Legal disclosures & governance

1. Who we are

SafeNetHub (“we”, “us”, “our”) is a cybersecurity services provider specializing in hardened perimeter defenses, automated incident containment protocols, and zero-trust verification frameworks for enterprise ecosystems. This policy describes how we process personal data when you visit our website, submit inquiries, or engage our services.

2. Data we process

Depending on your interaction with us, we may process: name, business email, phone number, company name, role, service interest, budget range, message content, and technical metadata (IP address, browser type, device identifiers, pages viewed, timestamps). Payment processing is handled by our payment provider; we do not store full card numbers.

3. Purposes and legal bases

• Respond to inquiries and prepare proposals — Article 6(1)(b) GDPR (pre-contractual measures) or 6(1)(f) legitimate interests.
• Deliver contracted security services and maintain client communication — Article 6(1)(b).
• Improve website performance and security posture — Article 6(1)(f) legitimate interests.
• Meet legal, tax, and compliance obligations — Article 6(1)(c).
• Send service updates where you have consented or where soft opt-in rules apply — Article 6(1)(a) or 6(1)(f).

4. Sharing and processors

We share personal data only with vetted processors who act under data-processing agreements: email and infrastructure providers, payment processors, analytics hosting (when consented), and professional advisors (legal, accounting) bound by confidentiality. We do not sell personal data to third-party brokers or advertising networks.

5. International transfers

Where personal data leaves the European Economic Area, we rely on Standard Contractual Clauses, adequacy decisions, or other lawful transfer mechanisms. Clients may request details of applicable safeguards at any time via the contact email above.

6. Retention

Inquiry records are retained for up to 24 months from last contact unless a contract or legal duty requires longer. Contractual client records are kept for the engagement period plus statutory retention (typically 6–10 years for tax and commercial accounting under French law). Security logs may be retained for 12 months to support incident investigations.

7. Your rights

Under the GDPR and French Data Protection Law, you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting prior lawful processing. To exercise rights, email [email protected]. You may also lodge a complaint with the CNIL (https://www.cnil.fr).

8. Security

We apply technical and organizational measures aligned with ISO 27001 practices: encryption in transit, access control, least-privilege administration, logging, and incident response procedures. No system is perfectly secure; we continuously evaluate controls against evolving threats.

9. Children

Our services are directed at enterprise and professional audiences. We do not knowingly collect personal data from children under 16.

10. Updates

We may update this Privacy Policy to reflect regulatory, operational, or service changes. The revision date at the top of this page will always indicate the current version. Material changes will be highlighted on this page or communicated directly to active clients where appropriate.

1. Scope

These Terms of Service (“Terms”) govern your use of the SafeNetHub website and any security services, assessments, retainers, workshops, or advisory work performed by SafeNetHub (“we”, “us”, “our”). By submitting an inquiry, accepting a proposal, or paying an invoice, you agree to these Terms and any Statement of Work (SOW) issued for your engagement.

2. Services

We provide cybersecurity services including but not limited to: perimeter defense hardening, automated incident containment design, zero-trust verification frameworks, vulnerability assessment, penetration testing, cloud security posture reviews, compliance readiness programs, security operations onboarding, and managed defense retainers. Specific scope, deliverables, milestones, and pricing are defined in the applicable SOW or order form.

3. Client responsibilities

• Provide accurate, complete information needed for delivery.
• Grant timely access to systems, logs, staff, and documentation required for the engagement.
• Designate an authorized point of contact with decision-making authority.
• Not use our findings or tools to conduct unauthorized testing against third-party systems.
• Maintain appropriate internal policies regarding password hygiene, patching, and backup routines unless we are explicitly engaged to replace them.

4. Fees, payment, and taxes

Fees are stated in the SOW and may be fixed-price, time-and-materials, or retainer-based. Unless otherwise stated, invoices are due within 14 calendar days of issue. Late amounts may accrue interest at the statutory rate under French law plus reasonable recovery costs. Prices exclude VAT and other applicable taxes unless expressly included. Payment links on this site process through our payment provider; SafeNetHub does not retain full payment card credentials.

5. Intellectual property

Upon full payment of the applicable invoice(s), we assign to the Client all worldwide intellectual property rights in the client-specific deliverables (custom code, reports, playbooks, design artifacts), excluding our pre-existing tools, frameworks, templates, and know-how (“Background Materials”). Background Materials remain our property; we grant a non-exclusive, perpetual, royalty-free license to use them as embedded within the deliverables.

6. Confidentiality

Each party agrees to keep the other’s confidential information secret and to use it only for the engagement. Confidentiality obligations survive for 3 years after disclosure, or longer if a longer period is required by law or for trade secrets. We may disclose confidential information to processors and advisors bound by equivalent confidentiality obligations.

7. Security testing authorization

Penetration testing, vulnerability assessment, and red-team style activities are performed only against systems explicitly authorized in writing by the Client. The Client warrants that it has authority to authorize testing on those systems. SafeNetHub is not responsible for disruption caused by Client-directed exploitation beyond the agreed testing window or for findings that arise from systems outside the authorized scope.

8. Warranties and disclaimers

We warrant that services will be performed with professional care consistent with industry standards. We do not guarantee that systems will be free from all vulnerabilities or that all threats will be detected or prevented. Results depend on Client implementation, environment configuration, and third-party dependencies. To the maximum extent permitted by law, all other warranties, express or implied, are excluded.

9. Limitation of liability

Except for breach of confidentiality, infringement of intellectual property, or liability that cannot be limited by law, each party’s aggregate liability arising out of an engagement shall not exceed the total fees paid by the Client to SafeNetHub for the specific engagement giving rise to the claim in the 12 months preceding the event. Neither party is liable for indirect, incidental, special, or consequential damages, including lost profits, lost data, or business interruption, even if advised of the possibility.

10. Term and termination

Either party may terminate an SOW for material breach if the breach remains uncured 15 days after written notice. We may suspend services for non-payment after written notice. Upon termination, Client pays for work performed and approved expenses through the effective date. Clauses on confidentiality, intellectual property, payment, liability, and governing law survive termination.

11. Non-solicitation

During an engagement and for 12 months afterward, Client agrees not to directly hire or contract SafeNetHub personnel who were materially involved in the work without our prior written consent. This does not restrict general job advertisements or unsolicited approaches that are not targeted at our staff.

12. Governing law and disputes

These Terms are governed by the laws of France. The courts of Boulogne-sur-Mer (or the competent court under applicable French procedural rules) have exclusive jurisdiction over disputes arising from these Terms, subject to mandatory consumer protections where applicable. Parties should first attempt good-faith resolution in writing for 30 days before initiating proceedings.

13. Contact

Questions about these Terms may be sent to SafeNetHub, 343 Rue Charles Paul Gresset, 62215 Oye-Plage, France, or [email protected].

1. What cookies are

Cookies are small text files stored on your device when you visit a website. Similar technologies include local storage, session storage, and pixels. They help sites remember preferences, keep sessions secure, and understand how pages are used.

2. How SafeNetHub uses cookies

We use cookies and related storage for:

• Strictly necessary — core site operation, security, load balancing, and remembering your cookie consent choice.
• Preferences — remembering UI state such as accordion drawers you have opened during a visit.
• Analytics (where enabled) — aggregated measurement of traffic and page performance to improve the site; we prefer privacy-respecting configurations and do not sell browsing data.
• Payment handoff — when you click a payment link, our payment provider may set its own cookies to complete and secure the transaction.

3. Consent and control

On first visit, a floating banner asks you to accept non-essential cookies. Your choice is stored in your browser’s localStorage as cookie_accepted so the banner does not reappear unnecessarily. You may clear cookies or use your browser settings to block them; some features (including consent persistence) may then reset. Where GDPR consent is required for optional technologies, optional categories remain inactive until you accept them.

4. Third-party cookies

Third parties that may set cookies include our map embed (Google Maps), payment processors, font/CDN providers, and analytics tools if activated. Those providers act under their own privacy policies. We encourage you to review them when relevant to your use of those embeds.

5. Retention

Session cookies expire when you close your browser. Consent-related storage typically persists until you clear browser data. Analytics retention periods are configured to be proportionate — generally 14 to 26 months — and are minimized where practical.

6. Updates and contact

We may update this Cookie Policy as our technology and legal obligations evolve. For questions, write to SafeNetHub, 343 Rue Charles Paul Gresset, 62215 Oye-Plage, France, or email [email protected]. You may also contact the CNIL for guidance on your rights.

1. Principles

SafeNetHub engagements are professional services. Refunds are evaluated against work performed, committed resources, and the commercial terms in your SOW or invoice. We aim for fair, prompt decisions and will always explain the basis of a refund outcome in writing.

2. Project-based services

• Before work starts — if you cancel in writing before kickoff and before we have consumed billable effort or reserved dedicated resources, prepaid deposits are refundable in full.
• During discovery or delivery — refunds are limited to the difference between amounts paid and a reasonable pro-rata fee for completed work, non-recoverable third-party costs, and any early-termination charges in the SOW.
• After deliverables are accepted — fees are non-refundable except where we fail to meet an explicit, written deliverable standard and we cannot reasonably cure the shortfall within an agreed window.

3. Retainers and subscriptions

Monthly managed defense retainers are billed in advance for the following service period. You may cancel a monthly retainer for the end of the current billing period by notifying us before the next renewal date. Unused retainer hours do not roll over beyond the paid period unless the SOW expressly states otherwise. Mid-period cancellations are handled pro-rata only where required by law or by an explicit contractual term.

4. Workshops, assessments, and one-off audits

For fixed-fee assessments and workshops: free cancellation or rescheduling is available when notice is given at least 10 business days before the scheduled start. Cancellations between 5 and 9 business days incur a 50% fee. Cancellations within 5 business days or no-shows incur the full fee, except where rescheduling is mutually agreed.

5. Payment-link purchases

If you pay via an online payment link for a fixed deliverable defined in a proposal, refunds follow that proposal and this Policy. Where no SOW exists yet, contact us within 14 days of payment if the engagement cannot proceed for reasons outside your control, and we will assess the matter on its merits.

6. How to request a refund

Email [email protected] with: the invoice or proposal reference, the engagement name, the reason for the request, and any relevant context. We aim to acknowledge requests within 2 business days and to issue approved refunds within 10 business days to the original payment method. Bank transfer timing may vary by provider.

7. No guarantee of security outcomes

Our work reduces risk and improves resilience; it does not guarantee that breaches, outages, or attacks will never occur. Refund requests based solely on the absence of a security incident after our work are not eligible, as that is outside the professional scope of cybersecurity services.

8. Changes and contact

We may update this Refund Policy; the version in effect is the one published on this page at the time of your engagement. For questions or refund requests, contact SafeNetHub at 343 Rue Charles Paul Gresset, 62215 Oye-Plage, France, or [email protected].