Privacy Policy
This page explains what we collect, why we collect it, and how we protect it—across our website and Forestall services.
1. Overview
Effective date / Last updated: February 17, 2026
Forestall ("we", "us", "our") values transparency and privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit our website, request a demo, contact us, subscribe to updates, or otherwise interact with our services.
If you are a Forestall customer using our platform through your organization, some data may be processed on behalf of that organization ("Customer Data"). In those cases, we process Customer Data under our customer agreements and applicable data protection terms.
2. Who We Are
Forestall is a cybersecurity company focused on identity security across enterprise identity environments. We operate this website and provide related services, including product demos, customer support, and partner communications.
3. Scope
This Policy applies to:
- Our public website and related pages
- Forms and communications (demo requests, newsletters, contact forms)
- Events and webinars we host or sponsor
- Business-to-business interactions (partners, prospects, customers)
This Policy does not cover third-party sites or services that we do not control, even if we link to them.
4. Information We Collect
We collect information in three main ways: (a) you provide it, (b) we collect it automatically, and (c) we receive it from third parties.
A) Information you provide
- Contact details: name, business email, phone number, company, job title
- Messages and requests: information you include in forms, emails, or support requests
- Event and marketing preferences: subscription status, opt-in/opt-out selections
- Partner inquiries: company information, regions, partnership type, website
B) Information collected automatically
When you use our website, we may collect:
- Device and usage data: IP address, browser type, pages viewed, timestamps, referring pages, approximate location (city/country)
- Cookies and similar technologies: used for essential functionality, preferences, analytics, and (where permitted) marketing
C) Information from third parties
We may receive information from:
- Event platforms (registration and attendance details)
- Marketing or analytics providers (aggregated performance metrics)
- Partners (referrals and joint opportunity coordination)
5. How We Use Information
We use personal data to:
- Provide and operate our website
- Respond to your requests (demo, contact, support)
- Communicate product updates, content, and events (where permitted)
- Improve website performance and user experience
- Maintain security, prevent abuse, and protect our rights
- Comply with legal obligations
- Manage partner and customer relationships (B2B operations)
We do not use personal data to make decisions that produce legal or similarly significant effects solely by automated means.
6. Legal Bases (EEA/UK)
Where GDPR or similar laws apply, we rely on:
- Contract / pre-contract steps: to respond to demo requests or provide services
- Legitimate interests: to secure and improve our website, communicate with business contacts, and prevent fraud (balanced against your rights)
- Consent: for newsletters, certain cookies, and marketing where required
- Legal obligation: where we must comply with applicable laws
You may withdraw consent at any time (without affecting prior lawful processing).
7. How We Share Information
We may share personal data with:
- Service providers (processors): hosting, analytics, email delivery, CRM, event management, security monitoring
- Professional advisors: legal, auditors, insurers (as needed)
- Business transfers: in connection with a merger, acquisition, or asset sale
- Legal and safety reasons: to comply with law, enforce agreements, or protect rights and safety
We do not sell personal data. We do not share personal data for cross-context behavioral advertising in jurisdictions where this is restricted, unless you have provided the required consent.
8. Cookies & Tracking
We use cookies and similar tools for:
- Essential cookies: required for basic site functionality
- Preference cookies: remember selections (where applicable)
- Analytics cookies: understand usage and improve performance
- Marketing cookies: measure campaign effectiveness (only where permitted)
For more details about the cookies we use, see our Cookie Policy.
9. Data Retention
We keep personal data only as long as necessary for the purposes described, including:
- To provide requested communications
- To maintain business records
- To comply with legal obligations
- To resolve disputes and enforce agreements
Retention periods vary depending on the data type and context. When no longer needed, we delete or anonymize data.
10. Security
We use administrative, technical, and organizational measures designed to protect personal data, such as access controls, encryption where appropriate, and monitoring for abuse. However, no method of transmission or storage is 100% secure.
11. International Transfers
Your data may be processed in countries other than where you live. Where required, we use appropriate safeguards (such as contractual protections) to help ensure an adequate level of data protection.
12. Your Privacy Rights
Depending on your location, you may have rights such as:
- Access to your personal data
- Correction of inaccurate data
- Deletion of data (in certain cases)
- Objection to processing (in certain cases)
- Restriction of processing (in certain cases)
- Data portability (where applicable)
- Withdrawal of consent (where processing is based on consent)
Additional disclosures (US / state privacy laws where applicable)
- No sale of personal data.
- You may have the right to opt out of certain "sharing" for targeted advertising (where applicable).
- You may have the right to non-discrimination for exercising privacy rights.
To exercise your rights, contact us using the details in the "Contact Us" section. We may request information to verify your identity.
13. Children’s Privacy
Our website and services are not directed to children, and we do not knowingly collect personal data from children.
14. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date and may provide additional notice where required.
15. Contact Us
If you have questions or requests related to privacy, contact:
Email: [email protected]
HQ: İvedikOSB Mah. 2224 Cad. No:1/115 Yenimahalle/ANKARA TR
MEA: Meydan Grandstand, 6th floor Meydan Road, Nad Al Sheba/Dubai UAE