Legal

Privacy Statement

Effective Date: June 1, 2026 · Last Updated: June 2026

[01] Our Commitment

Cyber Control Group ("CCG," "we," "us," or "our") respects your privacy. This Privacy Statement explains how we collect, use, and protect personal information when you interact with our services, website, or communications.

As a cybersecurity advisory firm, privacy is not a compliance checkbox — it is foundational to how we operate.

[02] Information We Collect

We collect limited personal information necessary to provide our services and communicate with you:

Data Type	How Collected	Purpose
Name	Contact form, direct communication	To identify and address you
Email address	Contact form, direct communication	Business correspondence
Phone number	Contact form, intake, direct communication	SMS and voice communication related to your engagement
Company / organization	Intake forms, client onboarding	To contextualize advisory services
Assessment data	Client engagements (scoping, risk assessments)	To deliver contracted advisory services

[03] SMS & Phone Number Privacy

Phone numbers collected for SMS communication are used solely for direct business communications relevant to your inquiry or engagement with CCG.

CCG does not sell, rent, or share phone numbers with third parties. Phone numbers are never used for unsolicited marketing campaigns.

You may opt out of SMS messages at any time by replying STOP. For assistance, reply HELP or contact us directly.

[04] How We Use Your Information

Information collected is used exclusively for:

— Responding to inquiries and requests
— Delivering contracted advisory, compliance, or assessment services
— Scheduling and coordinating engagements
— Sending business-relevant communications via email or SMS
— Meeting legal or regulatory obligations

[05] Data Sharing & Third Parties

CCG does not sell or share personal information with third parties for marketing or commercial purposes. Information may be shared only in the following limited circumstances:

— With service providers who support our operations (e.g., email platforms, scheduling tools) under confidentiality obligations
— With delivery partners engaged to fulfill contracted services, under written agreement
— When required by law, regulation, or valid legal process

[06] Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this Statement or as required by applicable law. Client engagement data is retained in accordance with our record-keeping obligations under relevant cybersecurity frameworks.

[07] Your Rights

You may request access to, correction of, or deletion of your personal information at any time by contacting us at dan@cybercontrolgroup.com. We will respond to all verifiable requests within a reasonable timeframe.

[08] Contact

For privacy-related questions or requests, please contact:

Cyber Control Group
dan@cybercontrolgroup.com
cybercontrolgroup.com