Privacy policy

Who we are

The holder of individual activity certificate No. 777726, Vilnius, Lithuania (“CISO Talents”, “we”) runs this website and is the controller of the personal data described here. Contact us about privacy at privacy@cisotalents.com.

CISO Talents opens in late November 2026. Until then this website has a blog and a waitlist, and this policy covers only those. We will publish a full policy before member accounts open.

What we collect and why

Waitlist

• Data: your email address, which group describes you, your company if you give it, the page you signed up from, and when you signed up.
• Why: to email you about the launch.
• Legal basis: your consent, which you give when you join the waitlist. You can withdraw it at any time.
• How long: until you unsubscribe, ask us to delete it, or we close the waitlist.

Launch emails

When you join, we copy your email address to MailerLite with your company and the group you chose. MailerLite sends our launch emails, and each one has a link to unsubscribe. If you ask us to delete your data, we delete your sign-up and ask MailerLite to delete its copy too.

Visits to the website

• Data: IP address, browser details, pages requested and times, in our server and security logs. Cloudflare processes the same data to protect the site and to run the Turnstile check on the waitlist form.
• Why: to keep the website secure, prevent abuse and fix faults.
• Legal basis: our legitimate interest in running a secure website.
• How long: our server logs are kept for up to 30 days unless needed to investigate an incident.

Visit statistics

• Data: the page you open, the site that sent you, your browser, operating system and device type, and the country and city worked out from your IP address. We count visits with Umami, which we run on our own server. It sets no cookies and does not store your IP address: it turns your IP address and browser details into a one-way code so that it can count unique visitors.
• Why: to see which pages people read and how they find the site.
• Legal basis: our legitimate interest in improving the website. If your browser sends a Do Not Track signal, your visit is not counted.
• How long: the statistics are kept while the site runs. They contain no IP addresses and no cookies.

Reading the blog needs no account, and we collect nothing from it beyond these visit records and statistics.

Cookies

We use only cookies needed to run the site: a session cookie, a cookie that protects the waitlist form against cross-site request forgery, and Cloudflare security cookies, including those set by the Turnstile check. We do not use analytics or advertising cookies.

Who processes your data for us

• Cloudflare: content delivery, security and the Turnstile check.
• Hostinger: our servers, in the EU.
• MailerLite: our launch emails.

We do not sell personal data.

International transfers

Our servers are in the EU. Some providers, including Cloudflare and MailerLite, may process data outside the European Economic Area and the UK, including in the United States. Those transfers rely on the EU-US Data Privacy Framework or on Standard Contractual Clauses.

Your rights

You can ask to access, correct or delete your data, to restrict or object to how we use it, and to receive it in a portable format. You can withdraw your consent at any time with the unsubscribe link in our emails or by emailing privacy@cisotalents.com. We reply within one month. You can also complain to your data protection authority; in the UK, that is the Information Commissioner’s Office.

Changes

We will replace this policy with a full one before member accounts open. If we change how we use the email address you gave us for the waitlist, we will email you first.