Privacy Policy

I

Collection of Your Personal Information

To better provide products and services, the Company may collect personally identifiable information that you voluntarily provide, such as:

• First and last name
• Email address
• Phone number
• Employer
• Service request scoping details

We do not collect personal information about you unless you voluntarily provide it to us. You may be required to provide certain personal information when you elect to use certain products or services. These activities may include registering for an account, entering a promotion sponsored by us or one of our partners, signing up for an offer, sending us an email, or submitting payment information when ordering products and services.

We use this information to communicate with you about the products or services you request. We may gather additional personal or non-personal information in the future.

II

Use of Your Personal Information

The Company collects and uses personal information to:

• Operate and deliver the services you request.
• Provide information, products, or services you request.
• Provide notices about your account.
• Carry out the Company's obligations and enforce rights arising from contracts between you and us, including for billing and collection.
• Notify you about changes to www.encompassinfosec.com or any products or services offered through it.
• Maintain the security of Company services and prevent fraud or misuse.
• Comply with applicable laws, regulations, legal processes, or governmental requests.
• Maintain internal records and administrative functions.
• Use information in another way described when you provide it, or for another purpose with your consent.

The Company may also use personally identifiable information to inform you of other products or services available from the Company and its affiliates.

III

Sharing Information with Third Parties

The Company may share data with trusted partners to perform statistical analysis, send email or postal mail, provide customer support, or arrange deliveries. These partners are prohibited from using personal information except to provide services to the Company and are required to maintain its confidentiality.

The Company may disclose personal information without notice if required by law or in the good-faith belief that disclosure is necessary to comply with legal process, protect and defend Company rights or property, or protect the personal safety of Company users or the public under exigent circumstances.

IV

Opt-Out of Disclosure to Third Parties

In connection with personal information we may disclose to a third party for a business purpose, you may have the right to know the categories of personal information disclosed and the purpose of the disclosure.

Under the California Consumer Privacy Act of 2018 (CCPA) and other applicable privacy and data protection laws, you may have the right to opt out of the sale or disclosure of your personal information. If you exercise an applicable right, we will refrain from selling or disclosing your personal information unless you later provide express authorization.

To submit an opt-out or privacy request, email hello@encompassinfosec.com.

V

Automatically Collected Information

The Company may automatically collect information about your computer hardware and software, including your IP address, browser type, domain names, access times, and referring website addresses. We use this information to operate and maintain service quality and to provide general statistics regarding use of the Company website.

VI

Security of Your Personal Information

The Company takes steps to secure personal information from unauthorized access, use, or disclosure, including use of the SSL protocol. When personal information, such as a credit card number, is transmitted to other websites, it is protected through encryption such as Secure Sockets Layer (SSL).

We strive to take appropriate security measures to protect against unauthorized access to or alteration of personal information. No transmission over the Internet or a wireless network can be guaranteed to be 100 percent secure. Security and privacy limitations inherent to the Internet may be beyond our control, and the security, integrity, and privacy of data exchanged through this site cannot be guaranteed.

VII

Right to Deletion

Subject to certain exceptions, after receiving a verifiable request, we will delete your personal information from our records and direct service providers to delete it from their records.

We may be unable to comply with a deletion request when the information is necessary to:

• Complete the transaction for which it was collected, provide a requested or reasonably anticipated good or service, fulfill a written warranty or product recall, or otherwise perform a contract with you.
• Detect security incidents or protect against malicious, deceptive, fraudulent, or illegal activity.
• Debug and repair errors that impair intended functionality.
• Exercise free speech or another right provided by law.
• Comply with the California Electronic Communications Privacy Act.
• Engage in qualifying public or peer-reviewed scientific, historical, or statistical research in the public interest with informed consent.
• Enable internal uses reasonably aligned with your expectations based on your relationship with us.
• Comply with an existing legal obligation.
• Otherwise use the information internally in a lawful manner compatible with the context in which you provided it.

VIII

Data Security and Breach Notification

The Company maintains reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, acquisition, disclosure, or use.

If a security incident involves personal information, the Company will promptly investigate and provide notice to affected individuals and, when required, applicable regulatory authorities in the manner and timeframes required by law.

IX

Children Under 13

The Company does not knowingly collect personally identifiable information from children under 13. If you are under 13, you must ask a parent or guardian for permission to use this platform.

X

Email Communications

The Company may contact you by email to provide announcements, promotional offers, alerts, confirmations, surveys, or other general communications. To stop receiving marketing or promotional communications, email hello@encompassinfosec.com.

XI

External Data Storage Sites

We may store your data on servers provided by third-party hosting vendors with whom we have contracted.

XII

Changes to This Policy

The Company may change this Policy when our services, data protection practices, or applicable laws change. When changes are significant, we may notify you through the primary email address associated with your account, a prominent website notice, or updated privacy information.

Continued use of the website or services after a modification constitutes acknowledgment of the change and agreement to be bound by the modified Policy.

XIII

Contact Information

Questions, comments, opt-out requests, and deletion requests regarding this Policy may be directed to:

Effective July 15, 2026