Privacy Policy
Last updated: 1 November 2026
PhishPin is a brand of Suhra Global Solutions Private Limited, India ("PhishPin", "we"). This policy explains what we collect when you visit www.phishpin.com or contact us, why, and the choices you have. Questions: support@phishpin.com.
What we collect
- Visit information: the pages you view, the time, the referring website or campaign tag, your browser, operating system, language and IP address. From the IP address we may derive your country and the organisation that operates the network you use (for example a company network).
- Information you give us: when you request an audit, download a report or subscribe, we keep what you enter (such as your name, work e-mail, company and domain) and link it to your visits so we can follow up on your request.
- Phishing reports: if you report a suspicious website, we store the reported address (in a disarmed, non-clickable form), any note you add and, if you choose to give it, your e-mail address. We never open or download reported addresses.
Cookies
We use first-party cookies only - no advertising or third-party tracking cookies.
- ppv - remembers your browser between visits. Set only if you click Accept.
- ppc - remembers your cookie choice.
- Functional cookies that keep forms and downloads working (for example remembering that you unlocked a report).
If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as a refusal: no visitor cookie is set and no banner is shown.
Why we use it
- To answer your requests and provide our services (steps you asked for, or a contract).
- To understand which content is useful and which organisations are interested in brand protection, and to keep the site secure - for example blocking abusive traffic (our legitimate interests).
- To remember your browser between visits (your consent, which you can withdraw at any time by deleting the cookie).
We do not sell personal information, and we do not use it for advertising profiles.
How long we keep it
- IP addresses in visit records are shortened after 30 days, and visit records are deleted after 90 days. Aggregated statistics without personal data may be kept longer.
- Information from requests and subscriptions is kept while it is needed for that purpose, and no longer than 24 months after our last contact, unless the law requires longer.
Who can see it
Only authorised PhishPin staff. We use service providers for hosting and e-mail who process data on our behalf and under confidentiality. Your data may be processed in India and other countries where those providers operate, with appropriate safeguards.
Your rights
Depending on where you live (for example under the GDPR, UK GDPR, CCPA or India's Digital Personal Data Protection Act), you can ask to access, correct or delete your information, object to its use, or withdraw consent. E-mail support@phishpin.com from the address concerned, or tell us the IP address and date of your visit, and we will respond within 30 days. You can also complain to your local data-protection authority.
Security
We protect data with access controls, two-factor authentication for staff, encryption in transit and limited retention. No method is perfectly secure, but we work to keep risks low.
Changes
We may update this policy; the date at the top shows the latest version.