Privacy Policy - Shellkode

At Shellkode ("Shellkode," "we," "us," or "our"), we value your privacy and are dedicated to protecting your personal information. This Privacy Policy outlines how we collect, use, store, and protect your data when you interact with our services, visit our website, or engage with our cloud computing, AI solutions, and digital marketing offerings.

Scope and Application

This policy applies to all individuals who interact with Shellkode, including website visitors, clients, prospects, partners, and service users. Shellkode operates globally and this policy covers our data practices across all jurisdictions where we provide services.

Our Role as Data Handler

Depending on the context of our relationship with you, Shellkode may function as:

  • Data Controller: When we determine the purposes and methods of processing your personal data
  • Data Processor: When we handle data on behalf of our clients according to their instructions
  • Joint Controller: When we share decision-making about data processing with our partners or clients

Information We Collect

Categories of Personal Information

Contact and Identity Information

  • Full name, professional titles, and company affiliations
  • Email addresses, phone numbers, and mailing addresses
  • LinkedIn profiles and other professional social media identifiers
  • Business cards and networking event contact details

Digital Interaction Data

  • Website browsing patterns, page views, and session duration
  • IP addresses, device types, operating systems, and browser information
  • Referral sources and search terms used to find our services

Business and Professional Data

  • Industry sector, company size, and organizational structure
  • Job responsibilities, technical expertise, and project requirements
  • Communication preferences and service interests
  • Event attendance and webinar participation records

Transactional Information

  • Service agreements, contracts, and billing information
  • Payment methods, purchase history, and account status
  • Support tickets, service requests, and resolution details

How We Obtain Your Information

  • Direct Collection: Forms, surveys, service registrations, and direct communications
  • Third-Party Sources: Lead generation platforms, industry databases, and referral networks
  • Public Sources: Company websites, professional networks, and industry publications
  • Automated Collection: Website analytics, cookies, and user interaction tracking

Legal Foundations for Data Processing

We process your personal data based on one or more of the following legal grounds:

  • Contractual Necessity: To fulfill our obligations under service agreements and contracts.
  • Legitimate Business Interests: For business development, service improvement, and operational efficiency
  • Legal Compliance: To meet regulatory requirements and industry standards
  • Consent: When you explicitly agree to specific data processing activities (you may withdraw consent anytime)
  • Vital Interests: To protect health, safety, or other critical interests when necessary

How We Use Your Data

Primary Purposes

Service Delivery and Management

  • Providing cloud computing, AI, and digital marketing solutions
  • Managing client accounts, projects, and ongoing service relationships
  • Processing transactions, billing, and payment activities
  • Delivering customer support and technical assistance

Business Operations

  • Lead generation and sales prospect management
  • Marketing communications and promotional activities
  • Website functionality, security, and performance optimization
  • Analytics and business intelligence for service improvement

Communication and Engagement

  • Responding to inquiries, requests, and service-related communications
  • Sending newsletters, industry updates, and relevant content
  • Facilitating event invitations and professional networking opportunities
  • Conducting surveys and gathering feedback on our services

Special Considerations for EU Residents

Definition of Personal Data Under GDPR

For individuals located in the European Union, "Personal Data" encompasses any information that relates to an identified or identifiable natural person. This includes both direct identifiers and data that, when combined, can identify an individual.

Personal Data Categories We Process

Direct Identifiers

  • Names, email addresses, and phone numbers
  • Professional titles, company names, and business addresses
  • Government-issued identification numbers (when required for compliance)

Digital Identifiers
  • IP addresses, device IDs, and cookie identifiers
  • Online account usernames and profile information
  • Website interaction logs and digital footprints

Indirect Identifiers
  • Location data derived from IP addresses or device settings
  • Behavioral patterns from website usage and service interactions
  • Preferences and interests inferred from engagement activities

Professional and Business Information
  • Employment details, job responsibilities, and organizational affiliations
  • Industry expertise, technical skills, and project experience
  • Business relationships and professional network connections

Data Sharing and Disclosure

Authorized Recipients

Service Providers and Vendors


We engage trusted third-party providers for hosting, analytics, payment processing, customer support, and marketing services. These providers operate under strict contractual obligations to protect your data and use it only for specified purposes.

Business Partners

We may share data with strategic partners when jointly delivering services or participating in collaborative projects, always with appropriate data protection agreements in place.

Corporate Transactions


In the event of a merger, acquisition, or business restructuring, personal data may be transferred to the new entity, with continued protection under this policy or an equivalent standard.

Legal Requirements


We may disclose information when required by law, court order, or regulatory investigation, or to protect our rights, property, or the safety of our users and the public.

 

Geographic Data Transfers

Shellkode operates internationally and may transfer your data to countries outside your jurisdiction. We ensure appropriate safeguards through:

  • Standard Contractual Clauses approved by relevant authorities
  • Adequacy decisions recognizing equivalent protection levels
  • Binding corporate rules and internal data transfer agreements

Your Privacy Rights and Choices

Universal Rights

Access and Information: Request details about the personal data we hold about you


Correction and Updates: Request corrections to inaccurate or outdated information


Communication Preferences: Opt-out of marketing communications via unsubscribe links

Account Management: Update your preferences and account settings directly

Additional Rights for EU Residents

Data Portability: Receive your data in a structured, machine-readable format


Restriction of Processing: Limit how we process your data in certain circumstances

Right to Erasure: Request deletion of your data when no longer necessary


Objection Rights: Object to processing based on legitimate interests or direct marketing

Exercising Your Rights

To exercise any of these rights, contact our Data Protection Office at privacy@shellkode.com or use the contact information provided below. We will respond to your request within the timeframes required by applicable law.

Data Security and Protection

Technical Safeguards

  • End-to-end encryption for data transmission and storage
  • Multi-factor authentication and access controls
  • Regular security audits and penetration testing
  • Automated monitoring and threat detection systems

Organizational Measures

  • Employee data protection training and awareness programs
  • Strict access controls based on job responsibilities and business needs
  • Regular policy reviews and compliance assessments
  • Incident response procedures and breach notification protocols

Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods vary based on:

  • The nature of the data and its sensitivity
  • Legal and regulatory requirements
  • Business and operational needs
  • Your relationship with Shellkode and service usage

Your Consent and Acknowledgment

By continuing to use our website and services, you acknowledge and agree to Shellkode’s Privacy Policy, Cookie Policy, and Terms of Service. Your use implies consent to the collection, use, and processing of your personal data as described in these policies.

Updates to Our Privacy Practices

Shellkode reserves the right to update this Privacy Policy periodically. Any changes will be posted prominently on this page, and the “Last Updated” date will be revised accordingly.

We encourage you to review this page occasionally to stay informed about how we protect your information and manage your data.

Should significant changes arise due to new legal or regulatory requirements, or substantial modifications in business practices affecting your personal data, we will notify you directly where possible. At that time, you may be asked to review and reaffirm your consent.

Feedback and Contact

If you have any questions, concerns, or suggestions about this Privacy Policy or your data privacy rights, please reach out to us at our contact page:

https://www.shellkode.com/contact-us