Privacy Policy

Effective Date: September 27, 2026

402InfoSec respects your privacy. This website is designed to be simple and privacy-conscious. We do not use server-side inquiry storage, advertising trackers, retargeting pixels, mailing list popups, or customer account systems on this website.

This Privacy Policy explains what information may be handled when you visit402infosec.com or contact us directly.

Information We Collect

The contact page publishes one email address, outreach@402infosec.com. When you email 402InfoSec, your message content travels through your email provider and ours: whatever you choose to send, such as your name, reply address, optional organization, and message. This website has no inquiry form, no message database, and no third-party contact widget, so nothing you write is stored by the site itself.

Please do not send sensitive information, passwords, confidential business records, legal documents, protected health information, financial account details, or incident evidence unless we have agreed on an appropriate secure communication method.

How We Use Information You Send

If you contact 402InfoSec by email, we may use the information you provide to:

• Respond to your inquiry
• Discuss potential services
• Schedule a conversation
• Maintain basic business records if a working relationship is established
• Protect against spam, abuse, fraud, or security issues

If the conversation does not lead to a working relationship, we generally intend to delete correspondence that is no longer needed.

Website Hosting, Logs, and Analytics

402infosec.com may be hosted and delivered through third-party infrastructure providers such as Cloudflare.

Hosting and security providers may automatically process limited technical information when the site is visited. This can include information such as IP address, browser type, device information, pages requested, timestamps, referring pages, security events, and similar technical data.

This type of information is generally used to deliver the website, improve performance, understand basic site traffic, troubleshoot errors, and protect the website from abuse or attacks.

402InfoSec does not use this information to identify individual visitors, build visitor profiles, sell personal information, or track users across unrelated websites.

Cloudflare Web Analytics may be enabled to measure page traffic and Web Vitals. If Cloudflare Zaraz is configured, this site may also record coarse interaction events such as a service or lane selection, a contact-address click, or a note opened. These events exclude names, email addresses, organization names, message content, phone numbers, full query strings, and full referrer URLs.

Bot Protection

The site has no submission endpoint to protect. Cloudflare may still apply general edge security to hosting traffic, which processes standard technical request data such as IP address and requested path for delivery and abuse prevention.

Cookies and Tracking

402InfoSec does not intentionally place advertising cookies, retargeting pixels, or cross-site tracking tools on this website.

If basic hosting or security services use limited technical mechanisms necessary to deliver, secure, or measure the website, those are used for operational purposes only.

Sharing Information

402InfoSec does not sell personal information.

We may share information only when reasonably necessary to:

• Respond to your request
• Use normal business tools and processors such as website hosting and email hosting
• Operate, secure, or maintain the website
• Comply with legal obligations
• Protect the rights, safety, or security of 402InfoSec, its users, or others

We do not maintain a public list of subprocessors because this website does not currently collect visitor submissions for storage, host user accounts, or process customer data through an online application. If that changes, this policy should be updated.

Data Retention

If you email 402InfoSec, we retain your message only as long as reasonably necessary for the purpose of the communication, business records, security, dispute prevention, or legal compliance.

If an inquiry does not lead to further discussion or a working relationship, we generally intend to delete correspondence that is no longer needed.

Security

We take reasonable steps to maintain a privacy-conscious website. However, email and internet communications are not always secure. Please avoid sending highly sensitive information by ordinary email unless we have agreed on a more appropriate method.

Children's Privacy

This website is not directed to children and is not intended to collect information from children.

Your Choices

You may contact us to request deletion of email correspondence or other information you previously provided. We will honor reasonable requests unless retention is needed for legitimate business, security, legal, or compliance purposes.

Changes to This Policy

402InfoSec may update this Privacy Policy from time to time, especially if the website later adds analytics tools, server-submitted forms, scheduling tools, payment processing, newsletters, client portals, or other interactive features.

The effective date above will be updated when material changes are made.