Introduction
Aletheia Security Consulting ("Company," "we," "us," or "our") operates ascgrc.com (the "Site"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our Site or engage with our services.
By using the Site, you agree to the collection and use of information as described in this Policy.
Information We Collect
2.1 Information You Provide Directly
- Name, email address, phone number, and company name submitted via contact or intake forms
- Mobile phone number when you opt in to receive SMS communications
- Project-related information you share during consultations or engagements
2.2 Automatically Collected Information
- IP address, browser type, referring URLs, and pages visited
- Cookies and similar tracking technologies (see Section 6)
2.3 Communications Data
- Records of your consent to receive SMS or email communications
- Opt-in and opt-out timestamps and confirmation
How We Use Your Information
We use the information we collect to:
- Respond to inquiries and deliver requested services
- Send SMS notifications, appointment reminders, project updates, and security advisory communications (only to users who have expressly opted in)
- Improve our Site and services
- Comply with legal obligations
- Detect and prevent fraudulent or unauthorized activity
SMS Communications and Mobile Data
4.1 Opt-In
We collect your mobile phone number only when you voluntarily provide it and expressly consent to receive SMS messages from us.
4.2 Use of Mobile Data
Your mobile phone number and SMS consent data are used solely to send you the communications you have consented to receive.
No Third-Party Sharing: Mobile opt-in information — including phone numbers and consent records — will not be shared with, sold to, or transferred to any third party for marketing or promotional use. This applies absolutely and without exception.
4.3 Opt-Out
You may withdraw consent at any time by replying STOP to any SMS message. Following opt-out, we will send one confirmation message and cease all further SMS contact unless you re-consent by replying START.
4.4 Retention
SMS consent records are retained for as long as necessary to comply with applicable regulations and to resolve disputes or enforce our agreements.
Data Security
We implement industry-appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. As a security consulting firm, we take the protection of data seriously and apply the same standards we recommend to our clients.
However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
Data Retention
We retain your personal information for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, it is securely deleted or anonymized.
Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal information (subject to legal retention requirements)
- Withdraw consent for communications at any time
- Lodge a complaint with a relevant data protection authority
To exercise any of these rights, contact us using the information in Section 11.
Children's Privacy
Our Site and services are not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.
Contact Information
For questions, requests, or concerns regarding this Privacy Policy or your personal data:
Aletheia Security Consulting
Email: contact@ascgrc.com
Website: ascgrc.com
Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted to this page with a revised effective date. Your continued use of the Site after changes are posted constitutes acceptance of the updated Policy.