Privacy Policy

1. Introduction

Zio Security, LLC ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website and purchase our CCPA Cybersecurity Audit Readiness Kit.

This policy applies to information collected through our website and related services. By using our website or purchasing our products, you agree to the terms of this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when you:

• Submit contact forms on our website
• Request customer support or refunds
• Subscribe to our communications
• Interact with our customer service team

This information typically includes your name, email address, and any message or inquiry you send us.

2.2 Payment Information

When you make a purchase, payment information is collected and processed by Stripe, our third-party payment processor. We do not store your complete credit card information on our servers. Stripe may collect:

• Credit card numbers and payment details
• Billing addresses
• Transaction history

2.3 Analytics and Usage Information

We use Google Analytics and Google Tag Manager to collect information about how you use our website, including:

• Pages visited and time spent on pages
• Click patterns and navigation paths
• Device and browser information
• IP address and general location data
• Referral sources and campaign data

3. How We Use Your Information

We use the collected information for the following purposes:

• Product Delivery: To process your orders and deliver digital products
• Customer Support: To respond to inquiries, support requests, and refund requests
• Website Improvement: To analyze website usage and improve our services
• Communication: To send transaction-related emails and important updates
• Legal Compliance: To comply with applicable laws and regulations
• Security: To prevent fraud and protect against security threats

4. Information Sharing and Third Parties

We work with several trusted third-party service providers to deliver our services:

4.1 Stripe (Payment Processing)

All payment processing is handled by Stripe. When you make a purchase, your payment information is transmitted directly to Stripe's secure servers. Stripe's privacy policy governs their use of your payment information.

4.2 Formspree (Form Processing)

Our contact forms are processed through Formspree. When you submit a form, the information is sent to our email via Formspree's service. Formspree's privacy policy applies to this data processing.

4.3 Google Analytics

We use Google Analytics to understand how visitors use our website. Google Analytics collects anonymous usage data and may use cookies. Google's privacy policy governs their use of this information.

4.4 No Sale of Personal Data

We do not sell, trade, or rent your personal information to third parties. We only share information with service providers as necessary to deliver our services and as described in this policy.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies primarily for analytics purposes. Specifically:

• Analytics Cookies: Google Analytics cookies to understand website usage
• Functional Cookies: Essential cookies for website operation
• No Advertising Cookies: We do not use cookies for targeted advertising

Most web browsers allow you to control cookies through their settings. However, disabling cookies may affect the functionality of our website.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL encryption for data transmission
• Secure hosting with regular security updates
• Limited access to personal information on a need-to-know basis
• Regular security assessments and monitoring

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Customer inquiries: Retained for up to 2 years for support purposes
• Transaction records: Retained for up to 7 years for tax and legal compliance
• Analytics data: Retained according to Google Analytics retention settings (up to 26 months)

8. Your California Privacy Rights (CCPA)

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA):

8.1 Right to Know

You have the right to request information about the categories and specific pieces of personal information we have collected about you in the past 12 months.

8.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions for legal, operational, or security purposes.

8.3 Right to Opt-Out of Sale

We do not sell personal information, so there is no opt-out required for sales of personal information.

8.4 Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

8.5 How to Exercise Your Rights

To exercise any of these rights, please contact us through our contact form at /contact or email us at support@ziosecurity.com. We will verify your identity before processing your request.

9. Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

10. International Users

Our services are operated from the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

• Update the "Effective Date" at the top of this policy
• Post the updated policy on our website
• Notify you of significant changes via email if we have your contact information

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.