Privacy
Privacy Policy
Last updated: 17 October 2026
ACL Aurora Core Labs LTD ("we", "us", "our") is committed to protecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR). This policy explains how we collect, use, and safeguard your personal data when you visit https://secureplan.net.
1. Data Controller
ACL Aurora Core Labs LTD, Strovolou, 77, 2018 Strovolos, Nicosia, Cyprus, operates this website under the Aurora brand and is its data controller. Contact us through the Contact page for privacy requests.
2. Information We Process
When you contact us, we receive your name, email address, subject and message. The website also processes request metadata, including IP addresses and technical information needed to deliver pages, prevent abuse and investigate failures. Do not include passwords, access tokens or unnecessary personal data in messages. Login, registration and access links redirect to the separate Scanner console. Account, purchase, target, scan and report information relates to that service; it is distinct from information submitted to the public website.
3. Purposes and Legal Bases
We use information needed to respond to requested quotations or services for pre-contractual steps or performance of a contract where applicable. Other enquiries, abuse prevention and service security rely on legitimate interests in handling correspondence and protecting our systems. Legal obligations may require records to be retained. Optional analytics and external media, where available, depend on your choices; marketing requires a separate opt-in and is not authorised by submitting a contact request.
4. Recipients and Providers
Correspondence is handled by our team and the providers operating website hosting and email delivery. Access is limited to what is needed for those functions. We may disclose information to competent authorities where legally required. Customer-controlled installations and third-party integrations have their own data flows and responsibilities. Google provides optional website analytics when enabled; see its privacy information at https://policies.google.com/privacy. Paddle acts as reseller and merchant of record for Scanner purchases and handles transaction, invoicing and payment information under its own privacy notice at https://www.paddle.com/legal/privacy.
5. Retention
Enquiry correspondence is retained while the request is being handled and afterwards only where needed to follow up an agreement, resolve a dispute or meet a legal record-keeping obligation. Technical records are retained for operational troubleshooting and security investigation, with deletion or restriction when that purpose ends. Account and transaction records, where applicable, follow the lifetime of the account or contract and any legal retention obligations. These are purpose-based criteria, not an indefinite permission to retain data.
6. International Transfers
External providers may process information outside the EU/EEA. Applicable transfers must use an adequacy decision or appropriate safeguards, such as Standard Contractual Clauses, as relevant to the provider and processing. You may request information about the safeguards applicable to your data through the Contact page.
7. Your Rights
Subject to applicable conditions, you may request access, correction, erasure, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. Use the Contact page; we may request proportionate information to verify your identity. You may complain to the competent supervisory authority, including the Commissioner for Personal Data Protection in Cyprus.
8. Cookies, Storage and External Content
Google Analytics (measurement ID G-WYP1G4CJEB) is loaded only after you enable analytics. Before acceptance or after rejection, this website does not load the Google tag or send analytics events to Google. Advertising storage, advertising user data and advertising personalisation remain disabled. Cookie settings in the footer lets you withdraw or change your choice. The consent record is stored locally for up to one year and renewed only when you make a new choice. Analytics may use _ga and _ga_* cookies; their duration depends on the Google Analytics configuration, with a default cookie lifetime of up to two years. Rejecting analytics removes these cookies on this website and reloads the page to stop the loaded tag. The Scanner console at scanner.secureplan.net is a separate service with its own authentication and storage. A choice on this public website does not automatically configure that console.
9. Customer Data and Product Services
This notice describes the public website and our handling of enquiries. Where you use a product or console, account and operational processing also depends on that service and its deployment. For customer-controlled data, controller/processor roles, instructions and any required data processing agreement must be established for the service concerned. Contact us for the arrangements applicable to your deployment.
10. Updates and Contact
We update this notice when relevant processing changes. The last-updated date identifies the current version; material changes will be communicated where required. Use the Contact page for questions or to exercise your rights.