**Last Updated: September 10, 2026**
ECR Security ("ECR Security," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you provide to us.
This Privacy Policy explains how ECR Security collects, uses, discloses, and protects information when you visit or use **[www.ecrsecurity.com](http://www.ecrsecurity.com)** (the "Website"), contact us, request information about our services, or otherwise interact with us.
By accessing or using the Website, you acknowledge the practices described in this Privacy Policy.
## 1. Information We Collect
We may collect information about you in several ways.
### Information You Provide Directly
When you contact ECR Security, request information, request a quotation, or otherwise communicate with us, we may collect information such as:
* Name
* Company name
* Job title or role
* Email address
* Telephone number
* Information contained in your communications with us
* Information you voluntarily provide concerning your organization's security requirements or services you are interested in
Please do not submit passwords, authentication credentials, private encryption keys, payment-card information, Social Security numbers, or other highly sensitive information through the Website's contact forms.
### Information Collected Automatically
When you visit the Website, certain information may be collected automatically by our web server, analytics tools, security tools, or similar technologies.
This information may include:
* IP address
* Browser type and version
* Operating system
* Device type
* Referring website or URL
* Pages visited
* Date and time of visits
* Time spent on pages
* Links or other elements with which you interact
* General information about how you use the Website
This information may be used for website administration, security, troubleshooting, analytics, and improving the Website and our services.
### Cookies and Similar Technologies
The Website may use cookies and similar technologies.
Cookies are small files stored on your device that allow a website to recognize your browser or remember certain information.
We may use cookies or similar technologies for purposes including:
* Essential Website functionality
* Website security
* Understanding Website usage
* Measuring Website performance
* Analyzing traffic and visitor behavior
* Improving the Website and user experience
You can generally control or delete cookies through your browser settings. Disabling certain cookies may affect the functionality of portions of the Website.
## 2. Analytics
We may use analytics technologies to understand how visitors use the Website and to identify technical or usability problems.
These technologies may collect information such as IP address, browser information, pages visited, referring pages, and interactions with the Website.
ECR Security may use **Matomo** or other analytics technology for this purpose. Where technically configured to do so, we may use privacy-enhancing features such as disabling cookies or anonymizing information.
Analytics information is used to understand Website traffic and performance and is not intended to identify individual visitors personally.
## 3. How We Use Personal Information
We may use the information we collect for legitimate business purposes, including:
* Responding to inquiries and requests
* Providing information about ECR Security and our services
* Preparing proposals and quotations
* Communicating with current and prospective customers
* Providing and performing contracted services
* Scheduling and managing engagements
* Improving our Website and services
* Understanding Website usage and performance
* Maintaining Website and information security
* Detecting, preventing, and investigating fraud, abuse, or unauthorized activity
* Complying with legal and regulatory obligations
* Establishing, exercising, or defending legal claims
* Sending business or marketing communications where permitted by applicable law
* Otherwise using information as reasonably necessary to operate our business
We will not use personal information for purposes materially different from those described in this Privacy Policy without providing appropriate notice or obtaining consent where required by applicable law.
## 4. Business and Marketing Communications
If you provide your contact information to ECR Security, we may use it to communicate with you regarding our services, your inquiry, an existing business relationship, or other business-related matters.
Where required by applicable law, we will obtain consent before sending marketing communications.
You may request that we stop sending you marketing communications at any time by following the unsubscribe instructions contained in the communication or by contacting us using the information provided below.
Please note that you may continue to receive transactional or service-related communications where necessary.
## 5. How We Share Information
ECR Security does not sell your personal information.
We may disclose personal information in the following circumstances:
### Service Providers
We may share information with third-party service providers that perform services on our behalf, such as:
* Website hosting providers
* Email and communications providers
* Analytics providers
* IT and security service providers
* Business software providers
* Professional advisors
These providers are permitted to use information only as reasonably necessary to provide services to ECR Security or as otherwise permitted by law.
### Legal Requirements
We may disclose information when we believe disclosure is reasonably necessary to:
* Comply with applicable law, regulation, legal process, or governmental request
* Protect the rights, property, or safety of ECR Security, our customers, or others
* Investigate fraud, security incidents, or other unlawful activity
* Enforce our agreements or policies
* Establish, exercise, or defend legal claims
### Business Transactions
If ECR Security is involved in a merger, acquisition, financing, sale of assets, reorganization, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law.
### With Your Consent
We may disclose information for other purposes when you have provided your consent or directed us to do so.
## 6. Information Related to Penetration Testing Services
ECR Security provides penetration testing and other offensive security services. In the course of providing these services, customers may provide ECR Security with information concerning their networks, systems, applications, employees, facilities, or other assets.
Information provided to ECR Security as part of a penetration-testing engagement is handled in accordance with the applicable agreement, statement of work, confidentiality obligations, and security requirements governing that engagement.
This Website Privacy Policy primarily addresses information collected through the Website and ordinary business communications. It does not replace contractual terms governing information that ECR Security processes on behalf of a customer during a security assessment.
Because penetration testing may involve access to sensitive technical information, ECR Security takes reasonable administrative, technical, and physical measures designed to protect customer information against unauthorized access, disclosure, alteration, or destruction.
## 7. Security
ECR Security maintains reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction.
However, no Internet transmission, electronic storage system, or security measure can be guaranteed to be completely secure.
Accordingly, while we work to protect information entrusted to us, we cannot guarantee the absolute security of information transmitted to or stored by us.
## 8. Data Retention
We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to:
* Provide services
* Maintain business and customer relationships
* Respond to inquiries
* Maintain appropriate business and financial records
* Comply with legal, accounting, and regulatory requirements
* Resolve disputes
* Establish, exercise, or defend legal claims
* Enforce our agreements
The length of time information is retained varies depending on the nature of the information and the purpose for which it was collected.
When information is no longer reasonably required, we may securely delete, destroy, anonymize, or otherwise dispose of it, subject to applicable legal and contractual requirements.
## 9. Your Privacy Rights
Depending on where you live and applicable law, you may have certain rights regarding your personal information.
These rights may include the right to:
* Request access to personal information we hold about you
* Request correction of inaccurate personal information
* Request deletion of personal information, subject to applicable exceptions
* Request information about how your personal information is collected or used
* Object to or restrict certain processing
* Withdraw consent where processing is based on consent
* Opt out of certain marketing communications
* Exercise other rights provided by applicable privacy laws
These rights vary by jurisdiction and may be subject to legal exceptions and limitations.
To make a privacy-related request, please contact us using the information provided in the **Contact Us** section below.
We may need to verify your identity before completing certain requests. We will use information provided for verification only as reasonably necessary to process the request and protect against unauthorized requests.
We will not discriminate against you for exercising privacy rights available to you under applicable law.
## 10. California Privacy Rights
If you are a California resident, you may have additional rights under applicable California privacy laws, including the California Consumer Privacy Act (CCPA), as amended.
Depending on the circumstances and applicable law, these rights may include the right to:
* Know about personal information collected about you
* Access certain personal information
* Request correction of inaccurate personal information
* Request deletion of personal information
* Opt out of the sale or sharing of personal information, where applicable
* Limit certain uses of sensitive personal information, where applicable
* Not receive discriminatory treatment for exercising applicable privacy rights
**ECR Security does not sell personal information.**
To exercise applicable California privacy rights, contact us using the information below.
We may request information necessary to verify your identity and may decline requests where permitted by applicable law.
## 11. European Economic Area, United Kingdom, and Other Jurisdictions
If you are located in the European Economic Area, United Kingdom, or another jurisdiction with comprehensive data-protection legislation, you may have additional rights under applicable law.
Depending on the applicable law and circumstances, these rights may include:
* Access to your personal data
* Correction of inaccurate personal data
* Erasure of personal data
* Restriction of processing
* Objection to processing
* Data portability
* Withdrawal of consent where processing is based on consent
* The right to lodge a complaint with a supervisory authority
Where applicable, we may rely on one or more lawful bases for processing personal data, including:
* Performance of a contract
* Compliance with a legal obligation
* Our legitimate interests, where those interests are not overridden by your rights
* Your consent
* Other lawful bases permitted by applicable law
Where we process information based on legitimate interests, those interests may include operating and securing our Website, communicating with prospective and existing customers, improving our services, preventing fraud and abuse, and protecting our business.
## 12. Children's Privacy
The Website is intended for a general business audience and is not directed toward children.
ECR Security does not knowingly collect personal information from children under the age required by applicable law.
If you believe that a child has provided personal information to us through the Website, please contact us. If we determine that we have collected such information without an appropriate legal basis, we will take reasonable steps to delete it.
## 13. Third-Party Websites
The Website may contain links to websites or services operated by third parties.
These websites operate independently from ECR Security and may have their own privacy policies and practices.
ECR Security is not responsible for the privacy practices, content, or security of third-party websites.
We encourage you to review the privacy policy of any third-party website before providing personal information.
## 14. Do Not Track
Some web browsers include a "Do Not Track" feature that signals to websites that you do not want your online activities tracked.
Because there is currently no universally accepted standard for responding to Do Not Track signals, ECR Security may not respond to such signals unless required by applicable law.
## 15. International Data Transfers
ECR Security is based in the United States.
Depending on your location and the services or technologies used by the Website, your personal information may be processed or stored in the United States or other countries.
Those countries may have data-protection laws that differ from the laws in your jurisdiction.
Where required by applicable law, ECR Security will implement appropriate safeguards for international transfers of personal information.
## 16. Changes to This Privacy Policy
ECR Security may update this Privacy Policy from time to time.
When we make changes, we will update the "Last Updated" date at the beginning of this Privacy Policy. Material changes may also be communicated through the Website or other appropriate means where required by law.
We encourage you to periodically review this Privacy Policy to remain informed about how we handle personal information.
## 17. Contact Us
If you have questions about this Privacy Policy, wish to exercise an applicable privacy right, or have a privacy-related concern, please contact ECR Security using the link below.
Contact Us
---
**Last Updated: September 10, 2026**