HomePrivacy Policy
Legal

Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your information.

Effective: January 1, 2025
Last Updated: April 23, 2026

1. Introduction

Creative Cyber Management, LLC ("CCM," "we," "us," or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website creativecybermanagement.com or engage our cybersecurity services.

As a cybersecurity firm, we hold ourselves to the highest standards of data protection. We practice what we preach — your data is handled with the same care and rigor we recommend to our clients. Please read this policy carefully. If you disagree with its terms, please discontinue use of our Site.

2. Information We Collect

We collect information in the following ways:

Information You Provide Directly. When you contact us through our website, schedule a consultation, or engage our services, we may collect: your full name, business email address, phone number, company name, job title, and the content of any messages or inquiries you submit. We also collect information necessary to perform contracted cybersecurity services, which may include network topology details, system configurations, and employee information provided by client organizations.

Information Collected Automatically. When you visit our Site, we automatically collect certain technical information, including your IP address, browser type and version, operating system, referring URLs, pages visited, and time spent on pages. This information is collected through cookies and similar tracking technologies as described in our Cookie Policy.

Information from Third Parties. We may receive information about you from third-party sources such as Microsoft partner portals, professional networking platforms, or referral partners, which we combine with information we already hold about you.

3. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery. To provide, operate, maintain, and improve our cybersecurity services; to communicate with you about your engagement; to send appointment confirmations and service updates; and to respond to your inquiries and support requests.

Business Operations. To process transactions; to send administrative information such as changes to our terms, conditions, and policies; to protect against fraudulent, unauthorized, or illegal activity; and to maintain the security of our own systems and client data.

Marketing and Communications. With your consent where required by law, to send you information about our services, industry insights, blog articles, and cybersecurity news that may be of interest to you. You may opt out of marketing communications at any time by following the unsubscribe instructions in any email we send.

Legal Compliance. To comply with applicable laws and regulations, including responding to lawful requests from public authorities and law enforcement.

4. How We Share Your Information

CCM does not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

Service Providers. We may share your information with trusted third-party vendors who assist us in operating our website and delivering our services, such as cloud hosting providers, email service providers, and scheduling software. These vendors are contractually obligated to use your information only as directed by us and to maintain appropriate security measures.

Microsoft Partnership. As a certified Microsoft partner, certain service delivery activities may involve Microsoft platforms and tools. Information processed through Microsoft 365, Azure, or related services is subject to Microsoft's privacy practices in addition to our own.

Legal Requirements. We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

Business Transfers. In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction, subject to the same privacy protections.

5. Data Security

We implement industry-standard technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls and authentication requirements, regular security assessments of our own systems, employee training on data handling and security practices, and incident response procedures.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach affecting your information, we will notify you in accordance with applicable law.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically: contact inquiry data is retained for up to two (2) years; client engagement data is retained for seven (7) years following the conclusion of the engagement to comply with legal and regulatory requirements; and website analytics data is retained for up to twenty-six (26) months.

When your information is no longer needed, we will securely delete or anonymize it in accordance with our data retention procedures.

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information, including the right to access the personal information we hold about you; the right to request correction of inaccurate information; the right to request deletion of your personal information, subject to certain exceptions; the right to object to or restrict our processing of your information; and the right to data portability.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within thirty (30) days. We may need to verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights.

8. Children's Privacy

Our Site and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at [email protected] and we will take steps to delete such information from our records.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy on this page with an updated "Last Updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Team at:

Creative Cyber Management, LLC Email: [email protected] Website: creativecybermanagement.com

Questions about this document?

If you have any questions or concerns about this Privacy Policy, please contact us or email us directly at [email protected]. We are committed to transparency and will respond within 2 business days.