Defense Cybersecurity Group, Inc. ("DCG," "we," "us") operates this website at cybersecgru.com. This policy explains what we collect from visitors, why, who we share it with, and the rights you have over it. It covers this website only — it does not cover the Midwatch enclave or any service we run under a signed client agreement, which are governed by that agreement.
Please do not send Controlled Unclassified Information (CUI), export-controlled technical data, or other sensitive material through this website or by unencrypted email. If you need to share something sensitive while evaluating our services, contact us first and we will arrange an appropriate channel.
Consent
By using this website you consent to this policy. If you do not agree with it, please do not use the site.
Information we collect
Information you give us. The contact form on this site opens a message in your own email application, pre-addressed to us. When you send it, we receive an ordinary email containing what you chose to write — typically your name, email address, company, role, and a description of what you need help with. We also receive whatever you tell us by emailing or calling us directly, or when you request access to our CMMC self-assessment tool.
Information collected automatically. Standard technical information about each request: IP address, browser type and version, operating system, referring page, which pages you viewed, and the date and time.
How we use your information
- To respond to your enquiry, and to deliver the work if it becomes an engagement
- To operate, maintain and diagnose faults on the website
- To understand which content is useful, so we can improve it
- To identify organisations researching CMMC compliance, so our team can follow up
We do not sell personal information. We do not run advertising on this site, and there are no ad networks, ad servers, or advertising cookies on it.
Log files
This site follows the standard practice of using log files. These record visits, and the technical details listed above. The information is not linked to anything personally identifiable; it is used to analyse trends, administer the site, and gather demographic information in aggregate.
Analytics and site improvement
We use Hotjar to understand how visitors use this site — which sections get read, how far down a page people scroll, and where they lose interest. Hotjar does this with aggregated heatmaps and, in some cases, anonymised recordings of on-page activity such as mouse movement, scrolling and clicks. Recordings are configured to suppress the contents of form fields, and we do not use Hotjar to identify individual visitors. You can opt out of Hotjar across every site that uses it at hotjar.com/policies/do-not-track.
Business identification
We use Apollo to match visitor IP addresses against a database of publicly registered corporate networks. Where there is a match, this tells us that an organisation visited the site — for example, that a defense contractor in Ohio read an article about CUI scoping. It resolves only a portion of traffic. We use it so our team can follow up with organisations researching CMMC compliance.
Apollo's service is also capable of identifying individual visitors within the United States. We have not enabled person-level identification, and we will update this page before we do.
Cookies and similar technologies
The tools described above set cookies or use similar browser storage to recognise a returning browser and avoid double-counting the same visit. We do not use cookies to build advertising profiles.
You can block or delete cookies in your browser settings, and most browsers let you refuse them entirely. The site is built to work normally without them; you may simply be counted as a new visitor each time.
Fonts
This site loads its typefaces from Google Fonts. Because those files are served from Google's servers rather than ours, your browser makes a request to Google on each page load, and Google receives your IP address as part of that request. Google states that it does not use these requests to build advertising profiles. If you would rather this did not happen, blocking fonts.googleapis.com and fonts.gstatic.com in your browser will stop it — the site remains fully readable, in a fallback typeface.
Third-party privacy policies
This policy does not cover the practices of the third parties named above. Theirs are here:
- Hotjar privacy policy
- Apollo privacy policy
- Google privacy policy (Google Fonts)
We share information with these providers only to the extent they need it to provide their service, and with our hosting provider. We do not share your enquiry with anyone outside DCG. We may disclose information where legally required, or where necessary to protect our rights, our clients, or the security of our systems.
How long we keep it
Enquiries and correspondence are retained for as long as we have an active or prospective relationship with you, and afterwards where we need to for legal, contractual, or record-keeping reasons. Analytics data is retained according to each vendor's standard retention period.
Security
We apply the same practices to our own systems that we build for clients. That said, no method of transmitting information over the internet is completely secure, and email in particular is not. See the note at the top of this page about sensitive material.
Your CCPA privacy rights
If you are a California resident, you have the right to request:
- What categories of personal information we hold about you, and the specific pieces
- What categories of personal information we have disclosed, and to whom
- That we delete personal information we hold about you
- That we not sell your personal information — though note we do not sell personal information to anyone
We will not discriminate against you for exercising any of these rights. Make a request using the contact details below and we will respond within one month.
Your GDPR data protection rights
If you are in the United Kingdom or the European Economic Area, you have the right to:
- Access — ask for copies of the personal data we hold about you
- Rectification — ask us to correct anything inaccurate, or complete anything incomplete
- Erasure — ask us to delete your personal data
- Restrict processing — ask us to limit how we use it
- Object to processing — object to our use of it
- Data portability — ask us to transfer it to you or to another organisation
Make a request using the contact details below and we will respond within one month. There is no charge.
Children's information
This site is aimed at businesses in the Defense Industrial Base. It is not directed at children, we do not knowingly collect information from anyone under 13, and we have never knowingly done so. If you believe your child has provided information through this site, contact us and we will delete it promptly.
Changes to this policy
If we add or remove a tool that collects visitor information, we will update this page and change the date at the top. Material changes will be noted here rather than made silently.
Contact us
Questions about this policy, or a request under any of the rights above:
Defense Cybersecurity Group, Inc.
7901 4th St. N., STE 300
St. Petersburg, FL 33702
[email protected]
(727) 316-5720