Privacy Policy

Website Privacy and Cookie Policy

Privacy and Cookie Consent Policy

Effective Date: September 05, 2025

PRIVACY

1) Who We Are - Resilient Excellence Consulting LLC (“REC,” “we,” “us”) provides security awareness, GRC consulting, audit readiness, and related services. This Privacy Policy applies to our website at resilientexcellenceconsulting.com and our services.

2) Information We Collect

  • Contact & account data: name, email, phone, company, role, preferences.

  • Commercial & payment data: invoices and transaction info. Card data is handled by our payment processor; we do not store full PAN or CVV.

  • Technical data: IP address, device, browser, pages visited, cookies/SDKs/local storage.

  • Service data: documents and artifacts you share so we can perform assessments, training, or consulting.

  • Sensitive data: We avoid collecting sensitive categories unless necessary and with appropriate legal basis/consent.

3) Purposes & Lawful Bases - We use information to provide and secure the site/services, fulfill contracts, communicate with you, process payments, prevent fraud and abuse, meet legal obligations, and improve our offerings. Where GDPR applies, our lawful bases include contract, consent, legitimate interests, legal obligation, and—if applicable—explicit consent for special categories.

4) Cookies & Similar Technologies - We use strictly necessary cookies (no consent required in EU/UK) and, with consent where required, functional/analytics/advertising cookies. See our Cookie Policy and Cookie Preferences center to manage choices. We honor recognized opt-out signals required by certain state laws (e.g., Global Privacy Control).

5) Payment Processing & PCI DSS - Card payments are processed by our payment provider, which we require to maintain PCI DSS compliance. We do not store full card numbers or CVV on our systems.

6) Sharing & Disclosures - We share data with service providers (hosting, email, analytics, billing) under contract; in legal or safety circumstances; or as part of corporate transactions (with notice and required measures).

7) International Transfers - If we receive EEA/UK personal data, we use appropriate safeguards (e.g., EU Standard Contractual Clauses and the UK Addendum/IDTA) plus supplementary measures as appropriate.

8) Security - We employ administrative, technical, and physical safeguards (e.g., access controls, MFA, encryption in transit, least privilege, logging/monitoring). No method is 100% secure.

9) Retention - We retain personal information only as long as necessary for the purposes described and to meet legal, accounting, or reporting requirements, after which we delete or de‑identify it.

10) Your Rights

  • U.S. State Privacy: Depending on your state, you may have rights to access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale/share, and certain profiling. We provide an appeals process for denied requests.

  • Indiana: We align with the Indiana Consumer Data Protection Act standards and extend comparable rights to U.S. residents now where feasible.

  • California: We provide “Do Not Sell/Share” controls and honor Global Privacy Control (GPC) signals.

  • Colorado: We honor its recognized Universal Opt-Out Mechanism (currently including GPC).

  • EU/UK: GDPR rights include access, rectification, erasure, restriction, portability, objection, and withdrawal of consent without affecting prior processing.

Submit requests via admin@resilientexcellenceconsulting.com. We will verify your identity and respond within applicable timelines. You may appeal a denial at the same contact.

11) Children’s Privacy - Our site/services are not for children under 13; we do not knowingly collect children’s data. If we learn a child under 13 has provided data, we will delete it promptly.

12) Breach Notifications (Indiana & Other States) - If a qualifying breach occurs, we will notify affected individuals and regulators (including the Indiana Attorney General where applicable) without unreasonable delay and generally within 45 days, subject to law enforcement needs and applicable law.

13) Marketing Communications - You can unsubscribe from emails at any time. Marketing emails include our physical address and an opt-out (CAN-SPAM). If we use SMS/voice for marketing, we will obtain prior consent (TCPA).

COOKIES AND CONSENT

1) Overview - This Cookie Policy explains how REC uses cookies and similar technologies on resilientexcellenceconsulting.com. Read together with our Privacy Policy.

2) What Are Cookies?

Cookies are small files stored on your device. Similar technologies include pixels, tags, SDKs, and local storage; we treat them as “cookies” here.

3) Why We Use Them

  • Strictly Necessary: security, page load, forms, session management.

  • Functional/Preference: remember choices (e.g., language, region).

  • Analytics/Performance: measure usage to improve the site.

  • Advertising/Targeting: deliver/measure ads or build audiences (if used).

4) Consent & Legal Bases - In the EU/UK, we obtain prior consent for non-essential cookies. Strictly necessary cookies rely on our legitimate interests in operating a secure, functional site. You can withdraw or change consent any time in Cookie Preferences.

5) U.S. State Requirements & Signals - Certain analytics/advertising uses may be considered a “sale”/“share” or targeted advertising under state laws. We provide opt-out controls and honor recognized signals (e.g., Global Privacy Control; Colorado’s Universal Opt-Out Mechanism).

6) Your Choices

  • Cookie banner and Preferences: choose “Accept All,” “Reject All,” or granular categories.

  • Browser controls: block or delete cookies (site features may be affected).

  • Signals: where required, recognized signals automatically opt you out for that browser unless you re-consent.

7) Cookie Duration - Session cookies delete when you close your browser; persistent cookies remain until expiration or deletion. Durations vary from 24 hours to 24 months depending on the provider.

8) Third Parties - We may permit approved vendors to set cookies for analytics, content delivery, or ads. Vendors are bound by contract and applicable law.

Last Updated: September 05, 2025

Resilient Excellence Consulting LLC  •  9783 E. 116th St, PMB 1082, Fishers, IN 46037  •  admin@resilientexcellenceconsulting.com