Bluetooth Security

Privacy Policy

How we collect, use, and protect your information

Last updated: January 15, 2025

Overview

This Privacy Policy describes how Bluetooth Security Research ("we," "our," or "us") collects, uses, and protects your personal information when you use our website and services located at bluetoothsecurity.com.

We are committed to protecting your privacy and ensuring the security of your personal information. This policy explains our practices regarding data collection, use, and disclosure in compliance with applicable privacy laws including GDPR, CCPA, and other regional privacy regulations.

By using our services, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Personal Information

  • Name and email address (when you register or contact us)
  • Username and password (for account creation)
  • Professional information (certifications, company, role)
  • Communication preferences and newsletter subscriptions
  • Profile information and security research interests
  • Contact form submissions and support inquiries

Usage Information

  • Pages visited and time spent on our website
  • Search queries and database interactions
  • MAC address lookups and security tool usage
  • Device information (browser type, operating system)
  • IP address and approximate location data
  • Referral sources and navigation patterns

Technical Information

  • Cookies and similar tracking technologies
  • Log files and server data
  • Analytics and performance metrics
  • Session information and authentication tokens
  • API usage statistics and rate limiting data
How We Use Your Information

Service Provision

  • Provide access to our security research database and tools
  • Maintain user accounts and authentication systems
  • Process MAC address lookups and vulnerability searches
  • Deliver personalized content and security recommendations
  • Enable collaboration features and professional networking

Communication

  • Send newsletter updates and security alerts
  • Respond to inquiries and support requests
  • Notify about service updates and new features
  • Provide educational content and research updates
  • Send important account and security notifications

Improvement and Analytics

  • Analyze usage patterns to improve our services
  • Monitor security and prevent fraud or abuse
  • Conduct research and development for new features
  • Generate anonymized statistics and reports
  • Optimize website performance and user experience
Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience and analyze website usage.

Types of Cookies

Essential Cookies

Required for basic website functionality, authentication, and security features.

Analytics Cookies

Help us understand how visitors use our site through Google Analytics and similar services.

Preference Cookies

Remember your settings, preferences, and personalization choices.

Advertising Cookies

Used to display relevant advertisements through Google AdSense and partner networks.

Cookie Control: You can control cookie settings through your browser preferences. However, disabling certain cookies may affect website functionality and your user experience.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following limited circumstances:

Permitted Sharing

  • With your explicit consent
  • With trusted service providers (hosting, analytics)
  • For legitimate business purposes
  • Anonymized data for research

Required Disclosure

  • To comply with legal obligations
  • To protect our rights and safety
  • In connection with business transfers
  • To prevent fraud or abuse
Data Security Measures

We implement comprehensive technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Technical Safeguards

  • TLS/SSL encryption for data in transit
  • Database encryption for data at rest
  • Secure authentication and session management
  • Regular security assessments and penetration testing
  • Automated security monitoring and alerting

Organizational Controls

  • Access controls and principle of least privilege
  • Employee training on data protection
  • Incident response and breach notification procedures
  • Regular security policy reviews and updates
  • Third-party security audits and certifications
Your Privacy Rights

You have the following rights regarding your personal information:

Access & Portability

Request a copy of your personal data in a structured format

Correction

Update or correct inaccurate information

Deletion

Request deletion of your personal information

Objection

Object to certain processing activities

Restriction

Limit how we process your data

Withdrawal

Withdraw consent for data processing

Exercise Your Rights: To exercise these rights, please contact us using the information provided in our contact page. We will respond to your request within 30 days.

Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

Account InformationUntil account deletion
Usage Analytics26 months
Support Communications3 years
Legal Compliance DataAs required by law
International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers:

  • Standard Contractual Clauses (SCCs) for EU data transfers
  • Adequacy decisions by relevant data protection authorities
  • Certification schemes and codes of conduct
  • Binding corporate rules for intra-group transfers
Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

General Inquiries

Email: privacy@bluetoothsecurity.com

Contact Form: Contact Page

Data Protection Officer

Professional Contact: LinkedIn Profile

Certifications: eJPT, eCPPTv2, CRTP, ADCS CESP

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. We will notify you of any material changes by:

  • Posting the updated policy on our website with a new "Last Updated" date
  • Sending email notifications to registered users for significant changes
  • Displaying prominent notices on our platform
  • Providing in-app notifications for policy updates

Continued Use: Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy. If you disagree with changes, please discontinue use and contact us to delete your account.