1. Introduction

Terrabyte Group (“Terrabyte”, “we”, “us”, or “our”) is an enterprise cybersecurity value-added distributor (VAD). We support organizations in evaluating, procuring, and deploying cybersecurity technologies through our vendor and partner ecosystem.

This Privacy Policy explains how personal information is collected, used, disclosed, transferred, retained, and protected when you visit our websites, engage with events and webinars, download materials, or submit forms.

2. Scope

This Privacy Policy applies to personal information processed through:

• www.terrabytegroup.com and associated regional Terrabyte sites linked from it;
• contact forms, event and webinar registration pages, brochure request pages, and campaign landing pages;
• communications related to sales, partnerships, and marketing.

This Privacy Policy does not apply to third-party websites not controlled by Terrabyte.

3. Definitions

• “Personal Information” / “Personal Data” means information relating to an identified or identifiable individual.
• “Processing” means any operation performed on personal information, including collection, use, disclosure, storage, transfer, and deletion.
• “Controller” means the entity determining purposes and means of processing (or equivalent concept under applicable law).
• “Processor” means an entity processing personal information on behalf of a controller.

4. Personal Information Collected

Based on website form structures currently deployed, Terrabyte may collect:

4.1 Identification and Contact Data

• first and last name;
• business email address;
• phone number;
• country/region and city on selected forms.

4.2 Professional and Organization Data

• company/organization name;
• job title and job level/seniority;
• industry segment.

4.3 Inquiry and Engagement Data

• message content or additional information submitted in forms;
• webinar/event registration details (including referral source fields);
• brochure/trial request context;
• marketing preference fields where shown.

4.4 Technical Submission Metadata

• form metadata fields observed in deployed forms, such as submitted page/path/time and browser/geo placeholders.

5. Information Collected Automatically

When users access the website, certain data may be collected automatically through scripts and tags, including:

• IP-related and device/browser information;
• page path, page title, referral source, device category, and timestamp;
• interaction telemetry for site analytics and performance monitoring.

6. Cookies

The website appears to use cookies and/or similar technologies in connection with analytics and traffic measurement tooling.

A consent status variable is referenced in page scripts. However, exact cookie categories, names, lifespans, and consent-banner implementation details cannot be fully verified from static source review alone.

7. Analytics

The website currently appears to deploy or reference:

• Google tagging infrastructure (including gtag.js and Google Tag Manager references);
• Ahrefs analytics script;
• WordPress statistics tooling.

Exact event taxonomy, retention windows, and IP anonymization settings require implementation confirmation.

8. Marketing Communications

Terrabyte may send business and marketing communications where permitted by law, including:

• event, webinar, and product updates;
• follow-up after brochure requests, registrations, and contact submissions;
• communications via email and, where indicated in form wording, possible follow-up via WhatsApp.

Recipients may opt out of non-essential marketing communications.

9. Legal Basis

Depending on applicable law and context, Terrabyte may process personal information based on:

• consent;
• performance of pre-contractual or contractual steps;
• legitimate interests (including B2B lead handling, website improvement, and security);
• compliance with legal or regulatory obligations.

For GDPR-governed processing, legal bases are applied per processing activity.

10. Purposes of Processing

Terrabyte processes personal information to:

• respond to inquiries and contact requests;
• provide brochures and requested product/vendor information;
• register and manage webinar/event participation;
• support partner and channel onboarding communications;
• perform sales follow-up in a B2B context;
• administer website operations, analytics, and security;
• maintain records and meet legal/regulatory obligations.

11. Disclosure to Third Parties

Terrabyte may disclose personal information to:

• service providers supporting hosting, analytics, CRM/marketing, and communications;
• event/webinar support providers;
• Terrabyte affiliates and regional entities where operationally needed;
• legal, audit, compliance advisors and authorities where required by law.

Observed website integrations indicate third-party services such as Google tag services and HubSpot script references. A complete subprocessor inventory is not publicly confirmed from website artifacts.

12. International Data Transfers

Given regional operations and third-party tooling, personal information may be processed outside the originating jurisdiction.

Where required, Terrabyte will implement appropriate transfer safeguards.

13. Data Retention

Terrabyte retains personal information for as long as reasonably necessary to fulfill the purposes in this policy and to satisfy legal, tax, audit, dispute, and evidentiary requirements.

Specific retention schedules by data category are:

14. Information Security

Terrabyte implements reasonable technical, organizational, and administrative safeguards designed to protect personal information from unauthorized access, use, alteration, and disclosure.

No system is fully immune to risk; users should only submit information through official channels.

15. User Rights

Subject to applicable law, individuals may have rights to:

• access personal information;
• request correction of inaccurate information;
• request deletion where legally available;
• object to or restrict certain processing;
• request portability where applicable;
• withdraw consent where consent is the legal basis.

16. Singapore PDPA Rights

For personal data governed by the Singapore Personal Data Protection Act (PDPA), individuals may request:

• access to personal data and use/disclosure information;
• correction of inaccurate personal data;
• withdrawal of consent (subject to legal/contractual limits and reasonable notice).

Terrabyte may require identity verification and may apply statutory exceptions.

17. Indonesia PDP Rights

For personal data governed by Indonesia Law No. 27 of 2022 (PDP Law), rights may include:

• transparency of processing;
• access and correction;
• completion/updating;
• deletion/destruction in lawful circumstances;
• withdrawal of consent;
• objection rights in applicable cases;
• complaint and dispute pathways under prevailing regulations.

Implementation details and designated channels are:

18. GDPR Rights (Where Applicable)

For EEA/UK data subjects where GDPR-equivalent rights apply, rights may include:

• access;
• rectification;
• erasure;
• restriction;
• portability;
• objection;
• withdrawal of consent at any time;
• complaint to a competent supervisory authority.

EU/UK representative details (if required):

19. Withdrawal of Consent

Where processing is consent-based, consent may be withdrawn at any time. Withdrawal does not affect prior lawful processing.

20. Access and Correction

Requests should be submitted using official contact channels below. Terrabyte may request identity verification and sufficient detail to process requests.

21. Complaint Process

Individuals may raise concerns with Terrabyte first. If unresolved, they may lodge complaints with relevant data protection regulators.

Regulatory references and contact details:

22. Children’s Privacy

Terrabyte’s website and services are intended for professional B2B audiences and are not directed to children. Terrabyte does not knowingly collect children’s personal information through its B2B channels.

23. Third-party Websites

The website may link to third-party websites and platforms. Terrabyte is not responsible for third-party privacy practices.

24. Updates

Terrabyte may revise this Privacy Policy from time to time. Updated versions will be posted on the website with revised dates.