Legal

Privacy Policy

Last updated: October 2026

This policy explains what personal data we collect through this website, how we use it, and the rights you have over it.

Who we are

NewExploits ("we", "us") operates newexploits.com and provides offensive security services. For privacy questions, contact us at the address on our Contact page.

What we collect

Information you choose to send us (for example your name, email, Telegram handle and the details of your request) and basic technical data your browser sends automatically, such as IP address, device and pages visited.

How we use it

To respond to your enquiry, scope and deliver engagements, keep the site secure and working, and meet legal obligations. We do not sell your personal data.

Legal basis (GDPR)

Where the EU GDPR applies, we process data on the basis of your consent, our legitimate interest in running and securing our business, and compliance with legal obligations.

Cookies & analytics

The site uses only the cookies needed for it to function and, where enabled, privacy-respecting analytics. You can control cookies in your browser settings.

Sharing

We share data only with service providers who help us run the site and business, under confidentiality terms, or where required by law.

Retention

We keep personal data only as long as needed for the purposes above or as required by law, then delete or anonymise it.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction or portability of your data, and object to certain processing. Contact us to exercise these rights.

Security

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit and access controls.