Privacy Policy

1. Introduction

The Bureau of Cyber Intelligence (BCI) is committed to protecting the privacy and confidentiality of all individuals and organizations that interact with us. This Privacy Policy explains how we collect, use, store, disclose, and safeguard personal and sensitive data in the course of providing cybersecurity, digital forensics, investigative, advisory, and related services.

By accessing our website or submitting information to BCI, you acknowledge that you have read and understood this Policy and consent to its terms.

2. Who We Are

BCI is a multidisciplinary cybersecurity and digital intelligence organization specializing in:

• Digital and multimedia forensics
• Cyber incident response and threat intelligence
• Legal and advisory services
• Privacy, compliance, and data protection consulting
• Private investigations and data recovery
• Training and awareness programs

We operate with full adherence to data protection, privacy, and cybercrime laws applicable within our jurisdiction and internationally recognized standards.

3. Information We Collect

Depending on your interaction with us, BCI may collect:

a. Personal Information

• Full name, contact details, organization, and professional information
• Identity details (when verifying agents or investigators)
• Account credentials (if you create a user account on our platform)

b. Incident & Investigation Data

• Case details, evidence files, and metadata voluntarily provided for analysis or investigation
• Device identifiers, IP addresses, and system logs (when relevant to a reported incident)

c. Technical Information

• Website usage data (cookies, analytics, IP logs) for security monitoring and service optimization

We only collect data necessary for legitimate business, investigative, or compliance purposes.

4. How We Use Your Information

We use collected information for the following purposes:

• To process and investigate cybersecurity incidents or forensic cases
• To authenticate submissions and verify agents
• To provide advisory, recovery, and threat intelligence services
• To comply with legal and regulatory requirements
• To improve our website, systems, and user experience
• To train and educate users during capacity-building programs

All information is handled with strict confidentiality and used only for the specific purpose for which it was collected.

5. Legal Basis for Processing

BCI processes personal data based on one or more of the following legal bases:

• Consent – where you have given explicit permission
• Legal Obligation – where processing is required by law or regulatory mandate
• Legitimate Interest – to ensure the security, integrity, and functionality of BCI systems and services
• Contractual Necessity – where processing is needed to fulfill our obligations under an agreement

6. Confidentiality & Evidence Handling

All evidence and investigation data submitted to BCI is treated with the highest level of confidentiality.

• Evidence is accessed only by authorized personnel directly involved in the case
• Chain-of-custody procedures and audit trails are strictly maintained
• Data is encrypted both in transit and at rest
• Access is role-based and reviewed periodically

We never disclose or share investigative materials unless legally required or authorized by the data owner.

7. Data Retention

BCI retains personal and case-related data only for as long as necessary to:

• Complete the purpose for which it was collected
• Comply with legal and regulatory obligations
• Preserve the integrity of ongoing investigations

Once retention periods expire, data is securely deleted or anonymized following approved data destruction protocols.

8. Data Sharing & Disclosure

We do not sell or commercialize personal data.

Data may only be shared:

• With authorized legal or law enforcement bodies (upon lawful request)
• With trusted service providers under confidentiality agreements
• With your explicit consent when required for collaboration or resolution of a case

All third-party partners are required to comply with the same privacy and security standards upheld by BCI.

9. Data Security

BCI employs robust technical and organizational measures to protect data, including:

• Encryption, firewalls, and intrusion detection systems
• Multi-factor authentication and access control mechanisms
• Secure storage facilities and isolated forensic environments
• Regular security audits and vulnerability assessments

10. Your Rights

Depending on applicable law, you may have the right to:

• Access, correct, or delete your personal data
• Withdraw consent at any time (where applicable)
• Request information on how your data is being processed
• Lodge a complaint with a relevant data protection authority

Requests can be submitted via privacy@bci.gov

11. International Data Transfers

If your data is transferred across borders for analysis or collaboration, BCI ensures that appropriate safeguards and data transfer agreements are in place to protect your information in accordance with privacy laws.

12. Updates to This Policy

BCI may update this Privacy Policy periodically to reflect legal, operational, or technological changes. Updated versions will be posted on our website with the effective date clearly indicated.

13. Contact Information

For questions or privacy-related concerns, please contact: