Privacy Policy

1. Information we collect

Information you provide. Name, email, phone, company, job title, and any information submitted through contact forms, the client portal, or direct correspondence.

Account information. For active clients: login credentials, multi-factor authentication secrets, project records, deliverables, findings, signed documents, invoices, and message threads.

Automatically collected. IP address, browser type, device identifiers, referring URLs, pages viewed, and timestamps. Used to operate, secure, and improve the services.

Cookies. Strictly necessary cookies for portal authentication only. No third-party advertising cookies.

2. How we use information

• To respond to inquiries and deliver consulting services.
• To operate and secure the client portal, including authentication, authorization, and audit logging.
• To send transactional emails (account, document signing, invoice, incident notifications).
• To comply with legal obligations and enforce our agreements.
• To improve our services and develop new offerings.

3. Information sharing

We do not sell your information. We share it only:

• With service providers acting on our behalf (Cloudflare for hosting, Resend for transactional email), bound by confidentiality obligations.
• When required by law, court order, or government request, with notice to you when permitted.
• With your consent or at your direction.
• In connection with a merger, acquisition, or sale of assets, subject to confidentiality.

4. Data retention

Client engagement records are retained for the duration of the engagement and for seven years thereafter (or longer if required by law). Marketing inquiries are retained for two years from the last contact.

5. Security

We use administrative, technical, and physical safeguards including encryption in transit and at rest, multi-factor authentication on the client portal, audit logging, and least-privilege access controls. No method of transmission or storage is 100% secure.

6. Your rights

Subject to applicable law, you may request access, correction, or deletion of your personal information by emailing gino@cybersecuritygp.com. We respond within thirty days. Florida and other state-specific rights apply where granted by law.

7. Children

The services are not directed to children under 13, and we do not knowingly collect information from children.

8. International users

The services are operated from the United States. By using them, you consent to the transfer of your information to the United States.

9. Changes

We may update this policy from time to time. The updated version is indicated by the "Last updated" date. Material changes will be communicated by email to active clients.

10. Contact

Cybersecurity Group, LLC · Orlando, Florida · gino@cybersecuritygp.com