Privacy Policy

1. Who We Are

Phylaxion Security LLC (“Phylaxion,” “we,” “us,” or “our”) is a cybersecurity advisory firm based in Denver, Colorado. We provide virtual CISO, security program leadership, and managed security services to small businesses. This Privacy Policy describes how we collect, use, disclose, and protect information obtained through our website at https://phylaxionsecurity.com(the “Site”).

2. Information We Collect

Information You Provide

We collect information you voluntarily provide when you:

• Submit a contact form (name, email, company, phone number, message)
• Request a consultation or security assessment
• Download a resource, guide, or template
• Subscribe to security advisories or updates
• Communicate with us via email

Information Collected Automatically

When you visit our Site, we may automatically collect:

• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referring website or source
• IP address (anonymized where possible)
• Device type and screen resolution

Information We Do Not Collect

We do not collect Social Security numbers, financial account information, health records, or any data classified as sensitive personal information under the Colorado Privacy Act unless explicitly required for a scoped engagement and covered by a separate data processing agreement.

3. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and consultation requests
• Deliver requested resources, guides, and security advisories
• Communicate about our services and your potential engagement
• Improve our website, content, and service delivery
• Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties. We do not use your information for automated decision-making or profiling.

4. How We Protect Your Information

As a cybersecurity firm, we apply the same security principles to our own operations that we advise our clients to implement. Your information is protected by:

• Encrypted transmission (TLS/HTTPS on all pages)
• Access controls limited to authorized personnel
• Secure cloud infrastructure with encryption at rest
• Regular review of data handling practices

No method of electronic transmission or storage is completely secure. While we take reasonable measures to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain contact form submissions and consultation requests for the duration of any active or prospective engagement, plus 24 months following the last interaction. Resource download records are retained for 12 months. You may request earlier deletion at any time.

6. Third-Party Services

Our Site may use the following categories of third-party services:

• Hosting and infrastructure: Amazon Web Services (AWS) for website hosting, data storage, and email delivery
• Analytics: Privacy-respecting analytics to understand site usage (no advertising trackers)
• Email: Transactional email services for form confirmations and security advisories

We do not use advertising networks, retargeting pixels, or social media tracking scripts on our Site.

7. Cookies

Our Site uses only essential cookies required for site functionality (e.g., session management). We do not use marketing cookies, advertising cookies, or third-party tracking cookies. No cookie consent banner is required because we do not use non-essential cookies.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of marketing communications
• Request a copy of your data in a portable format

Colorado Privacy Act

Colorado residents have additional rights under the Colorado Privacy Act (CPA), including the right to opt out of targeted advertising and the sale of personal data. We do not engage in either practice. To exercise any privacy right, contact us at [email protected].

9. Children’s Privacy

Our Site and services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Material changes will be communicated via our website or direct notification where appropriate.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

Phylaxion Security LLC
1500 N Grant St, Ste N, Denver, CO 80203
[email protected]