Privacy Policy

1. Scope

This Privacy Policy applies to information collected through:

• quickguard360.com;
• consultation and contact forms;
• website analytics;
• email communications arising from website inquiries;
• newsletter and marketing communications; and
• related interactions with prospective customers.

This policy primarily addresses information collected from website visitors, prospective customers, and business contacts.

It does not govern all information processed while delivering managed IT, cybersecurity, vCISO, or other contracted services. Information handled during a customer engagement may be governed by the applicable service agreement, confidentiality provisions, data-processing agreement, business associate agreement where applicable, or other contractual terms.

The website is intended for businesses and business representatives located in the United States. It is not directed specifically to individuals outside the United States.

2. Information We Collect

Information You Provide

When you submit a consultation or contact request, we may collect:

• first and last name;
• work email address;
• optional phone number;
• company name;
• optional approximate employee count;
• area of interest;
• preferred contact method;
• description of an IT, cybersecurity, or business concern;
• optional additional message;
• consent records; and
• other information you choose to provide.

When you communicate with us by email or another approved channel, we may collect the contents of that communication and associated contact information.

Newsletter and Marketing Information

If you receive newsletters or promotional communications from us, we may process:

• your name;
• email address;
• company or professional affiliation;
• subscription status;
• communication preferences;
• delivery and engagement information; and
• unsubscribe or suppression records.

A consultation request authorizes us to respond to that request. It is not represented as unrestricted consent to all marketing. We may send commercial communications when permitted by applicable law. Commercial messages will provide a method to opt out of future marketing communications.

Information Collected Automatically

When you visit the website, we or our service providers may automatically collect limited technical and usage information, including:

• Internet Protocol address;
• approximate geographic location;
• browser type;
• device type;
• operating system;
• pages viewed;
• referring page or website;
• landing page;
• links or calls to action selected;
• session and interaction information;
• date and time of access;
• cookie or similar identifier; and
• campaign information such as UTM parameters.

Google Analytics may collect information about website use only after analytics consent has been provided, as described below.

Security and Abuse-Prevention Information

We may process information reasonably necessary to protect the website and consultation form from fraud, spam, abuse, unauthorized access, and other security threats. This may include technical request information, security events, timestamps, rate-limiting data, and the results of automated abuse-detection measures.

3. Information You Should Not Submit

The public consultation form is not an approved channel for sensitive operational or customer information.

Do not submit:

• passwords or authentication credentials;
• private encryption keys;
• access tokens;
• payment-card or financial-account information;
• Social Security numbers;
• government identification numbers;
• medical or healthcare information;
• detailed security logs;
• vulnerability details that could enable unauthorized access;
• protected employee records;
• customer data belonging to another organization; or
• other highly sensitive or regulated information.

The website and public consultation form are not intended to receive healthcare data.

Customers should use only the secure support and communication channels established under their service agreements when sharing operationally sensitive information.

4. How We Use Information

We may use personal information to:

• receive and respond to inquiries;
• determine whether our services may be a practical fit;
• arrange and conduct consultations;
• provide requested information;
• communicate about managed IT, cybersecurity, vCISO, and related services;
• maintain records of business communications;
• operate, maintain, and improve the website;
• understand aggregate website usage and conversion activity;
• measure the effectiveness of website content and campaigns;
• send newsletters or promotional communications as permitted by applicable law;
• maintain opt-out and suppression records;
• prevent spam, fraud, abuse, and security incidents;
• diagnose technical problems;
• protect our rights, systems, users, and services;
• comply with applicable legal obligations; and
• establish, exercise, or defend legal claims.

We do not use consultation-form contents as analytics event values and do not intentionally send form messages, names, email addresses, phone numbers, or other directly identifying form contents to Google Analytics.

5. Cookies and Analytics

Necessary Technologies

The website may use cookies or similar technologies that are necessary to:

• operate the website;
• maintain security;
• prevent abuse;
• preserve a visitor’s privacy choices;
• support forms; and
• provide functionality requested by the visitor.

Where legally permitted, necessary technologies may operate without optional analytics consent because they are required for the website’s operation or security.

Google Analytics

We plan to use Google Analytics to understand how visitors interact with the website.

Google Analytics may collect information such as:

• page views;
• session statistics;
• browser and device information;
• approximate location;
• referral information;
• interaction events; and
• a cookie or similar client identifier.

Google states that Google Analytics may use Internet Protocol addresses during processing to derive approximate location information. Google Analytics may use a first-party cookie, including the _ga cookie, to distinguish users and sessions.

QuickGuard360 intends to configure Google Analytics with:

• Google Signals disabled;
• advertising features disabled;
• remarketing disabled;
• User-ID disabled;
• no intentional transmission of form contents or direct contact information; and
• analytics storage disabled until the visitor provides analytics consent.

Google Analytics must not load or store analytics identifiers until the visitor accepts analytics cookies through the website’s privacy controls.

Visitors may decline analytics without losing access to essential website content or contact functionality. Visitors may later change or withdraw their analytics preference through the website’s privacy settings.

Our use of Google Analytics is subject to Google’s applicable terms and privacy practices.

6. How We Disclose Information

We may disclose personal information to service providers that perform services for us, including providers of:

• domain registration and DNS services;
• website hosting and infrastructure;
• content delivery and network security;
• business email;
• transactional email delivery;
• website analytics;
• error and performance monitoring;
• database hosting;
• backup and disaster recovery;
• spam and abuse prevention;
• professional services; and
• legal, accounting, and compliance assistance.

Current providers and infrastructure include:

• GoDaddy for domain-registration or DNS-related services;
• Microsoft Azure for website hosting and infrastructure;
• PostgreSQL, which is currently hosted on the same Azure server as the website application;
• Microsoft 365 for business email;
• Resend for transactional-email delivery; and
• Google Analytics for consent-based website analytics.

Information included in consultation communications, such as contact details and message contents, may be processed by Resend as needed to deliver prospect confirmations and sales notifications.

Error-monitoring, backup, and other infrastructure providers may be added when selected and configured. We will update this policy when appropriate.

Service providers may process information only as necessary to provide their services to us and subject to their contracts, terms, and applicable law.

We may also disclose information:

• when required by law, subpoena, court order, or valid governmental request;
• to protect the rights, safety, systems, or property of QuickGuard360 or others;
• to investigate fraud, abuse, or security incidents;
• in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction; or
• with your direction or consent.

7. No Sale or Targeted Advertising

QuickGuard360 does not sell personal data.

QuickGuard360 does not share personal data for cross-context behavioral or targeted advertising.

QuickGuard360 does not process website personal data to make decisions producing legal or similarly significant effects concerning an individual.

If these practices change, we will update this policy and provide any notices, choices, or opt-out mechanisms required by applicable law before beginning the new processing.

8. Email and Marketing Communications

We may send email to:

• respond to consultation requests;
• provide information requested by a recipient;
• communicate about a prospective or existing business relationship;
• deliver operational or service-related notices; and
• provide newsletters or information about our services where permitted by applicable law.

Commercial email will include an appropriate method for opting out of future marketing messages. We will process valid opt-out requests as required by applicable law.

Opting out of marketing does not prevent us from sending non-promotional messages necessary to respond to an active inquiry, administer an existing business relationship, provide requested services, address security issues, or comply with legal obligations.

We may retain an email address on a suppression list after an opt-out so that we can honor the preference.

A consultation request does not automatically enroll a visitor in a newsletter.

9. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this policy, including business, security, legal, accounting, and dispute-resolution requirements.

Unless a longer period is reasonably necessary:

• unsuccessful or inactive consultation leads may be retained for up to 24 months after the most recent meaningful interaction;
• active prospect information may be retained while discussions remain ongoing;
• customer records may be retained for the duration of the relationship and for an appropriate period afterward;
• marketing opt-out and suppression records may be retained as necessary to honor the opt-out;
• security and abuse-prevention records may be retained for a period appropriate to the relevant risk;
• analytics information is retained according to the configured Google Analytics retention settings; and
• records required for legal, tax, accounting, fraud-prevention, or dispute purposes may be retained for the applicable period.

At the end of the applicable retention period, information may be deleted, de-identified, or aggregated unless continued retention is required or permitted by law.

QuickGuard360 intends to configure Google Analytics using the shortest retention period that reasonably supports its business needs.

10. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, acquisition, use, alteration, disclosure, or destruction.

These measures may include:

• access restrictions;
• authenticated administrative access;
• encrypted network transmission;
• server and application security controls;
• monitoring;
• backups;
• vulnerability and dependency review;
• spam and abuse prevention; and
• service-provider controls.

No system, transmission method, or storage system can be guaranteed to be completely secure. Visitors should not use the public website or consultation form to transmit sensitive information.

11. Privacy Requests

Subject to applicable law and reasonable verification, individuals may request that QuickGuard360:

• confirm whether we process their personal information;
• provide access to certain personal information;
• correct inaccurate personal information;
• delete certain personal information;
• provide certain information in a portable format;
• explain relevant processing practices; or
• honor applicable opt-out rights.

QuickGuard360 intends to make access, correction, and deletion requests available to individuals when reasonably possible, even when a particular privacy law does not require us to do so.

Requests may be submitted to:

privacy@quickguard360it.com

Please include enough information for us to understand and evaluate the request. Do not send government identification or other highly sensitive information unless we specifically request an appropriate verification method.

We may need to verify your identity and authority before completing a request. We may deny or limit a request when permitted by law, including when information must be retained for security, fraud prevention, contractual, legal, accounting, dispute-resolution, or other legitimate purposes.

Authorized agents may submit requests where permitted by applicable law. We may require evidence of the agent’s authority and may verify the request directly with the individual.

We will respond within the period required by applicable law.

12. Appeals

If we decline a privacy request, you may ask us to reconsider by emailing:

privacy@quickguard360it.com

Use the subject line “Privacy Request Appeal” and explain why you believe the decision should be reconsidered.

We will review and respond to an appeal as required by applicable law. Where applicable, our response will provide information about additional complaint options.

13. Children’s Privacy

The website is intended for businesses and business representatives. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the website.

If you believe a child has provided personal information through the website, contact us at privacy@quickguard360it.com so we can evaluate and address the matter.

14. International Processing

QuickGuard360 is based in the United States, and the website is intended primarily for United States businesses.

Our service providers may process or store information in the United States or other jurisdictions. Those jurisdictions may have privacy laws that differ from the laws where a visitor is located.

The website is not specifically directed to residents of the European Union, European Economic Area, United Kingdom, or other non-U.S. jurisdictions.

15. Third-Party Websites

The website may contain links to third-party websites or services. QuickGuard360 does not control and is not responsible for the privacy, security, content, or practices of third-party websites.

Visitors should review the privacy notices of third-party services before providing information to them.

16. Business Changes

If QuickGuard360 undergoes a merger, acquisition, reorganization, financing, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law.

17. Changes to This Policy

We may update this Privacy Policy when our services, vendors, technology, data practices, or legal obligations change.

The revised policy will be posted on this page with an updated effective date. If a change materially affects how we use previously collected information, we will provide additional notice or obtain consent when required by applicable law.

18. Contact Us

Questions, requests, or concerns about this Privacy Policy may be directed to:

Email: privacy@quickguard360it.com