CVSS Associates

Privacy Policy

Last updated: December 9, 2025

1. Introduction

CVSS Associates ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the site.

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

  • Fill out our contact form
  • Request information about our services
  • Subscribe to our communications
  • Engage with our consulting services

This information may include: name, email address, company name, job title, phone number, and message content.

Automatically Collected Information

When you visit our website, we may automatically collect certain information, including:

  • IP address and location information
  • Browser type and version
  • Operating system
  • Pages visited and time spent on pages
  • Referral source

3. How We Use Your Information

We use the information we collect to:

  • Respond to your inquiries and provide customer support
  • Deliver consulting services and communications
  • Improve our website and services
  • Send you updates about our services (with your consent)
  • Comply with legal obligations
  • Protect against fraudulent or unauthorized activity

4. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

  • Service Providers: We may share information with trusted third-party service providers who assist us in operating our website and providing services (e.g., email automation, analytics)
  • Legal Compliance: We may disclose information when required by law or to protect our rights, property, or safety
  • Business Transfers: In the event of a merger, acquisition, or sale of assets

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments
  • Access controls and authentication
  • Secure hosting infrastructure

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience. These may include:

  • Essential Cookies: Required for website functionality (e.g., CSRF protection)
  • Analytics Cookies: Help us understand how visitors use our site (via Umami Analytics)
  • reCAPTCHA: Google reCAPTCHA to prevent spam and abuse

You can control cookies through your browser settings, though disabling certain cookies may affect website functionality.

7. Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Contact form submissions are retained for a reasonable period to respond to inquiries and provide services.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

  • Access: Request a copy of personal information we hold about you
  • Rectification: Request correction of inaccurate information
  • Erasure: Request deletion of your personal information
  • Portability: Request transfer of your data to another organization
  • Objection: Object to processing of your personal information
  • Withdrawal: Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the information provided below.

9. Third-Party Services

Our website integrates with third-party services that have their own privacy policies:

  • Google reCAPTCHA: Subject to Google's Privacy Policy
  • Umami Analytics: Privacy-focused analytics service
  • Vercel Hosting: Our hosting provider's privacy practices apply

We recommend reviewing the privacy policies of these services.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your personal information when it is transferred internationally.

11. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

CVSS Associates

Email: info@cvss-associates.com

Website: www.cvss-associates.com

This Privacy Policy is effective as of December 9, 2025.