Privacy Policy

Summary

Security Overview LLC ("Security Overview," "we," "our," or "us") provides managed security services for businesses. This policy describes how we handle personal information collected through securityoverview.com. We do not sell, rent, or trade personal information, and we do not use it for advertising or cross-site tracking. Information you share with us inside a client engagement is governed by the contract you sign with us, not by this policy.

Scope

This policy applies to securityoverview.com and its subdomains. It does not apply to third-party services we may link to, software platforms used inside a client engagement, or any product or interaction not delivered through this website. Linked third-party sites have their own privacy practices, which we encourage you to review.

What we collect on this website

Contact form submissions. When you submit our contact form, we collect the name, company name, email address, intent indicator, and message you provide, along with the time of submission and the IP address used to submit the form (for rate limiting and spam protection).

Analytics (with consent only). If you accept analytics on the consent banner, we use PostHog to record page views and basic interaction events, tied to a session ID stored in your browser. If you submit the contact form while analytics consent is active, we send a single contact_form_submitted event keyed to a one-way hash of your email and tagged with the form's intent. Your name, message, and raw email are never sent to PostHog. Decline and none of this happens.

Error monitoring. We use Sentry to capture technical errors that occur on the site. Sentry may record limited request metadata (URL, status code, IP address, browser type) to help us diagnose and fix issues. Sentry data is retained for a short window and is not used for marketing.

Server logs. Our hosting provider records standard request logs (IP address, timestamp, URL, user-agent) for operational and security purposes.

What we do not collect. We do not request or store payment information, government identifiers, health information, biometric data, precise geolocation, or device contacts, camera, or photo access. We do not run accounts, logins, or order processing on this site.

How we use what we collect

We use the information described above to:

• Respond to inquiries submitted through the contact form and follow up on potential or active engagements.
• Prevent abuse of the contact form (rate limiting, spam detection).
• Understand which pages help visitors and which do not, when analytics consent is given.
• Diagnose technical errors and keep the site available and secure.
• Comply with legal obligations and respond to lawful requests.

We do not use your information for unrelated marketing. We do not sell or share personal information for cross-context behavioral advertising as those terms are defined in U.S. state privacy laws.

Legal bases (EEA / UK / Swiss residents). If you are in the European Economic Area, the United Kingdom, or Switzerland, our legal bases for processing are: (a) your consent, for analytics; (b) our legitimate interest in operating, securing, and improving the site, for server logs, error monitoring, rate limiting, and spam prevention; and (c) the pre-contractual or contractual steps you have asked us to take, for responding to contact-form inquiries.

Sub-processors we use

We rely on a small number of vendors to operate this website. Each one processes only the data necessary to perform its function and is bound by a data processing agreement or equivalent contractual safeguard.

• Vercel, Inc. Site hosting and request delivery. Receives standard request metadata.
• PostHog, Inc. Product analytics with consent gating. Receives page-view and interaction events when you accept the banner.
• Functional Software, Inc. (Sentry) Error monitoring. Receives technical error reports and limited request metadata.
• Resend, Inc. Transactional email delivery. Receives the contents of contact-form submissions so they can be delivered to our inbox. Resend does not send marketing email on our behalf.

Cookies and similar technologies

We use a small set of first-party cookies and matching browser storage entries. Non-essential cookies (PostHog analytics) are set only after you click Accept on the cookie banner. The full list, including names, purposes, and retention, is documented in our Cookie Policy. You can change your decision any time using the "Manage cookies" link in the footer.

Do Not Track and Global Privacy Control. If your browser sends a Do Not Track or Global Privacy Control signal, our consent banner defaults to keeping analytics off. You can override the signal per-site if you choose; we never override it silently.

How long we keep information

Contact-form submissions are retained in our business inbox under normal business email retention. Analytics data is retained according to PostHog's standard retention defaults. Error reports are retained for a short diagnostic window. Server logs are retained for a limited period for security and operational purposes. We delete or anonymize personal information when it is no longer needed for the purpose for which it was collected, unless a longer retention period is required by law.

International data transfers

Security Overview is based in the United States, and our sub-processors are primarily located in the United States. If you access the site from outside the United States, your information will be transferred to and processed in the United States. Where required by law, we rely on transfer mechanisms such as the EU Standard Contractual Clauses or, where applicable, the EU-U.S. Data Privacy Framework, to provide appropriate safeguards for international transfers.

Sharing and disclosure

We share personal information only with the sub-processors listed above, as required to operate the site, and as required by law. We may also disclose personal information when we believe in good faith that disclosure is necessary to comply with a legal obligation, enforce our terms, protect our rights and safety or those of others, or respond to a court order, subpoena, or similar lawful process. If Security Overview is involved in a merger, acquisition, or sale of substantially all of its assets, personal information may be transferred as part of that transaction, subject to standard confidentiality protections.

Your rights

You can ask us to access, correct, or delete the personal information we hold about you, or to limit how we use it. To make a request, email privacy@securityoverview.com. We may need to verify your identity before we can respond. We will reply within a reasonable period and in accordance with applicable law.

Additional rights for EEA, UK, and Swiss residents

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to: access your personal data; ask for correction; ask for deletion; restrict or object to processing; receive your data in a portable format; and withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal. You also have the right to lodge a complaint with your local supervisory authority. Security Overview is the controller for personal data collected through this website. We have not appointed an EU representative because our processing of EEA personal data through this site is occasional and low-risk.

Additional rights for California residents

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), gives you rights regarding your personal information. In the prior 12 months, we have collected the following categories of personal information from website visitors:

• Identifiers: name, email address, IP address, and online identifiers stored in cookies and browser storage.
• Commercial information: company name and stated reason for contact.
• Internet or other electronic network activity: page-view and interaction events captured by analytics when you give consent.

We collect this information directly from you and from your browser. We use it for the purposes described in "How we use what we collect" above. We share it only with the sub-processors listed above, who act as service providers under the CCPA.

We do not sell or share personal information as those terms are defined in the CCPA. We do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA without limitation.

California residents have the right to: know what personal information we collect and how we use it; request a copy of the specific pieces we hold; request correction of inaccurate information; request deletion; opt out of sale or sharing (which we do not do); limit the use of sensitive personal information; and not be discriminated against for exercising these rights. To exercise these rights, email privacy@securityoverview.com. You may also designate an authorized agent to make a request on your behalf, subject to verification.

Children

This site is intended for businesses and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, email privacy@securityoverview.com and we will delete it.

Security

We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, and loss. All traffic to securityoverview.com is encrypted in transit using TLS. No system is perfectly secure, and we cannot guarantee absolute security; we work to follow practices appropriate to the limited data we collect through this site.

Changes to this policy

This page will be updated when our practices change, when new regulations apply, or when we add tools that affect data collection. The "Last updated" date at the top of the page reflects the most recent change. Material changes will be highlighted on the site before they take effect.

Contact

Security Overview LLC
9375 E. Shea Blvd., Suite 100
Scottsdale, AZ 85260
privacy@securityoverview.com