CYFORi ("we," "our," or "us") is committed to protecting the privacy of individuals who interact with our website, services, and communications. This Privacy Policy describes how we collect, use, store, and share information in compliance with applicable federal and state privacy laws, including but not limited to the Texas Data Privacy Act, HIPAA (where applicable), and other relevant frameworks.
Information We Collect
Personal Information
- Name, email address, phone number, and employer when you contact us or submit a form
- Business or organizational affiliation
- Information voluntarily provided in correspondence, consultations, or engagement requests
Automatically Collected Information
- IP address, browser type, operating system, and referring URLs
- Pages visited, time spent on pages, and navigation patterns via analytics tools
- Cookies and similar tracking technologies for site functionality and analytics
Engagement & Service Data
- Audit findings, assessment results, and compliance documentation generated during client engagements
- Incident response evidence and forensic data collected as part of contracted services (governed by separate engagement agreements)
How We Use Information
- Provide, maintain, and improve our website, services, and client engagements
- Respond to inquiries, process contact form submissions, and schedule consultations
- Deliver compliance assessments, audit readiness programs, and DFIR services
- Communicate service updates, security advisories, and relevant cybersecurity guidance
- Comply with legal obligations and regulatory requirements
- Analyze website usage to improve content, design, and user experience
Information Sharing & Disclosure
- We do not sell, trade, or rent personal information to third parties
- Information may be shared with service providers who assist in website operations (e.g., web hosting, analytics, CRM), under strict confidentiality agreements
- Client engagement data may be shared with auditors, regulators, or legal counsel as required by engagement scope and applicable law
- We may disclose information when required by law, court order, or to protect the rights and safety of CYFORi, our clients, or the public
Data Security
We implement industry-standard administrative, technical, and physical safeguards to protect personal information, consistent with industry standard security framework principles. Given our business in cybersecurity and incident response, protecting client data is not optional — it is foundational to our operation.
Data Retention
- Website analytics data: retained in aggregate for a maximum of 26 months
- Contact form submissions: retained for up to 36 months or as required by business needs
- Client engagement data: retained per engagement agreements and applicable retention requirements
- Personal data may be deleted upon written request, subject to legal retention obligations
Your Rights
- Request access to personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request deletion of your personal data (subject to legal and contractual obligations)
- Opt out of marketing communications at any time
- Exercise any applicable rights under the Texas Data Privacy Act and other governing laws
Cookies
Our website uses cookies for functionality, analytics, and personalization. You can control cookie preferences through your browser settings. Note that disabling cookies may affect site functionality.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any information.
Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have received information from a minor, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date. We encourage you to review this policy regularly.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us through our Contact page or by email.