Effective Date: August 1, 2026
Last Updated: September 11, 2026
Priviscopes ("we," "us," or "our") respects your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information when you visit priviscopes.com, use our assessment tools, submit enquiry forms, or engage our advisory services.
1. Information We Collect
We may collect: name, email address, company name, phone number, job title, and information you provide in enquiry forms, assessment submissions, and communications with us. We also collect technical data such as IP address, browser type, and usage data through cookies and analytics tools.
2. How We Use Information
We use personal information to respond to enquiries, deliver services, send relevant communications, improve our website, comply with legal obligations, and protect our rights.
3. Legal Bases for Processing
Where applicable, we process personal data based on consent, contractual necessity, legitimate interests, or legal obligation.
4. Sharing of Information
We do not sell personal information. We may share data with service providers who assist our operations, subject to confidentiality obligations, or when required by law.
5. Data Retention
We retain personal information only as long as necessary for the purposes described in this policy or as required by law.
6. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data, and to data portability. Contact us using the details in Section 15 to exercise these rights.
7. Cookies
We use cookies and similar technologies to improve site functionality and analyze traffic. You may control cookies through your browser settings.
8. Third-Party Links
Our site may link to third-party websites. We are not responsible for their privacy practices.
9. Security
We implement reasonable administrative, technical, and organizational measures to protect personal information.
10. International Transfers
If we transfer personal data internationally, we implement appropriate safeguards consistent with applicable law.
11. Children's Privacy
Our services are not directed to individuals under 16, and we do not knowingly collect their data.
12. Changes to This Policy
We may update this Privacy Policy periodically. The Last Updated date above reflects the most recent revision.
13. California Privacy Rights
California residents may have additional rights under the CCPA/CPRA, including the right to know, delete, and opt out of certain sharing.
14. EU/UK Data Subjects
Where GDPR or UK GDPR applies, you may lodge a complaint with your local supervisory authority.
15. Contact Us
For privacy-related questions, data subject requests, or to exercise your rights, contact us at:
Email: support@priviscopes.com
Phone: 301-256-6900
Mail: Priviscopes, Washington, DC, USA
16. Data Processed on Behalf of Clients
When Priviscopes provides AI implementation, agent development, CMMC/FedRAMP readiness, or SOC 1/SOC 2/SOX/PCI DSS readiness services, we may process data on behalf of our clients — for example, call or chat data collected through an AI agent built for a client's business, federal compliance materials such as System Security Plans reviewed as part of CMMC/FedRAMP readiness work, or control documentation and evidence reviewed as part of SOC 1/SOC 2/SOX/PCI DSS readiness work. That processing is governed by a separate agreement with the client, not by this Privacy Policy, which addresses only personal information collected through priviscopes.com.
17. Canadian Privacy Rights (PIPEDA)
Canadian residents have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including the right to access, correct, and request deletion of personal information we hold about you, and to know how your information has been used or disclosed. Contact us using the details in Section 15 to exercise these rights.
18. Nigerian Privacy Rights (NDPA)
Nigerian residents have rights under the Nigeria Data Protection Act 2023 (NDPA), including the right to access, correct, and request deletion of personal information we hold about you, to be informed of the purpose of processing, and to lodge a complaint with the Nigeria Data Protection Commission. Contact us using the details in Section 15 to exercise these rights.
19. Marketing Consent (CASL / PECR / NDPA)
For visitors in Canada, marketing communications (including the Regulatory Alerts newsletter) are sent only with your express opt-in consent, as required under Canada's Anti-Spam Legislation (CASL). For visitors in the UK, marketing communications are sent in accordance with the Privacy and Electronic Communications Regulations (PECR). For visitors in Nigeria, marketing communications are sent in accordance with the NDPA's consent requirements. Every marketing email includes a clear unsubscribe option.
Unsubscribe requests are honored within 10 business days, and unsubscribed addresses are held on a suppression list so they are not re-added by a future import, campaign, or manual add. Unsubscribing from marketing email does not stop transactional messages you are still entitled to — such as your own assessment results or a reply to a contact form you submitted.