Last updated: June 16, 2026 · Effective from: June 16, 2026

Privacy Policy

Ayit Cyber Security is committed to protecting the privacy of its visitors and clients. This policy explains what information we collect, how we use it, and your rights.

Who this applies to: This policy applies to visitors of ayit.io and individuals who contact us via the forms on the site or by scheduling a call. It does not describe the security practices governing client engagements, which are covered in the relevant service agreements.

This document has been prepared for informational purposes. It has not been reviewed by a licensed attorney. We recommend consulting qualified legal counsel before relying on this policy for compliance purposes.

1. Who We Are

This service is operated by Avraham Barda, Licensed Dealer (Osek Murshe) No. 043492230, operating under the trade name Ayit Cyber Security ("we" / "the company"). We provide cybersecurity consulting, CISO-as-a-Service, risk assessments, and regulatory guidance to Israeli businesses.

Our contact details: see the Contact page.

2. Acceptance of the Policy

Use of the site and our services constitutes acceptance of this privacy policy. If you disagree with the terms, please refrain from using the site and contacting us.

3. What Information We Collect

3.1 Information You Provide Voluntarily

  • Contact details: full name, email address, phone number, company name
  • Inquiry content: field of business, message content, topics you raise on discovery calls
  • Meeting scheduling: if you book a call via Google Appointment Schedule — date, type of call

3.2 Automatically Collected Information

  • IP address
  • Browser type and operating system
  • Pages you visit, time spent, source of arrival
  • Anonymous analytics data via Google Analytics 4

4. How We Use the Information

We use information only for the following purposes:

  • Responding to inquiries: getting back to you about your inquiry, scheduling calls and fit-assessments
  • Service delivery: performing the services you've engaged us for — risk assessments, CISO-as-a-Service, regulatory guidance, etc.
  • Site improvement: analyzing usage patterns to improve UX and content
  • Information security: identifying attack attempts, fraud prevention, protecting site integrity
  • Legal compliance: responding to applicable regulatory and legal requirements

5. We Do Not Sell Your Data

Explicit declaration: we do not sell, rent, or trade your personal information with third parties for marketing purposes.

6. Sharing Information with Third-Party Providers

We work with a limited set of external service providers, solely for the purpose of operating the site and our services:

  • Google Workspace (Gmail, Calendar): managing inquiries and scheduling meetings
  • Google Analytics: site usage analytics (anonymous, no identifying data)
  • Firebase Hosting (Google Cloud): website hosting
  • Firebase Cloud Functions (Google Cloud): contact form processing

All service providers are required to meet appropriate information security standards. Where possible, we have signed Data Processing Agreements (DPAs) with these providers.

7. Data Retention

We retain your data for as long as it is necessary for the purposes for which it was collected:

  • Inquiries that did not result in engagement: up to 12 months from last contact
  • Active clients: for the duration of the engagement + an additional 7 years (statutory retention)
  • Analytics data: 14 months (Google Analytics 4 default)

8. Your Rights Under Amendment 13 to the Privacy Protection Law

In accordance with the Israeli Privacy Protection Law (including Amendment 13, effective August 14, 2025), you have the following rights:

  • Right of access: to obtain details about the information we store about you
  • Right to rectification: to request correction of inaccurate or incorrect information
  • Right to erasure: to request deletion of the information (subject to statutory retention obligations)
  • Right to object: to object to specific uses of your data
  • Right to processor disclosure: to know which service providers receive your data

To exercise these rights, contact us at avrahamb@ayit.io. We will respond within 30 days as required by law.

9. Information Security

We take reasonable steps to protect the information collected through this website, including use of HTTPS encryption for all traffic and reliance on cloud infrastructure managed by established providers. No system can guarantee absolute security, and we do not represent that information transmitted to or stored on this site is immune from unauthorized access or breach.

10. Cookies

This site uses cookies solely for statistical analysis, through Google Analytics 4.

Cookie details

NamePurposeProviderDuration
_gaUnique user identifier for statistical analysisGoogle Analytics1 year
_ga_KP6HCP90QSession management for statistical analysisGoogle Analytics1 year
ayit_consentStores the user's cookie preferenceayit.io (first party)1 year

Consent and refusal

A consent banner is shown on your first visit, allowing you to accept or decline cookies. Google Analytics is loaded only after explicit consent. You can change your choice at any time by clearing your browser cookies.

The site functions fully without cookie consent.

11. International Data Transfers

Some of our service providers (Google, Firebase) store data in data centers outside Israel. Transfers occur under recognized legal frameworks (Standard Contractual Clauses) that ensure an adequate level of protection.

12. Minors

Our services are intended for businesses, not minors. We do not knowingly collect information from individuals under 18.

13. Changes to the Policy

We may update this policy from time to time. Changes will be published on the site with an updated date. Continued use of the site after an update constitutes acceptance of the new policy.

14. Governing Law

This policy is governed by Israeli law. Exclusive jurisdiction is granted to the competent courts in the Tel Aviv district.

15. Contact

For questions, requests, or comments regarding this privacy policy: