Privacy Policy - UpDefense

UpSecurity & UpDefense Privacy Notice

Effective date: 10/2026

Introduction and scope
1. This Privacy Notice (“Notice”) applies to Wake-up Cyber Ltd., operating as UpSecurity, and UP DEFENSE LTD, operating as UpDefense (together, the “Companies”, “we”, “us” or “our”). The Companies are separate legal entities based in Israel. UpSecurity provides CISO and information security consulting services, and UpDefense provides cybersecurity implementation, protection and incident response services to business customers. This Notice explains what personal information we collect, how we use and share it, how long we keep it, and the rights and choices you have when either or both Companies determine how and why that information is processed. Each Company is responsible for the processing for which it determines the purposes and means. Where the Companies jointly determine those purposes and means, they share responsibility for that processing.
2. This Notice applies to the websites at upsecurity.co.il, operated by Wake-up Cyber Ltd., and updefense.co.il, operated by UP DEFENSE LTD (the “Websites”), the contact and registration forms on them, the webinars either or both Companies host (“Webinars”), and the marketing communications they send (together, the “Services”).
3. What this Notice does not cover.
  1. Customer data we process for our clients. When we provide security services to a customer, we may access or process personal information on that customer’s behalf, for example in its systems or logs. We handle that information under our agreement with the customer, not under this Notice. If your information reaches us that way, please contact the relevant customer to exercise your rights.
  2. Other websites. The Websites may link to sites we do not own or control, such as webinar partners’ or social media pages. Their privacy practices are their own, and we encourage you to read their notices.
4. You are not legally required to provide personal data. Without it, however, we may not be able to respond to you or register you for a Webinar.
5. We process personal data in accordance with the Israeli Protection of Privacy Law, 5741-1981, and its regulations.
Information we collect
1. We collect personal information that you provide directly through your interactions with us, including when you submit a contact form on our Websites, leave your details on one of our service pages, register for or attend our Webinars, or correspond with us. We also collect personal information:
  1. When you visit our websites;
  2. Through our business dealings with you, such as calls, emails and the sales process;
  3. From trusted third parties .
2. We collect personal information such as your name, email address, phone number, company, job title and the content of your message when you submit a contact form on our Websites, leave your details on one of our service pages, register for a Webinar or request a Webinar recording. If you register for a Webinar, we may also collect your record of registration and attendance, questions you ask during the session, and other information relevant to that Webinar. We also keep a record of whether you agreed to receive professional content and updates from us.
3. If you are a speaker at one of our Webinars, we may also collect your photo, video and biographical information, including your job title, company, professional social media profile and areas of expertise.
4. Please do not submit sensitive information through our forms, such as health information or payment card details.
5. Information about other peopleIf you give us information about someone else, such as a colleague, you are responsible for making sure you are allowed to do so and that they are aware of it.
6. Information collected automatically
7. Cookies. Cookies are small text files that a website stores in your browser. Some are deleted when you close the browser; others remain for a set period or until you delete them. The Websites may use the following types.
  1. Strictly necessary cookies, which keep the Websites and their forms working securely.
  2. Analytics and marketing cookies, set by ZoomInfo, a third party, as described below.
8. ZoomInfo. We use a ZoomInfo tool to understand which organizations are interested in our Services. Based on technical data such as your IP address, it gives us an estimate of the organization a visitor came from, the pages visited and the length of the visit. The information shown to us does not include direct identifiers such as your name or email. ZoomInfo may collect and process additional data under its own privacy policy https://www.zoominfo.com/legal/privacy-policy.
9. Managing cookies. You can set your browser to block cookies or alert you when they are set, and you can delete existing cookies. Blocking cookies may affect how the Websites work, and your settings apply only to the browser and device you use.
10. Server logs. our hosting server records technical data such as IP address, browser type and access time, for operation and security purposes.
11. Information from third partiesWe may receive business information from third-party sources, such as the organization a Website visitor likely came from, its industry and size (through ZoomInfo), or contact details from a Webinar partner that co-hosted a session you registered for
Recordings of meetingsIf you join a sales or service call with us and agree to it being recorded or transcribed, we will keep the recording or transcript. All Webinars we host are recorded, and we may share the recordings with other people, including registrants, people who request them, Webinar partners and the public. If you join a Webinar, your name, image, voice and any questions you ask may appear in the recording.

How we use your information and on what groundsUnder the Israeli Protection of Privacy Law, 5741-1981, we process personal information on one of two lawful bases: your informed consent, which you give when you submit information to us after being told how it will be used, or a specific statutory obligation or legal authorization.The table lists each purpose:

Purpose	What it includes
Communicating with you	Responding to enquiries by phone or email; sending service and administrative messages
Sales and customer management	Managing the sales process and our relationship with you, including manually entering details into our shared CRM (Monday.com)
Webinars	Registration, joining invitations, reminders, recordings and follow-up after the session.
Marketing	Professional content, updates and Webinar invitations
Managing the Websites	Operating and improving the Websites and identifying interested organizations through ZoomInfo.
Internal operations	Analysis of sales, conversion and marketing effectiveness, reporting and business planning
Security	Protecting the Websites and systems, and preventing fraud and misuse
Legal compliance	Handling privacy requests, meeting legal obligations, and establishing or defending legal claims

We do not sell personal information.
1. Use of artificial intelligence
  1. We use AI tools to support internal operations. Specifically, Anthropic’s Claude is connected to our shared CRM (Monday.com) to analyze sales and customer data, summarize information and identify follow-up actions.
  2. AI outputs support our staff; they are not used to make decisions that produce legal or similarly significant effects on you without human review.
Webinars, partners and recordings
1. If a Webinar is co-hosted with a partner, we share your registration details with that partner in line with the choice you make on the registration form. The partner will be named on the registration page and may contact you directly. Its use of your information is governed by its own privacy notice. You can withdraw your choice at any time by writing to [email protected] or [email protected] ; this stops future sharing but does not affect information the partner already received.
2. After a Webinar, we may contact you by phone or email as part of our sales process. You can opt out at any time.
3. Webinars are held on Zoom, through an account operated by an external service provider that runs our Webinars for us, and are recorded. Distributed recordings do not include the list of participants. Questions you ask by voice, video or chat may appear in the recording, so if you prefer not to be identified, ask without stating your name.
4. How registration works. When you register for a Webinar, your details are saved on our Website and sent automatically to the Zoom account of our Webinar service provider. The provider uses them to send you a joining invitation by email (usually within 24 hours of registering), reminders before the Webinar and a follow-up email afterwards. The provider deletes registrants’ details from its Zoom account the day after the Webinar
How we share information
Sharing information between UpSecurity and UpDefenseThe Companies share personal information for sales, customer relationship management, service coordination and delivery, and marketing, subject to applicable law and any consent required. This may include contact details, enquiries, correspondence, sales records and information relevant to the services requested or provided. The Companies use a shared CRM, Monday.com, through which authorized personnel of both Companies may access information needed for these purposes. Sharing information between the Companies does not by itself constitute consent to receive marketing communications from both. Marketing communications are subject to the scope of your consent or another permission under applicable law. This section concerns information covered by this Notice. Personal information processed on behalf of a customer remains subject to the relevant customer agreement and instructions.

Service providers acting on our behalf:

Provider	Role	Information they can access
SPD	Website hosting, server and database	All information stored on the Websites.
UPNEXT	Website development and maintenance (WordPress, Elementor, DirectAdmin)	Form submissions stored on the Websites
Monday.com	CRM and sales management	Contact details and sales process information
Anthropic (Claude)	AI-assisted data analysis, connected to Monday.com	Contact details and sales process information
Google (Google Workspace)	Business email	Correspondence and contact details
Zoom	Webinar platform used by our Webinar service provider	Participant details and Webinar content
seoreport	Running our Webinars through its own Zoom account: registration, invitations, reminders and follow-up emails	Webinar registration details, deleted from its Zoom account the day after the Webinar
INFORU	Sending marketing emails	Email address only, plus campaign data such as sending time and opens
ZoomInfo	Website visit analytics	Technical browsing data

When a service provider processes personal information for us, we remain responsible for making sure it does so to the standard required by applicable law, under a written agreement.

Other recipients:
1. Professional advisers, such as lawyers, accountants, auditors, insurers and banks, where we are legally required or have a legitimate interest to share.
2. If we evaluate or carry out a merger, acquisition, sale of assets or reorganization, personal information may be shared with or transferred to the other party, subject to confidentiality and applicable privacy law.
3. Where needed to enforce our agreements or protect the rights, property or safety of either Company , our customers or others. Or where we are required to respond to a valid legal request or court order. We review each request before responding and disclose only what is required.

International data transfers
1. Both Companies are based in Israel. Some of our service providers, including Monday.com, Anthropic, Google, Zoom and ZoomInfo, store or process information outside Israel. These countries may offer a different level of privacy protection than the country you are in. Wherever your information is processed, we protect it as described in this Notice.
2. We make these transfers in accordance with the Protection of Privacy (Transfer of Data to Databases Abroad) Regulations, 5761-2001, relying on written commitments from our providers to protect the information.
Non-identifying information
1. When you use the Websites, we may collect or generate statistical information that does not identify you, such as browser and operating system type, the referring site, pages viewed and visit length.
2. We use this information to analyze how the Websites are used, improve our Services and security, troubleshoot problems and produce aggregate statistics. We do not use it to identify you or combine it with personal information for that purpose.
Marketing communications
1. With your consent, we will send you professional content, updates, Webinar invitations and information about our Services by email or other channels. Where we request consent for communications from both Companies, the consent wording will identify both UpSecurity (Wake-up Cyber Ltd.) and UpDefense (UP DEFENSE LTD). You may also provide consent in another way permitted by law. If you consented to communications from only one Company, that consent will not automatically extend to the other
2. We also send service messages related to something you requested, such as a change to the time of a Webinar you registered for.
3. We send marketing emails through INFORU, which receives your email address only. These include invitations to upcoming Webinars with a link to the registration page.
4. You can unsubscribe at any time, free of charge, using the link in each marketing email or by writing to [email protected] or [email protected]. Please indicate whether your request concerns one or both Companies so we can apply it accordingly. If the scope of your request is unclear, we will clarify it with you
Your privacy rights and choices
1. You may request access to the personal information we hold about you, and ask us to correct or delete information that is inaccurate, incomplete or out of date, subject to applicable law. For example, Individuals in the EU may have additional rights, such as restriction of processing and data portability
2. To exercise your privacy rights in relation to either or both Companies, email [email protected] or [email protected]. Please indicate which Company or interaction your request concerns, if known. You may contact either address, and we will coordinate internally to direct your request to the responsible Company or Companies. We will handle your request in accordance with applicable legal requirements. We may ask you to verify your identity, and the law may require us to retain some information.
3. You have the right to withdraw your consent to receive marketing materials at any time using the unsubscribe link in any marketing message we send you.
4. Where a third party, such as a Webinar partner, holds your information independently, your request will not automatically reach its copy. We will tell you who it is so you can contact it directly.
How long we keep information
1. How long we hold your information depends on what kind of information it is and on how you relate to us, for example as a prospect, a Webinar registrant or a customer. We do not keep information longer than its purpose requires. To set retention periods, we look at:
  1. the purpose for which we collected the information, and whether we still need it for that purpose;
  2. whether you have an ongoing relationship with us, for example as a customer or an active sales lead;
  3. whether you have unsubscribed or asked us to delete your information; and
  4. legal requirements, limitation periods for legal claims and guidance from regulators.
2. We delete the information or anonymize it so it can no longer identify you. Unless the law requires us to keep it, we may also delete information earlier, at our discretion, with or without notice to you. Unless the law provides otherwise, non-identifying information may be kept indefinitely.
Security
1. We use security measures appropriate to the information we hold, in line with the Protection of Privacy (Data Security) Regulations, 5777-2017. These include limiting access to staff and providers who need it, and contracts with providers that include confidentiality and security obligations.
2. No system is completely secure, so we cannot guarantee protection against every unauthorized intrusion. Subject to applicable law, where we have taken reasonable security measures we will not be liable for damage caused by such an intrusion. If a serious security incident occurs, we will act as the law requires, including notifying the Privacy Protection Authority.
Children, changes and contact
1. Children. Our Websites, Services and Webinars are intended for business customers and are not directed at anyone under 18. We do not knowingly collect information about minors. If you believe we have collected a minor’s information by mistake, contact us and we will delete it.
2. Changes to this Notice. We may update this Notice from time to time. The effective date at the top shows when it last changed. We will flag material changes on the Websites and, where the law requires, by email.
Contact us. For questions about this Notice or how we handle your information:

Wake-up Cyber Ltd. (UpSecurity)
Address: 1 HaEshel Street, Caesarea, Israel
Privacy enquiries: [email protected]
General enquiries: [email protected]

UP DEFENSE LTD (UpDefense)
Address: 1 HaEshel Street, Caesarea, Israel
Privacy enquiries: [email protected]
General enquiries: [email protected]