have read and understood the entirety of this Policy.

Information We Collect and Process

To the extent permissible by applicable law, Sorb reserves the right to process various types of Personal Information from you, the details of which are further described below. We do so in order to provide the Sorb Services to you, to contact you with relevant offers and information requested by you, to fulfill certain requests, and to analyze how you use the Sorb Services. Under certain circumstances that are described below, we may share the Personal Information with third parties, but only to perform the stated purpose.

Information You Provide to Us

When you contact us by e-mail or through the "Contact Us" or "Request a Demo" functionality feature on our Site, we collect the information you provide, including e-mail address, name, and telephone number, if applicable, and store such information in order to answer your questions or respond to your request or to contact you regarding our products and services.

Information collected when you use the Sorb Services

In order to use the Sorb Services, a user will authenticate by means of a single-sign on (SSO) provider. This allows us to avoid processing log in credentials that may be considered to be Personal Information. We do collect the applicable user"s IP address every time that user logs into the platform whereby the Sorb Services are embedded.

In addition, as part of its normal functioning, the Sorb Services may process email metadata (e.g. headers and origin IP address), email contents (e.g. email address, email body, and any attachments thereto), and email platform metadata (e.g. tokenized identifiers). We use this information exclusively for the purpose of providing the Sorb Services to our users.

Sharing Your Information

We may share your Personal Information with:
1. Third-party vendors and other service providers that perform services on our behalf, which may include identifying and serving targeted advertisements; billing and payment processing; and, analytics services. Personal Information collected while you use the Sorb Services (as described above) is not shared with any third-parties.
2. Our business partners who offer a service to you jointly with us, or who partner with us to provide the Sorb Services to you;
3. Third parties as required by law or subpoena or if we reasonably believe that such action is necessary to comply with the law and the reasonable requests of law enforcement;
4. Other parties in connection with a strategic transaction, such as a merger, sale of company assets or shares, reorganization, financing, change of control or acquisition of all or a portion of our business by another company, or in the event of a bankruptcy or related or similar proceedings; and,
5. Other affiliates for purposes consistent with this Policy.

Choices About the Information You Provide

Data Subject Rights
The EU GDPR, the UK GDPR, and other countries' privacy laws provide certain rights for data subjects. Depending on the country in which you reside, you may have the following data protection rights:
To access; correct; update; port; delete; restrict; or object to our processing of your Personal Information;
To complain to a data protection authority about the collection and use of Personal Information. For more information, please contact your local data protection authority. Contact details for data protection authorities in the EEA and the UK is available here and for Switzerland, here;
To withdraw your consent of our processing of your Personal Information at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your Personal Information conducted in reliance on lawful processing grounds other than consent.
We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection law. If you wish to make a valid data subject request, please contact us at privacy@sorbsecurity.com. Before processing any such requests, we reserve the right to verify your identity to ensure that the request is valid and lawful.

Marketing Communications
You can stop receiving promotional email communications from us by clicking on the "unsubscribe" link provided in such communications, or by emailing marketing@sorbsecurity.com. We make every effort to promptly process all unsubscribe requests. You may not opt out of Sorb Services-related communications (e.g., account verification and account related information; changes/updates to our products or features of the Sorb Services; technical and security notices), unless you cease using the Sorb Services.

Advertising
We partner with a third party ad network to manage our advertising on other sites. Our ad network partner uses cookies and Web beacons to collect information about your activities on this and other websites to provide you targeted advertising based upon your interests. If you wish to not have this information used for the purpose of serving you targeted ads, you may opt-out by reaching out to marketing@sorbsecurity.com.

Information about Children

We do not knowingly collect or solicit Personal Information from anyone under the age of 16. If you are under 16, please do not attempt to register for the Sorb Services or send any Personal Information about yourself to us. If we become aware of Personal Information collected from a child under 16, we will immediately delete said information. If you believe that a child under 16 may have provided us Personal Information, please contact us at privacy@sorbsecurity.com or using the "Contact Us" methods described below.

Contact Us

If you have any questions about this Policy or about how we handle your Personal Information, please reach out to us!
By email:
privacy@sorbsecurity.com
By telephone:
+65 8807 5144

Changes to this Policy

We periodically update this Policy. We will post any Policy changes on this page and if the changes are material, we will provide a more prominent notice by sending you an email notification, or if you subscribe to the Sorb Services, via a notification within your Sorb account portal.