[ATTORNEY REVIEW REQUIRED — placeholder text]
Privacy Policy
EFFECTIVE DATE: [EFFECTIVE DATE — TBD]
Who we are
This Privacy Policy describes how [ENTITY NAME], doing business as BreachBack ("BreachBack," "we," "us"), a company organized under the laws of [STATE]and based in Grand Rapids, Michigan, collects and uses information through breachback.com (the "Site"). It covers the Site only. Client engagements are governed by the privacy and data-handling terms in your signed agreement with us.
What we collect
We collect two kinds of information.
- Information you give us. When you submit the contact form or request a Breach Readiness Score, we collect what you type in: your name, business name, email address, phone number if you provide one, and your answers to the assessment questions.
- Information collected automatically. We use privacy-respecting site analytics to understand how the Site is used — pages visited, approximate region, device type. We do not run advertising pixels, ad-network trackers, or cross-site tracking on this Site.
How we use it
We use your information to build your readiness report, respond to your inquiry, and operate the Site. If you ask us about our services, we may follow up with you about that request. That is the extent of it. We don't sell lists, we don't rent your contact information, and we don't share your assessment answers with anyone outside the team that builds your report and the service providers listed below.
Service providers
We use a small number of vendors to run the Site — hosting, email delivery, form storage, and analytics. They process your information on our behalf, under contract, and only to provide their service to us. We do not permit them to use your information for their own purposes.
Retention
We keep form submissions and readiness-score responses for as long as reasonably needed to provide the report, respond to your inquiry, and maintain ordinary business records — [RETENTION PERIOD — e.g., 24 months] by default, unless a longer period is required by law or by an active engagement. You can ask us to delete your submission at any time using the contact below, and we will, unless we are legally required to keep it.
Cookies and tracking
The Site uses only the cookies and similar technologies needed for it to function and for the analytics described above. There are no advertising cookies. We do not respond to browser "Do Not Track" signals because we do not track you across other sites in the first place.
Your choices and rights
You can ask us what information we hold about you, ask us to correct it, or ask us to delete it. Depending on where you live, state law may give you additional rights — [STATE-SPECIFIC RIGHTS — attorney to confirm applicable state privacy statutes]. To exercise any of these, email us at the address below. We will respond within a reasonable time and will not treat you differently for asking.
Children
The Site is for businesses. It is not directed to children under 13, and we do not knowingly collect information from them.
Changes to this policy
If we change this policy, we will post the revised version here with a new effective date. Material changes will be flagged plainly at the top of this page.
Contact
Questions, requests, or concerns about this policy: hello@breachback.com. We're in Grand Rapids, Michigan, and a human reads that inbox.