1. Introduction

CMMC Assessment Agent ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our CMMC compliance assessment services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us, including:

• Name and contact information (email address, phone number)
• Company information and job title
• Assessment responses and compliance data
• Communication preferences

2.2 Automatically Collected Information

We automatically collect certain information when you visit our website:

• IP address and device information
• Browser type and version
• Pages visited and time spent
• Referring website
• Cookies and similar technologies

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide and maintain our CMMC assessment services
• Process and track assessment results
• Communicate with you about our services
• Improve our website and user experience
• Analyze usage patterns and trends
• Comply with legal obligations

4. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

• With your explicit consent
• To comply with legal requirements
• To protect our rights and safety
• With trusted service providers who assist in our operations

5. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

5.1 Types of Cookies We Use

• Essential Cookies: Required for basic website functionality
• Analytics Cookies: Help us understand how visitors use our site
• Marketing Cookies: Used for advertising and marketing purposes
• Preference Cookies: Remember your settings and preferences

5.2 Third-Party Services

We use the following third-party services:

• Google Analytics for website analytics
• Google Tag Manager for tracking management
• Facebook Pixel for advertising
• LinkedIn Insight Tag for business analytics
• Hotjar for user experience analysis
• Microsoft Clarity for website insights

6. Data Security

We implement appropriate security measures to protect your personal information:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication
• Secure data storage practices

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request a copy of your data in a portable format
• Objection: Object to processing of your data
• Withdrawal: Withdraw consent at any time

8. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data during such transfers.

10. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

13. GDPR Compliance

For users in the European Union, we comply with the General Data Protection Regulation (GDPR). You have additional rights under GDPR, including:

• Right to be informed about data processing
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision making

14. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to opt-out of the sale of personal information.