Privacy Policy

1. What We Collect

We collect only what is necessary to operate the Site and respond to your inquiries:

• Email address (when you contact us or join the community)
• Name and any context you choose to share in your message
• Anonymous analytics about pages visited, referrers, and approximate location at the country level

We do not collect Social Security numbers, payment card numbers, or government-issued IDs through this Site. Payments, when applicable, are processed through a separate engagement and processor.

2. How We Use Your Information

• To respond to your inquiries
• To deliver the services you request
• To send you content you opt in to (newsletters, course updates)
• To improve the Site based on aggregate, anonymized analytics

We do not sell your personal information. We do not share your email or contact details with advertisers or third-party marketers.

3. Service Providers

We use the following service providers, each with their own privacy practices:

• Vercel — hosting and basic anonymous analytics
• Cloudflare — DNS, content delivery, and security filtering
• GoHighLevel — community platform and email
• Email provider — message delivery and inbox

These providers process data only as needed to deliver the Site and services. They do not have permission to use your data for their own marketing.

4. Cookies and Tracking

The Site uses minimal cookies — primarily for anonymous analytics. We do not use third-party advertising cookies, retargeting pixels, or cross-site tracking. You can disable cookies in your browser without losing access to the Site.

5. Data Retention

Email correspondence is retained as long as our working relationship continues, plus a reasonable archive period for tax and legal records. You can request deletion of your data at any time by emailing us — see Section 7.

6. Your Rights

Depending on where you live, you may have rights under laws like the GDPR (Europe) or CCPA (California), including:

• The right to access the personal data we hold about you
• The right to correct inaccurate data
• The right to request deletion of your data
• The right to opt out of any non-essential communications
• The right to data portability

To exercise any of these rights, email us. We honor reasonable requests regardless of jurisdiction.

7. Children

The Site is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it.

8. Security

We use industry-standard security measures (HTTPS, modern hosting infrastructure, access controls). No system is perfectly secure — given the topic of this Site, we know that better than most. If we ever experience a data incident affecting your information, we will notify you and follow the disclosure timelines required by applicable law.

9. Changes to This Policy

We may update this Policy. Material changes will be posted on this page with an updated "Last updated" date.

10. Contact

Privacy questions, deletion requests, or anything else: justin@breakingintocybersecurity.com