San Diego Cybersecurity Services (“we,” “our,” or “us”) is committed to protecting your privacy and safeguarding your personal information. This Privacy Policy describes how we collect, use, disclose, and protect your information when you visit our website at sandiegocybersecurityservices.com (the “Site”) or engage our cybersecurity services. As a cybersecurity company, we hold ourselves to the highest standards of data protection.
1. Information We Collect
We collect information in several ways depending on how you interact with our Site and services:
Information You Provide Directly
- Contact Information: Name, email address, phone number, and organization name when you fill out contact forms, request assessments, or subscribe to our newsletter.
- Service Engagement Data: Business information, technical environment details, and security-related data provided during service engagements, consultations, and security assessments.
- Communication Records: Content of emails, messages, and other communications you send to us.
- Event Registration: Information provided when registering for webinars, workshops, or cybersecurity events.
Information Collected Automatically
- Device and Browser Information: IP address, browser type and version, operating system, device identifiers, and screen resolution.
- Usage Data: Pages visited, time spent on pages, click patterns, referring URLs, and navigation paths through our Site.
- Location Data: Approximate geographic location derived from your IP address.
Interactive Tool Data
Data entered into our interactive tools (Security Assessment Tool, Breach Cost Calculator, Compliance Finder) is processed locally in your browser and is not transmitted to our servers unless you explicitly submit a form requesting follow-up.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery: To respond to your inquiries, conduct security assessments, deliver cybersecurity services, and provide technical support.
- Communication: To send you relevant cybersecurity alerts, service updates, educational content, and promotional materials (with your consent where required).
- Site Improvement: To analyze usage patterns, diagnose technical issues, and improve the functionality and content of our Site.
- Security: To detect, prevent, and respond to fraud, security incidents, and other harmful activities on our Site.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
- Business Operations: To manage our business relationships, process payments, and maintain accurate records.
3. Information Sharing
We do not sell, rent, or trade your personal information to third parties. We may share your information in the following limited circumstances:
- Service Providers: With trusted third-party vendors who assist us in operating our Site, delivering services, or conducting business operations. All service providers are contractually bound to protect your information and use it only for the purposes we specify.
- Legal Requirements: When required by law, subpoena, court order, or government investigation, or to protect our legal rights, safety, or property.
- Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.
- With Your Consent: When you have given us explicit permission to share your information for a specific purpose.
4. Data Security
As a cybersecurity firm, we implement industry-leading security measures to protect your personal information, including:
- Encryption in transit using TLS 1.3 for all data transmitted between your browser and our servers.
- Encryption at rest using AES-256 for stored personal data.
- Strict access controls with role-based permissions and multi-factor authentication for all administrative access.
- Regular security assessments, penetration testing, and vulnerability scanning of our own infrastructure.
- Continuous monitoring and logging of access to personal data.
- Incident response procedures to quickly address any data security events.
While we employ robust security practices, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your information using commercially reasonable measures that exceed industry standards.
5. Cookies and Tracking Technologies
Our Site uses cookies and similar technologies to enhance your experience:
- Essential Cookies: Required for core Site functionality, such as maintaining session state and security features. These cannot be disabled.
- Analytics Cookies: Used to understand how visitors interact with our Site, including pages visited, time on site, and navigation paths. We use this data to improve our content and user experience.
- Preference Cookies: Store your preferences and settings to provide a more personalized experience on return visits.
You can control cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Disabling certain cookies may affect some Site functionality. We do not use third-party advertising cookies or participate in cross-site tracking for advertising purposes.
6. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Right to Know: Request information about what personal data we have collected about you and how it is used.
- Right to Access: Obtain a copy of the personal data we hold about you.
- Right to Deletion: Request that we delete your personal information, subject to certain legal exceptions.
- Right to Correction: Request correction of inaccurate or incomplete personal data.
- Right to Opt Out: Opt out of the sale or sharing of personal information (note: we do not sell personal information).
- Right to Non-Discrimination: Exercise your privacy rights without facing discriminatory treatment.
California Residents (CCPA/CPRA): California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act. To exercise any of these rights, contact us at privacy@sandiegocybersecurityservices.com. We will respond to verified requests within 45 days as required by law.
7. Children’s Privacy
Our Site and services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe a child under 16 has provided us with personal information, please contact us at privacy@sandiegocybersecurityservices.com.
8. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, provide additional notice (such as a banner on our Site or an email notification). Your continued use of our Site after any changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this page periodically.
9. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how we handle your personal information, please contact us:
We will acknowledge receipt of your inquiry within 2 business days and provide a substantive response within 30 days. For California privacy rights requests, we will respond within 45 days as required by law.