Legal

Privacy Policy

How the secops.run website handles personal information when you visit it or contact us through it.

Effective date: 13 November 2026 · Last updated: 13 November 2026

1. Scope

This policy covers the public SecOps website at secops.run (www.secops.run redirects to it), including the “Talk to our team” contact form. It does not cover the SecOps portals at in.secops.run and eu.secops.run, which have their own privacy notices (see section 13).

2. Who runs this website

The secops.run website is maintained by Crius Logic, which also answers the enquiries sent through it. In this policy, “we” and “us” mean Crius Logic. Crius Logic operates internationally, including from New York and Dubai.

3. What we collect

When you use the contact form

The form asks for your name, your company, your work email address, the number of clients you look after (optional) and your message. When you send it, the website also receives:

  • a one-time Cloudflare Turnstile token, which shows whether the security check passed;
  • your IP address, used to verify that token and to apply the daily limit described in section 6; and
  • your country, as Cloudflare determines it from your IP address, which is included in the enquiry email together with the time it was sent.

When you browse

The website is delivered by Cloudflare. To serve and protect it, Cloudflare processes technical information about each request, such as your IP address, browser type, the page requested and the time. The website’s Worker also keeps operational logs in Cloudflare (for example the address requested, the response status and network details Cloudflare attaches to a request, which can include your IP address and approximate location). We use these logs only to keep the site working and secure; they do not contain the text of your enquiry.

Please do not send passwords, payment details, government identity documents, health information or other highly sensitive information through the contact form.

4. How we use it

  • to reply to your enquiry and talk with you about SecOps;
  • to protect the contact form from spam and automated abuse (Turnstile, a hidden honeypot field and the daily limit);
  • to keep the website running, secure and free of faults; and
  • to meet legal obligations where they apply.

We do not sell personal information, and we do not use it for advertising or to build advertising profiles.

5. Legal bases

Where privacy law requires a legal basis, we rely on one or more of the following:

  • steps you ask us to take before a possible contract or business relationship, such as answering your enquiry;
  • our legitimate interests in answering business enquiries and protecting the website from abuse; and
  • compliance with legal or regulatory obligations.

6. What the website stores

The website does not keep a database of enquiries. When you send the form, the website checks it and emails it straight to the people at Crius Logic who answer enquiries; the website itself does not keep a copy of your message.

To allow one enquiry per day from each connection and from each email address, the website keeps a short-lived record in a Cloudflare Durable Object: a SHA-256 hash of your IP address and a SHA-256 hash of your email address, each with the time you sent the form. It never stores the addresses themselves. These records are created only after the security check passes, and they are deleted automatically once 24 hours have passed. If the email cannot be delivered, they are deleted straight away so that you can try again.

7. Cookies, analytics and tracking

The website itself sets no cookies and uses no analytics, advertising or tracking scripts.

If you choose a light or dark appearance in the footer, that choice is saved in your browser’s local storage under secops-theme. It never leaves your browser, and choosing Auto removes it.

Cloudflare Turnstile loads only when you open the contact form. It runs its check in a frame served from challenges.cloudflare.com, so anything it stores in your browser belongs to Cloudflare rather than to this website. Cloudflare states that Turnstile does not access, store or transmit the contents of form submissions or other page inputs. Its handling is described in Cloudflare’s Turnstile Privacy Addendum and Cloudflare’s privacy terms. Cloudflare, which delivers the whole site, may also set strictly necessary security cookies of its own when its network protection requires them.

8. Service providers

The website runs on Cloudflare, which processes information on our behalf to:

  • host and deliver the website (Cloudflare Workers and static assets);
  • run the Turnstile security check on the contact form;
  • keep the rolling 24-hour limit record described in section 6 (Durable Objects);
  • deliver enquiry emails (Cloudflare Email Service); and
  • keep the operational logs described in section 3.

Enquiry emails arrive in Crius Logic’s mailboxes and are handled there by the people who answer enquiries, using the email service Crius Logic uses for its business mail. We may also share information with professional advisers, or where valid law, regulation or legal process requires it.

9. International processing

Cloudflare operates a global network, and Crius Logic operates internationally, so your information may be processed outside the country where you live. Where the law requires it, appropriate contractual, organisational or legal safeguards are used for international transfers.

10. How long we keep it

  • Daily limit record: deleted once 24 hours have passed (section 6).
  • Enquiry emails: kept only as long as reasonably necessary to answer you, manage any business relationship that follows, keep appropriate records and meet legal obligations.
  • Operational logs: kept by Cloudflare for a short operational period, unless needed to investigate abuse or a security problem.

11. Security

The website is served only over HTTPS. Form input is checked and size-limited by the Worker, and nothing you type is placed unescaped into the emails it sends. No internet service can guarantee absolute security, but we use reasonable technical and organisational measures to protect the information we receive.

12. Your rights

Depending on where you live, you may have the right to ask for access to your personal information, to have it corrected or deleted, to restrict or object to its processing, to receive a portable copy, and to withdraw consent where processing relies on consent. Where European Economic Area or United Kingdom data protection law applies, you may also complain to your local supervisory authority. Residents of India, of certain US states and of other jurisdictions may have further rights under their local law, which we will honour where it applies.

To make a request, use the Crius Logic contact page.

13. The SecOps portals

The sign-in links on this website lead to the SecOps portals, where customers use the product: in.secops.run for India and eu.secops.run for Europe. Each portal has its own terms and privacy notice, which apply there instead of this policy: India privacy notice and Europe privacy notice.

14. Children

This website is meant for businesses and professionals and is not directed to children. We do not knowingly collect personal information from children through it.

15. Changes to this policy

We may update this policy when the website, its service providers or the law change. The dates at the top of this page show the latest revision.

16. Contact

For privacy questions or requests, please use the Crius Logic contact page.