Effective Date: April 19, 2026

Privacy Policy

Karen IT Group ("Karen IT", "we", "us", or "our") operates the website https://karenit.net (the "Website") and provides cyber threat intelligence, phishing detection, URL abuse monitoring, malware analysis, copyright protection, domain and service takedowns, Incident Response, Cyber Investigation, Digital Forensics, KSRC, KTSC, KITWatch, and related cybersecurity services (collectively, the "Services").

We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Website, submit forms, use our Services, or interact with us.

1. Information We Collect

Personal Information You Provide

Contact details: name, email address, phone number, company name, and job title (when you contact us, submit inquiries, or fill out forms such as "Report a Cyber Issue").
Service-related information: details you provide when requesting or using our Services, including Incident Response, Cyber Investigation, or Digital Forensics (this may include logs, URLs, malware samples, or other data relevant to the case).
Account information: for services where we create accounts on your behalf (e.g., KTSC, KITWatch), we collect and manage the necessary credentials and access details.

Information Collected Automatically

Technical data: IP address, browser type, device information, operating system.
Usage data: pages visited, time on site, and interactions.
Threat-related data: malicious URLs, domains, phishing reports, and abuse information submitted via forms or collected through our systems (e.g., URLAbuse and KSRC).

Information from Third Parties

Data received from law enforcement, domain registries, or partners during threat investigations and takedowns.
Publicly available threat intelligence sources.

We use third-party services including Google Analytics (for website analytics), Cloudflare (for security and performance), Google reCAPTCHA (for spam protection on forms), and Zoho Desk (for handling support tickets and inquiries).

2. How We Use Your Information

We use your information to:

Provide, deliver, and improve our Services, including threat intelligence, investigations, takedowns, Incident Response, Cyber Investigation, and Digital Forensics.
Respond to inquiries, process "Report a Cyber Issue" submissions, and manage support tickets via Zoho Desk.
Communicate with you about services, updates, or important notices.
Detect, prevent, and respond to cyber threats, fraud, or illegal activities.
Comply with legal obligations, respond to lawful requests from authorities, or protect our rights.
Analyze website usage (via Google Analytics) to improve user experience.
Create and manage service accounts (e.g., KTSC, KITWatch) on behalf of clients.

3. Legal Basis for Processing

We process personal data based on:

Performance of a contract (providing our Services).
Legitimate interests (operating a cybersecurity platform, combating digital threats, improving our Website and Services).
Legal obligations.
Your consent (where required, for example, certain marketing communications — you may withdraw consent at any time).

4. Sharing Your Information

We may share personal information with:

Trusted service providers (Google, Cloudflare, Zoho, etc.) under strict confidentiality and data processing agreements.
Law enforcement agencies, government authorities, or registries when necessary for cyber investigations, takedowns, or legal compliance.
Professional advisors or partners in joint threat intelligence efforts (only as needed).
In case of a merger, acquisition, or transfer of business.

We do not sell your personal information.

5. International Data Transfers

Karen IT is based in Abu Dhabi, United Arab Emirates. Your data may be transferred to and processed in other countries. We take appropriate safeguards to ensure such transfers comply with applicable data protection laws, including the UAE Personal Data Protection Law (PDPL).

6. Data Security

We implement reasonable technical, administrative, and physical measures to protect your information. However, no system is completely secure.

7. Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, resolve disputes, or enforce agreements. Data related to active Services (e.g., investigations or accounts) is kept for the duration of the engagement plus any required legal retention period.

8. Your Rights

Subject to applicable law (including UAE PDPL), you may have rights to:

Access, correct, or delete your personal information.
Restrict or object to certain processing.
Withdraw consent (where processing is based on consent).

To exercise these rights, contact us at the details below. We will respond within a reasonable time.

9. Cookies and Tracking Technologies

Our Website uses cookies and similar technologies for functionality, security, analytics, and spam protection. These include:

Cloudflare cookies (e.g., __cf_bm) for security and bot management.
Google Analytics cookies to understand website traffic and improve our services.
Google reCAPTCHA to protect forms from abuse.

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling certain cookies may affect the functionality of the Website.

10. Children's Privacy

Our Services are not directed to individuals under 18. We do not knowingly collect personal data from children.

11. Third-Party Links

The Website may contain links to external sites. We are not responsible for their privacy practices.

12. Changes to This Privacy Policy

We may update this Policy periodically. Changes will be posted here with a new Effective Date. Continued use of the Website or Services after changes constitutes acceptance of the updated Policy.

13. Contact Us

If you have any questions or requests regarding this Privacy Policy or your data, please contact us at:

Karen IT Group
Abu Dhabi, United Arab Emirates
Email: [email protected]