Last updated: 17 October 2026
1. Introduction
Welcome to JerichoSOC (https://jerichosoc.com).
At JerichoSOC, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website, contact us, subscribe to our updates, or access our educational resources.
We process personal data in accordance with the European Union’s General Data Protection Regulation (GDPR) and applicable Spanish data protection legislation.
2. Data Controller
The website is operated by JerichoSOC.
- Website: https://jerichosoc.com
- Contact: Through the contact form available on our website
- Data Controller: [Insert your legal name or registered business name]
- Contact email: [Insert your privacy contact email address]
For questions regarding your personal data or this Privacy Policy, please contact us using the details above.
3. Information We Collect
Depending on how you interact with our website, we may collect the following information:
Information you provide voluntarily:
- Your name and email address when submitting a contact form.
- Your email address when subscribing to our newsletter or requesting free educational resources.
- Information included in messages you send to us.
- Information you voluntarily provide when interacting with our services.
Technical information:
- IP address.
- Browser type and operating system.
- Website access dates and times.
- Technical information necessary for website security, operation, and troubleshooting.
We do not intentionally collect sensitive personal information.
4. How We Use Your Information
We may use your personal information to:
- Respond to questions and contact requests.
- Provide access to requested educational resources.
- Send newsletters, cybersecurity articles, updates, and promotional communications when you have provided the appropriate consent.
- Maintain and improve website functionality and security.
- Prevent spam, abuse, and unauthorized access.
- Fulfil applicable legal obligations.
We do not sell your personal information to third parties.
5. Legal Basis for Processing
Under the GDPR, we process personal data only when we have a valid legal basis.
These may include:
- Consent: When you voluntarily subscribe to our newsletter or agree to receive marketing communications.
- Legitimate interests: When necessary to maintain website security, prevent abuse, and respond to relevant enquiries, where those interests are not overridden by your rights.
- Contractual necessity: When processing is required to provide a service or resource you have requested.
- Legal obligations: When processing is necessary to comply with applicable laws.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
6. Contact Forms
When you submit a message through our contact form, we collect the information you provide, which may include your name, email address, and message.
This information is used exclusively to process and respond to your enquiry, unless you separately consent to another purpose.
Submitting a contact form does not automatically subscribe you to marketing communications.
7. Newsletter and Free Resources
JerichoSOC may offer free cybersecurity resources, educational materials, and email subscriptions.
When you subscribe or request a resource, we may collect your email address to deliver the requested content.
If you separately consent to receive our newsletter or promotional updates, we may also use your email address to send:
- Cybersecurity educational articles.
- SOC analyst training resources.
- Threat hunting and detection engineering content.
- Updates about new JerichoSOC resources and digital products.
You can unsubscribe from marketing communications at any time using the unsubscribe link provided in our emails or by contacting us.
We will not send unsolicited marketing emails.
8. Cookies
JerichoSOC may use cookies and similar technologies to support essential website functionality.
Essential cookies may be used for website security, session management, and WordPress administration.
If optional analytics, advertising, or other non-essential cookies are introduced, we will provide appropriate information and obtain consent where required before activating them.
You can manage or delete cookies through your browser settings.
Additional cookie information will be provided if our use of cookies requires a separate Cookie Policy.
9. Third-Party Services
Our website may rely on third-party service providers for hosting, website functionality, email delivery, and digital product distribution.
These may include:
Hostinger
Our website is hosted using Hostinger infrastructure. Technical information may be processed as necessary to deliver, maintain, and secure the website.
WordPress
Our website uses WordPress as its content management system. WordPress and installed plugins may process technical information necessary for website operation.
Payhip
JerichoSOC may use Payhip to distribute or sell digital educational products.
When purchasing a product through Payhip, your transaction and payment-related information is processed according to the applicable Payhip privacy policies and those of its payment service providers.
Email service providers
If we use an external email marketing or newsletter service, your email address may be processed by that provider to deliver communications you have requested or consented to receive.
We aim to work with service providers that offer appropriate data protection safeguards.
10. Embedded Content and External Links
Our articles may contain embedded content or links to third-party websites, including YouTube, LinkedIn, GitHub, and other educational platforms.
Embedded content may behave as though you visited the third-party website directly.
These services may collect information, use cookies, or track interactions according to their own privacy policies.
JerichoSOC is not responsible for the privacy practices of external websites.
11. Data Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, subject to applicable legal requirements.
- Contact form submissions are retained only as long as necessary to handle the enquiry and any justified follow-up.
- Newsletter subscription data is retained until you unsubscribe or request deletion, unless further retention is legally required.
- Technical and security logs are retained according to operational security requirements and applicable retention policies.
- Transaction records may be retained for periods required by tax, accounting, or other applicable laws.
When personal data is no longer required, we will delete or anonymize it where appropriate.
12. Data Security
We implement reasonable technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction.
These measures may include:
- HTTPS encryption for website connections.
- Restricted administrative access.
- WordPress and plugin security updates.
- Security monitoring and access controls.
- Appropriate safeguards for third-party services.
However, no internet-based service can guarantee absolute security.
13. Your Rights Under the GDPR
If you are located in the European Economic Area, you may have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete information.
- Right to erasure: Request deletion of your personal information where applicable.
- Right to restriction: Request limitations on certain processing activities.
- Right to data portability: Receive certain personal information in a structured, commonly used format.
- Right to object: Object to certain processing activities, including direct marketing.
- Right to withdraw consent: Withdraw previously provided consent at any time.
- Right to lodge a complaint: Submit a complaint to the relevant data protection supervisory authority.
In Spain, the supervisory authority is the Spanish Data Protection Agency (AEPD).
Website: https://www.aepd.es
To exercise your rights, please contact us using the contact information provided in Section 2.
We will respond within the time limits established by applicable data protection legislation.
14. International Data Transfers
Some third-party service providers may process personal data outside the European Economic Area.
Where international transfers occur, we will ensure that appropriate safeguards are implemented as required by applicable data protection laws, such as European Commission adequacy decisions or Standard Contractual Clauses.
15. Children’s Privacy
JerichoSOC provides educational cybersecurity content intended for a general audience, primarily students, professionals, and individuals interested in cybersecurity.
We do not knowingly collect personal information from children in circumstances where parental or guardian consent is legally required.
If you believe that a child has provided personal information without the required authorization, please contact us.
16. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our website, services, technologies, or legal obligations.
Any updates will be published on this page, together with a revised “Last updated” date.
We encourage visitors to review this page periodically.
17. Contact
For questions, privacy requests, or concerns regarding how we handle personal information, please contact JerichoSOC.
Website: https://jerichosoc.com
Email: hello@jerochosoc.com
We are committed to handling privacy-related enquiries transparently and in accordance with applicable data protection legislation.