Privacy policy

Who we are

This website is operated by Zillusion Private Limited ("we", "us"), which provides red teaming and security assessment services under the YBM Labs name.

This policy covers personal data collected through this website. Information we handle while delivering an engagement is governed by the contract and rules of engagement agreed with that client.

What we collect

Enquiry details you submit through our contact form or by email: your name, work email, company, role and anything you write in your message.
Technical data recorded by our hosting provider when you visit, such as IP address, browser type and the pages requested, kept in server logs for security and reliability.

We do not use analytics or advertising cookies on this website.

How we use it

To respond to your enquiry and, where you ask us to, prepare a proposal.
To keep a record of our business correspondence.
To keep this website secure and working properly.

We do not sell personal data or use it for advertising.

Why we are allowed to use it

We process enquiry details on the basis of the consent you give when you submit the form, and technical data for the legitimate purpose of operating a secure website, as permitted under the Digital Personal Data Protection Act, 2023. You can withdraw your consent at any time by contacting us; this does not affect processing that took place before.

We share personal data only with service providers that help us run this website and our communications, such as our hosting and email providers, under terms that require them to protect it. Some of these providers process data outside India. We may also disclose data where required by law.

How long we keep it

We keep enquiry details for 24 months from our last contact with you, unless the enquiry becomes an engagement, in which case the contract sets the retention period. Server logs are kept for a limited period by our hosting provider.

Your rights

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

Tell you what personal data we hold about you and how we use it.
Correct, complete, update or erase your personal data.
Withdraw your consent.
Address a grievance about how we handle your data.
Act on behalf of a person you nominate, in the event of your death or incapacity.

We will respond within the time required by law. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Grievance officer

Name or role: Grievance Officer, YBM Labs
Email: privacy@ybmlabs.com

Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit and restricted access. See how we protect information.

Children

This website is intended for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.