Privacy Policy
What this website collects, why, and what happens to it. Short, because this site does very little with your data.
Interim policy. This describes our current practices accurately and is under review by counsel. If anything here is unclear, or you want to know what we hold about you, email us at Services@CoreDefenseSG.com and a person will answer.
This policy covers the CoreDefense Security Group website. CoreDefense Security Group (“CoreDefense”, “we”, “us”) is based at 68 Harrison Avenue, Boston, MA.
Services we deliver under a signed client agreement are governed by that agreement, not by this page.
- 1. Information we collect
- 2. How we use it
- 3. Who we share it with
- 4. Cookies, analytics and tracking
- 5. How long we keep it
- 6. How we protect it
- 7. Your choices and rights
- 8. Links to other websites
- 9. Children's privacy
- 10. Where your data is processed
- 11. Changes to this policy
- 12. Contact us
1. Information we collect
The contact form is the only place this website collects personal information. There are no accounts, no logins and no payments on this site. If you never submit the form, we collect nothing about you beyond the standard server logs described below.
What the form asks for
| Information | Required |
|---|---|
| First and last name | Yes |
| Work email address | Yes |
| Company name | Yes |
| Phone number | Optional |
| Company size and area of interest | Optional |
| Your message (“What’s prompting the change?”) | Optional |
The message box is free text, so it may contain whatever you choose to tell us. Please do not send sensitive information — such as credentials, health information or payment details — through this form.
Technical information
When you submit the form we briefly read your IP address to limit how many submissions can be sent from one place, which is how we deter automated abuse. It is held in memory for less than an hour and is never written to a log, included in the email, or stored.
Our hosting provider keeps its own standard server logs, which include IP addresses, as every web host does.
2. How we use it
We use what you send us to:
- respond to your enquiry and arrange an assessment or call;
- keep a record of the conversation so we can follow up sensibly; and
- protect the form itself from spam and abuse.
We do not sell your information, share it for advertising, or add you to a marketing list from this form. If we ever want to send you marketing, we will ask first.
3. Who we share it with
We share the contents of your enquiry with service providers who help us operate the site, and with nobody else:
| Provider | What they receive and why |
|---|---|
| Microsoft (Microsoft 365) | Delivers your submission to us as email and stores it in our mailbox. This is where your enquiry actually lives. |
| Our hosting provider | Serves the website and runs the form endpoint. Your submission passes through their systems in transit; standard server logs include your IP address. |
We may also disclose information where the law requires it, or to establish or defend legal claims. If CoreDefense is ever involved in a merger or acquisition, information may transfer as part of that transaction.
We do not use data brokers, advertising networks, or email marketing platforms in connection with this website.
4. Cookies, analytics and tracking
This website sets no cookies and runs no analytics. Specifically, there is no Google Analytics, no advertising or retargeting pixel, no session replay or heat-mapping, no chat widget, and no third-party scripts of any kind. The site enforces a strict Content Security Policy that blocks them.
We store nothing in your browser’s local storage, and we do not track you across other websites. Because we do no tracking, there is nothing for a cookie banner to ask you about.
Some browsers send a “Do Not Track” signal. We do not track visitors in the first place, so there is nothing for us to change in response.
5. How long we keep it
Your enquiry is kept as email in our Microsoft 365 mailbox for as long as we need it to respond to you and manage the relationship that follows, and thereafter as our records and legal obligations require. The website itself keeps no copy — it has no database.
You can ask us to delete your enquiry at any time using the contact details below.
6. How we protect it
We are a network-security practice, and we hold this site to the standard we would expect of a client’s. Measures in place include:
- encryption in transit (HTTPS everywhere, with HSTS);
- a strict Content Security Policy, blocking third-party scripts;
- protections against clickjacking and content-type attacks;
- server-side validation of every submission, and rejection of submissions sent from other websites;
- rate limiting and a spam trap on the form;
- credentials held as server-side secrets, never exposed to the browser and never stored in our source code.
No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
7. Your choices and rights
You can ask us to give you a copy of what we hold about you, correct it, or delete it. Email Services@CoreDefenseSG.com and we will respond as promptly as we can.
The simplest control is the form itself: everything we hold from this website is what you chose to type into it.
Depending on where you live, you may have additional rights — for example under California, other US state privacy laws, or the UK/EU GDPR — including rights of access, correction, deletion, portability, and to object to certain processing. We honour these requests regardless of where you are. Tell us what you need and we will act on it.
8. Links to other websites
The Client Login link in our header takes you to a portal operated by ConnectWise, a third party. Once you leave this site, their privacy policy applies, not ours. We do not transmit anything about you to that portal when you follow the link.
9. Children’s privacy
This is a business-to-business website and is not directed to children. We do not knowingly collect personal information from anyone under 13. If you believe a child has sent us information, contact us and we will delete it.
10. Where your data is processed
CoreDefense operates from the United States, and our providers may process and store information in the United States and other countries. If you contact us from outside the US, your information will be transferred to the US, where data-protection laws may differ from those in your country. Submitting the form means you understand this.
11. Changes to this policy
We will update this page when our practices change, and revise the “last updated” date above. Changes we already expect to make: adding a confirmation email to people who contact us, and recording enquiries in our ConnectWise system rather than only as email.
12. Contact us
Questions about this policy, or about information we hold, can go to a person here:
- Email: Services@CoreDefenseSG.com
- Phone: (617) 657-9592
- Post: CoreDefense Security Group, 68 Harrison Avenue, Boston, MA
See also our Terms of Use.