Privacy Policy

Effective date: April 16, 2026  |  Last updated: August 31, 2026

NetworkDefender Security LLC ("NetworkDefender Security," "we," "us," or "our") is committed to protecting the privacy of our website visitors and clients. This Privacy Policy explains how we collect, use, and safeguard your information when you visit networkdefendersecurity.com (the "Site").

1. Information We Collect

We collect information you voluntarily provide through our contact form:

If you subscribe directly to our email newsletter, we collect your email address and any other information requested by that signup form. If you request our cyber readiness checklist, we collect your name and email address and may collect your company name if you choose to provide it. These signups are optional and are not required to use any other part of the Site or to contact us. When you request the checklist, you also consent to receive ongoing cybersecurity guidance and occasional information about our services; you may unsubscribe at any time.

We also automatically collect limited technical and usage data through cookies and similar technologies, such as your IP address, browser and device type, pages viewed, and, if you arrived via a Google ad, click identifiers associated with that ad. See Section 2, Cookies and Tracking Technologies, for details.

2. Cookies and Tracking Technologies

Cookies are small text files stored on your device. We use the following categories of cookies:

A notice banner appears when you first visit the Site to inform you that these cookies are in use. Continuing to browse the Site after seeing that notice constitutes your acknowledgment of this Privacy Policy. Because these are non-essential cookies, you can prevent them from being set by adjusting your browser settings to block third-party cookies, or by using Google's own controls:

Blocking these cookies does not affect your ability to submit the contact form or use the rest of the Site. We do not use these cookies to identify you personally, and we do not receive your name, email, company name, or message content through them — that information reaches us only if you voluntarily submit a contact, newsletter, or checklist form.

3. How We Use Your Information and Legal Basis

Information submitted through our contact form is used solely to:

If you subscribe to our newsletter, we use your signup information to send you cybersecurity guidance, threat and compliance updates, and occasional information about our services. If you request the cyber readiness checklist, we also use your signup information to immediately email you a link to the checklist and, based on the consent stated on that form, to send the same types of ongoing cybersecurity and service emails. Every ongoing email includes an unsubscribe link, and you may opt out at any time. We do not use these subscriptions to build profiles about you, and unsubscribing does not affect any other dealings you have with us.

Information collected via analytics and advertising cookies is used solely to understand Site usage and measure ad campaign performance, as described above.

We will never sell, rent, or share your personal information with third parties for marketing purposes.

For visitors subject to the GDPR or UK GDPR, the legal basis for processing your contact form data is our legitimate interest in responding to business inquiries, and where applicable, your consent given by voluntarily submitting the form. The legal basis for processing your newsletter or checklist signup information is your consent, given when you submit the applicable signup form; this includes sending the checklist you requested and the ongoing emails disclosed on that form. You may withdraw that consent at any time using the unsubscribe link in any ongoing email, without affecting the lawfulness of processing carried out before withdrawal. The legal basis for our use of analytics and advertising cookies is your consent, indicated by continuing to browse the Site after the cookie notice is shown, or our legitimate interest in understanding and promoting our services where consent is not required under applicable law. You may withdraw consent or object to processing at any time by contacting us or adjusting your browser/Google account settings as described in Section 2.

4. Data Storage

Contact form submissions are processed by Cloudflare Workers and stored in a restricted Cloudflare D1 database in the United States. Data in transit is protected by HTTPS/TLS encryption, and access to the database is limited to authorized NetworkDefender Security personnel. Cookie and analytics data described in Section 2 is collected and stored by Google, not in our D1 database.

Newsletter and checklist subscriber information, which may include name, email address, and optional company name, is stored on servers operated by Kit (formerly ConvertKit), our email marketing provider, and not in our own database. Kit is a United States–based service, so if you sign up from outside the United States your subscriber information will be transferred to and stored in the United States. Access is limited to authorized NetworkDefender Security personnel through our Kit account.

If you request a downloadable cyber insurance readiness report, your name, business email, company, and summary readiness result are submitted to our Cloudflare Worker and then to GoHighLevel, our contact management provider. Individual checklist selections remain in your browser and are not sent to GoHighLevel. The PDF report is generated in your browser after the contact submission succeeds.

5. Data Retention

We retain contact form submissions for up to three (3) years from the date of your last contact with us. After that period, records are deleted unless a formal service engagement requires a longer retention period, in which case retention is governed by the applicable client agreement. You may request deletion of your data at any time before that period expires by contacting us. Retention of analytics and advertising cookie data is governed by Google's own retention settings; see the links in Section 2 to view or reset that data.

We retain newsletter and checklist subscriber information for as long as you remain subscribed. If you unsubscribe, your email address is removed from our active mailing list; Kit may retain a suppression record of the unsubscribe so that we do not email you again. You may request full deletion of your subscriber record at any time by contacting us.

Readiness report contact records in GoHighLevel are retained as needed to provide the requested report and follow up, subject to your right to request access or deletion using the contact details below.

6. Third-Party Services

We use the following third-party services, each of which may receive limited technical data (such as your IP address and browser information) as part of providing that service:

Please refer to Google's Privacy Policy for details on how Google handles data collected through its services, and to Kit's Privacy Policy for details on how Kit handles subscriber data.

7. Your Rights

You have the right to:

To exercise any of these rights, contact us at nick@networkdefendersecurity.com. We will respond to all verified requests within 30 days. If you are located in the EU or UK and believe we have not adequately addressed your request, you have the right to lodge a complaint with your local supervisory authority.

8. Security

All form submissions are transmitted over HTTPS/TLS. Database queries use prepared statements to prevent SQL injection. Access to stored data is restricted to authorized personnel only.

9. Changes to This Policy

We may update this Privacy Policy from time to time. All changes will be posted on this page with an updated "Last updated" date. For material changes, we will provide at least 14 days' notice before the changes take effect, either by posting a prominent notice on this Site or by emailing contacts who have previously submitted inquiries through our contact form.

10. Contact Us

If you have questions about this Privacy Policy, please contact us: