Com-Sec LLC ("Com-Sec," "we," "us," or "our") is a cybersecurity consulting firm offering security and compliance services to startups and growth-stage companies. This Privacy Policy describes how we collect, use, and protect your personal information when you visit com-sec.io, submit inquiries, or receive our consulting services.
Section 1
What Information Do We Collect?
Com-Sec collects limited personal information to provide and improve our services, maintain security, and respond to your inquiries.
1.1 Information You Provide to Us
When you contact us through our website or communicate with our team, you may provide:
1.2 Information Collected Automatically
When you visit our website, we may automatically collect limited technical data:
This data does not reveal your identity and is used in aggregate for diagnostics and service improvement.
1.3 Cookies and Tracking Technologies
We use essential cookies and basic analytics tools. We do not use marketing, targeting, or advertising cookies. Where required by law, we display a cookie banner to manage preferences.
Section 2
How We Process Your Information
We use collected information for limited and specific purposes:
Respond to Inquiries
Address your questions or requests from our contact form.
Assess Service Interest
Understand interest in our security and compliance offerings.
Improve Website Experience
Maintain, secure, and enhance website performance.
Maintain Internal Records
Retain limited correspondence for audit or operational purposes.
In EEA/UK jurisdictions, our legal bases are:
- Consent: When you contact us or request information
- Legitimate interests: To operate and improve our website and services
- Legal obligation: When required to comply with applicable laws
Section 4
How Do We Keep Your Information Safe?
We implement appropriate technical and organizational security measures:
TLS Encryption
Data encrypted in transit
Access Controls
User authentication enforced
Policy Reviews
Periodic internal audits
Section 5
How Long We Keep Your Information
We retain personal data only for as long as necessary to fulfill the purposes in this policy or meet applicable legal, regulatory, or contractual obligations.
If you contact us without engaging our services, we typically retain your information within our email system for no longer than 12 months, unless retention is required for business, legal, or compliance reasons. When data is no longer needed, we securely delete or archive it.
Section 6
What Are Your Privacy Rights?
Your rights depend on your location and nature of interaction with Com-Sec.
6.1 Access and Correction
You may request access to the personal information we hold, or request corrections to keep your data accurate. Contact us at privacy@com-sec.io.
6.2 Opt-Out of Communications
You may opt out of marketing communications at any time by clicking the unsubscribe link in our emails, or by contacting privacy@com-sec.io.
We may still send essential service-related messages related to an active engagement.
6.3 Region-Specific Rights (EEA, UK, Switzerland, Canada)
Section 7
Do United States Residents Have Specific Privacy Rights?
California residents have specific rights under the CCPA and CPRA.
7.1 Categories of Personal Information Collected
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Name, email, IP address | Yes |
| B. Customer Records | Job title, company, phone | Yes |
| C. Protected Characteristics | Age, gender, ethnicity | No |
| D. Commercial Information | Purchase history | No |
| E. Biometric Information | Fingerprints, face scans | No |
| F. Internet/Network Activity | Browser type, pages visited | Yes |
| G. Geolocation Data | Approximate location via IP | Yes |
| H. Sensory Data | Audio/video recordings | No |
| I. Professional/Employment Info | Job title, company info | Yes |
| J. Education Info | Student records | No |
| K. Inferences | User profiles, predictions | No |
| L. Sensitive Personal Information | Gov ID, financial info | No |
| M. Other Personal Info | Contact form messages | Yes |
We do not sell or share your personal information for advertising or marketing purposes.
7.2 Your Rights Under California Law
7.3, 7.4 and 7.5 Exercising Your Rights, Verification and Appeals
Submit a request by emailing privacy@com-sec.io. We may verify your identity before processing. Authorized agents must provide written authorization. If your state allows privacy appeals, you may appeal our decision via the same email.
7.6 California "Shine the Light" Disclosure
Under California Civil Code §1798.83, you may request information once per year about personal data shared for third-party marketing. Com-Sec does not share your data for such purposes. If this changes, we will update this policy and provide an opt-out.
Section 8
Do We Collect Information From Minors?
We do not knowingly collect, solicit, or process personal information from individuals under the age of 18. Our website and services are intended for business and professional use only.
Section 9
Do We Make Updates To This Policy?
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we do, we will revise the "Effective Date" at the top of this page.
If we make material changes, we may notify you by posting a notice on our website or contacting you directly. We encourage you to review this policy periodically.
Section 10
How Do You Contact Us?
If you have any questions or comments about this Privacy Policy or our privacy practices, reach out to us:
Com-Sec LLC
Cybersecurity & Compliance Firm