Skip to Content

Privacy Policy

Last updated:

06/02/2025


We place great importance on the protection of your personal data. This privacy policy explains how we collect, use, and protect your information in the context of using our services, including the sale of e-learning training in cybersecurity and the implementation of educational and ethical phishing campaigns.


1. Data collected

We collect the following information when you use our site:


1.1. Data provided by the user


  • First and last name
  • Email address
  • Phone number
  • Billing information
  • Professional information(company, job title)

1.2 Automatically collected data


  • IP address
  • Browsing data(pages visited, session duration)
  • Type of device and browser used
  • Cookies and similar technologies(see section 6)

1.3 Data specific to educational phishing campaigns

As part of our phishing awareness tests, we may collect:

  • The click-through rate on simulated emails
  • User responses to the campaigns
  • Authentication or input errors on fake pages

This data is used exclusively for educational purposes to measure the level of awareness of participants and is in no way exploited for malicious purposes.

2. Use of data

Your information is collected and used to:

  • Provide our cybersecurity training and awareness services.
  • Process payments and manage orders
  • Manage access to e-learning platforms
  • Analyse the effectiveness of training and phishing campaigns
  • Improve our services and our website
  • Comply with our legal and regulatory obligations


3. Data sharing and protection

We do not sell or rent your personal data. However, we may share certain information with:

  • Our service providers (hosting, payment tools, e-learning tools)
  • Legal authorities in case of legal obligation

We implement strict security measures (encryption, restricted access, connection monitoring) to ensure the protection of your data.


4. Data retention

Your information is retained for as long as necessary for the execution of our services and compliance with legal obligations. Data related to educational phishing campaigns is deleted after a defined period.


5. Your rights

You have the following rights regarding your personal data:

  • Right of access:to obtain a copy of your data
  • Right to rectification:to modify or correct your information
  • Right to erasure:to request the deletion of your data
  • Right to portability:to retrieve your data in a structured format
  • Right to object:to refuse the processing of certain information

To exercise these rights, you can contact us at contact@torus.lu


6. Cookies and tracking

We use cookies to enhance user experience, analyse traffic, and personalise content. You can manage your cookie preferences through your browser settings.


7. Changes to the privacy policy

We may update this privacy policy in accordance with the evolution of our services and legal requirements. Any changes will be published on this page and, if necessary, we will inform you directly.


8. Contact

For any questions or requests regarding this privacy policy, you can write to us at:

contact@torus.lu

144 ZAE Wolser A, L-3225 Bettembourg. LUXEMBOURG