Privacy Policy

Effective date: August 4, 2026

1. Introduction

DarkSun Solutions, Inc. ("DarkSun," "we," "our," or "us") is committed to protecting the privacy and security of the information entrusted to us. As a cybersecurity advisory and consulting firm, we recognize the importance of handling information responsibly and maintaining the trust of our clients, business partners, and website visitors.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit our website, communicate with us, request information about our services, or otherwise interact with DarkSun.

This Privacy Policy applies solely to information collected through our website and related communications, unless otherwise specified in a separate written agreement governing a client engagement. If you become a client of DarkSun, additional confidentiality, privacy, and data handling obligations may apply under your executed Master Services Agreement (MSA), Statement of Work (SOW), Engagement Letter, or other written agreement.

By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, please discontinue use of the website.

If you have any questions regarding this Privacy Policy or our privacy practices, please contact us at info@darksunsolutions.com.

2. Information we collect

DarkSun Solutions may collect certain information when you visit our website, communicate with us, or request information about our services. The information we collect depends on how you interact with our website and services.

Information you voluntarily provide

We may collect information that you voluntarily provide to us, including when you complete a contact form, request a consultation, subscribe to communications, or otherwise contact us. This information may include:

• Your name;
• Company or organization name;
• Job title;
• Email address;
• Telephone number;
• Business address;
• Information about your organization or cybersecurity needs;
• Any other information you choose to provide in your communications with us.

Providing this information is voluntary; however, certain information may be necessary for us to respond to your inquiry or provide requested services.

Information collected automatically

When you visit our website, certain information may be collected automatically by our systems or by third-party service providers. This information may include:

• Internet Protocol (IP) address;
• Browser type and version;
• Device type and operating system;
• Date and time of your visit;
• Pages viewed and navigation activity;
• Referring website or source;
• General geographic location derived from your IP address;
• Technical information about your connection to the Site.

This information helps us understand how visitors use our website, improve its functionality, and maintain its security.

Cookies and similar technologies

Our website may use cookies and similar technologies to improve your browsing experience, maintain website functionality, analyze website usage, and understand visitor interactions.

Depending on the services we use, cookies may be used to:

• Remember website preferences;
• Measure website performance;
• Analyze visitor traffic and usage patterns;
• Improve website functionality;
• Enhance website security.

You may configure your browser to refuse or delete cookies; however, doing so may affect the functionality or availability of certain portions of the Site.

Analytics

We may use third-party analytics services to better understand how visitors interact with our website. These services may collect information regarding website traffic, page visits, browser characteristics, referring websites, and user interactions to help us improve our content, services, and overall user experience.

Analytics providers may use cookies or similar technologies in accordance with their own privacy policies.

3. How we use information

DarkSun Solutions uses the information we collect to operate our business, communicate with prospective and existing clients, deliver our services, improve our website, and protect the security of our systems and users.

Depending on your interactions with us, we may use your information to:

• Respond to inquiries, requests, and communications;
• Schedule consultations, meetings, and client engagements;
• Provide cybersecurity advisory, consulting, and related professional services;
• Prepare proposals, statements of work, reports, and other engagement-related documentation;
• Communicate with clients regarding ongoing or prospective engagements;
• Improve the functionality, content, performance, and user experience of our website;
• Monitor and maintain the security, integrity, and availability of our website and information systems;
• Analyze website usage and visitor interactions to better understand how our website is used;
• Send newsletters, service updates, event invitations, or other marketing communications where permitted by applicable law;
• Comply with applicable legal, regulatory, contractual, or professional obligations; and
• Protect the rights, property, safety, and legitimate business interests of DarkSun Solutions, our clients, and other users.

DarkSun may also use information to improve and refine its internal consulting methodologies, assessment frameworks, operational processes, and proprietary technologies. Where artificial intelligence or automation tools are used to assist with internal business operations or consulting activities, such tools are used to support qualified personnel and are subject to appropriate human oversight.

We will use personal information only for purposes that are compatible with the reason it was collected or as otherwise permitted or required by applicable law.

4. Cookies and similar technologies

DarkSun Solutions uses cookies and similar technologies to improve the functionality, security, and performance of our website and to better understand how visitors interact with our content.

Cookies are small text files that are stored on your device when you visit a website. They help websites function properly, remember user preferences, measure performance, and provide insights into website usage.

We may use the following categories of cookies:

Necessary cookies

These cookies are essential for the operation and security of our website. They enable core functionality such as page navigation, security features, and basic website operations. Because these cookies are necessary for the website to function, they cannot typically be disabled without affecting the availability or functionality of the Site.

Performance and analytics cookies

Performance and analytics cookies help us understand how visitors use our website by collecting information such as pages visited, navigation patterns, website traffic, browser characteristics, and overall website performance. This information is generally collected in an aggregated or de-identified form and is used to improve the design, functionality, and user experience of the Site.

Functional cookies

Functional cookies allow the website to remember certain preferences and settings, helping provide a more consistent and personalized browsing experience during future visits.

Managing cookies

Most web browsers allow you to control, disable, or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality or performance of portions of the Site.

Where required by applicable law, we will request your consent before placing non-essential cookies on your device.

5. Sharing and disclosure of information

DarkSun Solutions respects the privacy of the information entrusted to us. We do not sell, rent, or trade personal information to third parties for monetary or other valuable consideration.

We may disclose or share information in the following limited circumstances:

Service providers

We may share information with trusted third-party service providers that assist us in operating our business, maintaining our website, communicating with clients, scheduling meetings, processing payments, hosting data, analyzing website performance, or delivering our services. These service providers are permitted to access information only as necessary to perform services on our behalf and are expected to protect the confidentiality and security of that information.

Legal and regulatory requirements

We may disclose information when we believe such disclosure is necessary or appropriate to:

• Comply with applicable laws, regulations, court orders, subpoenas, or other legal processes;
• Respond to lawful requests from governmental or regulatory authorities;
• Protect the rights, property, or safety of DarkSun Solutions, our clients, our personnel, or others;
• Investigate, prevent, or address suspected fraud, security incidents, illegal activity, or violations of our agreements or policies; or
• Enforce our legal rights or defend against legal claims.

Business transactions

If DarkSun Solutions is involved in a merger, acquisition, investment, corporate reorganization, sale of assets, or other business transaction, information collected through our website may be transferred as part of that transaction, subject to applicable legal and contractual obligations.

With your consent

We may disclose your information for other purposes where you have provided your consent or where such disclosure is otherwise permitted or required by applicable law.

DarkSun takes reasonable steps to ensure that any third parties with whom information is shared are selected carefully and are contractually or otherwise obligated to protect the information they receive in accordance with applicable laws and appropriate confidentiality obligations.

6. Data security

DarkSun Solutions is committed to protecting the confidentiality, integrity, and availability of the information entrusted to us. We maintain administrative, technical, and physical safeguards that are designed to protect personal information and business information against unauthorized access, disclosure, alteration, loss, or destruction.

Our security measures may include, where appropriate:

Administrative safeguards

• Information security policies and procedures;
• Role-based access to information and systems;
• Personnel awareness and security training;
• Confidentiality obligations for employees and contractors;
• Vendor and service provider risk considerations; and
• Periodic review and improvement of internal security practices.

Technical safeguards

• Multi-factor authentication (MFA) where appropriate;
• Encryption of data in transit using industry-standard protocols where supported;
• Secure authentication and access controls;
• Network and endpoint security measures;
• Logging and monitoring of systems where appropriate; and
• Regular software updates and security maintenance.

Physical safeguards

• Reasonable physical security measures for devices and workspaces used to access or process information;
• Secure handling of company-owned equipment and storage media; and
• Measures designed to prevent unauthorized physical access to systems and information.

While we strive to implement security practices consistent with the nature of our business and the sensitivity of the information we handle, no method of transmitting information over the Internet or storing electronic information can be guaranteed to be completely secure. Accordingly, DarkSun Solutions cannot guarantee the absolute security of any information transmitted to or stored by us.

If DarkSun becomes aware of a security incident affecting personal information under our control, we will respond in accordance with applicable law, our contractual obligations, and our internal incident response procedures.

7. Client information and assessment materials

As part of providing cybersecurity advisory and consulting services, DarkSun Solutions may receive or access information and materials provided by prospective or existing clients. Depending on the nature of the engagement, this information may include technical documentation, network diagrams, firewall configurations and exports, identity and access management information, cloud configurations, DNS records, security policies, system inventories, assessment artifacts, architecture documentation, vulnerability information, AI governance documentation, operational technology (OT) information, and other materials necessary to perform the requested services.

DarkSun uses this information solely for legitimate business purposes related to the applicable engagement, including:

• Performing cybersecurity assessments and consulting services;
• Developing findings, recommendations, and remediation plans;
• Preparing reports, presentations, and other client deliverables;
• Supporting project management and engagement activities;
• Maintaining internal engagement records; and
• Improving the quality, consistency, and effectiveness of DarkSun's internal methodologies, assessment frameworks, and consulting processes.

Where artificial intelligence or automation technologies are used to assist our consultants in organizing information, drafting documentation, or supporting internal analysis, such technologies operate under the direction and oversight of qualified DarkSun personnel.

DarkSun does not use client-specific confidential information, proprietary information, or assessment materials to train publicly available artificial intelligence models or publicly shared machine learning systems. Any use of AI-assisted technologies is performed in a manner intended to protect client confidentiality and is subject to appropriate human review.

Client information is retained only for as long as reasonably necessary to fulfill the purposes for which it was collected, satisfy contractual obligations, comply with applicable legal or regulatory requirements, resolve disputes, or protect the legitimate business interests of DarkSun Solutions.

8. AI-assisted services

DarkSun Solutions may utilize artificial intelligence ("AI") and other automation technologies to assist our personnel in delivering efficient, consistent, and high-quality consulting services. These technologies are intended to support our consultants and internal operations and are not a substitute for professional expertise or human judgment.

Depending on the nature of an engagement, AI-assisted technologies may be used to support activities such as:

• Organizing meeting notes and engagement documentation;
• Reviewing technical documents and assessment materials;
• Summarizing information provided during interviews or workshops;
• Drafting reports, findings, recommendations, and other client deliverables;
• Assisting with research and technical analysis;
• Supporting internal knowledge management and consulting workflows; and
• Improving the consistency and efficiency of internal consulting processes.

DarkSun uses AI solely as an assistive tool. All significant findings, recommendations, reports, remediation guidance, and other client-facing deliverables are reviewed, validated, and approved by qualified DarkSun personnel prior to delivery, unless otherwise agreed in writing.

DarkSun remains responsible for the professional judgment, technical analysis, and consulting services provided to its clients. AI-generated content is not relied upon as the sole basis for conclusions or recommendations and is subject to appropriate human oversight before being incorporated into any client deliverable.

As AI technologies continue to evolve, DarkSun may update the tools and technologies it uses to support its internal operations and consulting services. Any such use will remain subject to this Privacy Policy and our commitment to protecting client confidentiality and handling information responsibly.

9. Data retention

DarkSun Solutions retains personal information, client information, and assessment materials only for as long as reasonably necessary to fulfill the purposes for which the information was collected, provide requested services, maintain business records, comply with legal or contractual obligations, resolve disputes, protect our legal rights, or satisfy other legitimate business needs.

The length of time information is retained depends on the nature of the information and the purpose for which it was collected. For example, we may retain:

• Contact information to respond to inquiries, maintain client relationships, or communicate regarding current or future services;
• Engagement records, reports, and assessment materials for documentation, quality assurance, contractual compliance, or historical reference;
• Financial and business records as required by applicable laws, accounting standards, or regulatory obligations; and
• Technical information and website analytics for security monitoring, website improvement, and operational purposes.

When personal information or client information is no longer required for the purposes described above, DarkSun will take reasonable steps to securely delete, anonymize, or otherwise dispose of the information in accordance with our internal data management practices, applicable legal requirements, and any contractual obligations.

Where a written agreement with a client specifies different retention or destruction requirements, the terms of that agreement shall govern with respect to the applicable engagement.

10. Your privacy rights

Depending on your location and applicable law, you may have certain rights regarding the personal information that DarkSun Solutions collects about you. Subject to applicable legal, regulatory, contractual, and security obligations, these rights may include the ability to:

• Request access to the personal information we maintain about you;
• Request correction of inaccurate or incomplete personal information;
• Request deletion of your personal information, where permitted by applicable law;
• Request information about how your personal information is collected, used, or disclosed;
• Withdraw your consent where processing is based on your consent, subject to applicable legal or contractual limitations; and
• Exercise any additional privacy rights available under applicable law.

To exercise any of these rights, please contact us using the contact information provided at the end of this Privacy Policy. We may request additional information to verify your identity before processing your request in order to protect your privacy and the security of your information.

Please note that DarkSun may retain certain information where required or permitted by applicable law, necessary to comply with contractual obligations, resolve disputes, enforce our legal rights, protect the security of our systems, or maintain legitimate business records.

We will respond to verified privacy requests within the timeframes required by applicable law.

11. Third-party services

To operate our business, provide our services, and maintain our website, DarkSun Solutions may utilize trusted third-party products and service providers. These providers may process or store information on our behalf solely to the extent necessary to perform the services they provide to us.

Examples of third-party services we may use include:

• Microsoft for business productivity, email, collaboration, and cloud-based services;
• Google for website analytics, productivity tools, and related business services;
• Notion for internal documentation, knowledge management, project organization, and meeting notes;
• Fillout for website forms, client inquiries, and information collection;
• Website hosting and infrastructure providers;
• Scheduling and communication platforms;
• Payment processing providers;
• Customer relationship management (CRM) systems; and
• Other vendors that support our business operations and consulting services.

These third-party providers maintain their own privacy policies and terms governing their services. While DarkSun carefully selects providers that support our business and security objectives, we do not control and are not responsible for the privacy practices, security controls, or content of third-party services.

Where appropriate, DarkSun takes reasonable steps to work with service providers that maintain appropriate security and confidentiality measures consistent with the nature of the services they provide.

As our business evolves, the third-party services we use may change. We may update this Privacy Policy from time to time to reflect material changes in our service providers or data processing practices.

12. Children's privacy

DarkSun Solutions' website and services are intended for businesses, organizations, and individuals seeking professional cybersecurity advisory and consulting services. Our website is not directed to children under the age of 13, and we do not knowingly collect, use, or disclose personal information from children under 13 years of age.

If we become aware that we have inadvertently collected personal information from a child under the age of 13 without appropriate parental consent, we will take reasonable steps to delete such information as soon as practicable, unless we are required to retain it by applicable law.

If you believe that a child under the age of 13 has provided personal information to DarkSun Solutions, please contact us at info@darksunsolutions.com so that we may investigate and take appropriate action.

13. Updates to this Privacy Policy

DarkSun Solutions reserves the right to modify or update this Privacy Policy at any time to reflect changes in our business practices, services, technologies, legal obligations, or applicable privacy laws.

Any updates will become effective upon posting the revised Privacy Policy on this website, unless otherwise stated. The effective date at the beginning of this Privacy Policy will be updated to indicate the date of the most recent revision.

Your continued use of our website following the posting of any changes constitutes your acknowledgment of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically to remain informed about how we collect, use, protect, and disclose information.

If we make material changes to this Privacy Policy that significantly affect how we process personal information, we will take reasonable steps to provide notice where required by applicable law.

14. Contact information

If you have any questions about this Privacy Policy, our privacy practices, or how DarkSun Solutions collects, uses, stores, or protects personal information, please contact us using the information below:

DarkSun Solutions, Inc.
Florida, United States
Email: info@darksunsolutions.com

If you wish to exercise any applicable privacy rights, request access to your personal information, request correction or deletion of your information, or have questions regarding the processing of your personal data, please contact us at the email address above. We may request additional information to verify your identity before responding to your request in order to protect the privacy and security of your information.

DarkSun Solutions will make reasonable efforts to respond to privacy-related inquiries in a timely manner and in accordance with applicable law.