Privacy Policy

---

1. INTRODUCTION

BreachPoint Consulting LLC ("Company," "we," "us," or "our"), operating at breachpointconsulting.net (the "Website"), is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights with respect to that information. By using our Website or submitting information through our contact form, you agree to the practices described in this Policy.

2. INFORMATION WE COLLECT

2.1 Information You Provide

We collect information you voluntarily provide when you:

• Submit our contact form (name, email address, and any information you include in your message)
• Email us directly at info@breachpointconsulting.net
• Complete our client intake questionnaire (organization name, contact information, and facility/security details)

2.2 Information Collected Automatically

When you visit our Website, we or our service providers may automatically collect:

• IP address and general geographic location
• Browser type and version
• Pages visited and time spent on the Website
• Referring URL (the page that linked you to our Website)
• Device type and operating system

This information is collected through cookies and similar tracking technologies, including Google Analytics and Google reCAPTCHA (see Section 4).

2.3 No Sensitive Information

We do not intentionally collect sensitive personal information (such as Social Security numbers, financial account information, or health information) through our Website. If you include sensitive information in a contact form message, please be aware that standard web forms are not end-to-end encrypted.

3. HOW WE USE YOUR INFORMATION

We use the information we collect to:

• Respond to your inquiries and schedule scoping consultations
• Prepare proposals and statements of work
• Send you information about our services that you have requested
• Improve our Website content and user experience
• Analyze Website traffic patterns using aggregated, anonymized data
• Comply with applicable legal obligations

We do NOT sell, rent, or trade your personal information to third parties. We do NOT use your information for advertising purposes or share it with advertisers.

4. COOKIES & THIRD-PARTY SERVICES

4.1 Google Analytics

Our Website uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies to analyze Website usage. Information generated by cookies about your use of our Website (including your IP address) is transmitted to and stored by Google. We use this information to understand how visitors use our Website and to improve our content. You may opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.

4.2 Google reCAPTCHA

Our contact form uses Google reCAPTCHA to protect against spam and automated submissions. reCAPTCHA collects hardware and software information from your device and sends it to Google for analysis. Google's Privacy Policy and Terms of Service apply to reCAPTCHA data. See policies.google.com/privacy for more information.

4.3 Cookie Consent

When you first visit our Website, you will be presented with a cookie consent notice. By accepting, you consent to our use of analytics cookies. You may withdraw consent at any time by clearing cookies in your browser settings. Note that some website functionality may be limited if you disable all cookies.

5. DATA RETENTION

We retain contact form submissions and inquiry information for up to three (3) years unless a business relationship is established, in which case information is retained per our client data retention policies. Website analytics data is retained per Google Analytics' standard retention settings (26 months by default). You may request deletion of your personal information at any time (see Section 7).

6. INFORMATION SECURITY

We implement reasonable technical and organizational measures to protect the information we collect against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

As a cybersecurity firm, we take information security seriously. Inquiry information and client data are stored in encrypted systems with access limited to authorized personnel.

7. YOUR PRIVACY RIGHTS

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal retention obligations
• Opt-Out: Opt out of analytics tracking (see Section 4)
• California Residents: Under the California Consumer Privacy Act (CCPA), California residents have additional rights including the right to know, delete, and opt-out of sale of personal information. We do not sell personal information.

To exercise any of these rights, contact us at info@breachpointconsulting.net. We will respond within thirty (30) days.

8. CHILDREN'S PRIVACY

Our Website is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we learn that we have collected information from a minor, we will delete it promptly.

9. THIRD-PARTY LINKS

Our Website may contain links to third-party websites. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party sites you visit.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will post the updated Policy on this page with a revised 'Last Updated' date. Continued use of the Website after changes are posted constitutes your acceptance of the updated Policy.

11. CONTACT US

If you have questions or concerns about this Privacy Policy or our privacy practices, contact us at:

BreachPoint Consulting LLC

Email: info@breachpointconsulting.net

Website: breachpointconsulting.net