Privacy Policy

CyberObsidian LLC, referred to here as CyberObsidian, I, me, or my, respects privacy and tries to collect only what is needed to operate this website, respond to inquiries, protect the site from abuse, and provide requested services.

This policy applies to the CyberObsidian website and contact form. Client services, managed security work, proposals, statements of work, and contracts may include additional privacy, confidentiality, security, or data-processing terms.

Information I collect

I may collect the following information when you use this website or contact CyberObsidian:

• Contact form information, such as name, company, phone number (optional), email address, and message content.
• Technical information needed to operate and protect the website, such as IP address, browser information, request metadata, timestamps, and bot-check results.
• Email delivery and communication records, such as messages sent through the contact form and replies to those messages.
• Information you choose to provide in a call, email, form submission, or other direct communication.

Information not to submit

Do not submit passwords, API keys, financial account numbers, protected health information, government ID numbers, confidential incident details, or other sensitive information through the public contact form. If sensitive information is needed for client work, I will use an appropriate channel or agreement for that purpose.

How I use information

I use information for the following purposes:

• To respond to your inquiry or request.
• To evaluate whether CyberObsidian can help with your security or IT needs.
• To operate, maintain, troubleshoot, and secure the website.
• To prevent spam, abuse, malicious submissions, and unauthorized activity.
• To keep business records, comply with legal obligations, enforce agreements, and protect legal rights.

Bot protection and email providers

The contact form uses Cloudflare Turnstile to help distinguish real users from automated abuse. Turnstile may process technical information such as IP address, browser and device signals, challenge results, and related metadata.

Contact form submissions are sent by email using Resend. Resend may process contact details, message content, email routing information, delivery metadata, and related technical information so the message can be delivered.

Sharing information

I do not sell personal information. I do not use contact form submissions for targeted advertising.

I may share information only as needed:

• With service providers that help operate the website, protect the form, host the site, or deliver email.
• With professional advisers, insurers, vendors, or contractors when reasonably necessary for business operations.
• To comply with law, legal process, court orders, subpoenas, or lawful government requests.
• To investigate, prevent, or respond to security incidents, fraud, abuse, or activity that may violate law or agreements.
• As part of a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction, subject to appropriate protections where applicable.

Retention

I keep personal information only as long as reasonably necessary for the purposes described in this policy, including responding to inquiries, maintaining business records, resolving disputes, enforcing agreements, improving security, and complying with legal obligations. Contact inquiries may be retained as business correspondence unless deletion is requested and retention is not required or permitted for a legitimate reason.

Security

I use reasonable administrative, technical, and organizational measures designed to protect personal information. No website, email system, or method of Internet transmission is completely secure, so I cannot guarantee absolute security.

Cookies and tracking

This site does not currently use advertising cookies or analytics cookies. Cloudflare Turnstile and hosting or security providers may use cookies, tokens, local storage, or similar technologies that are necessary for security, bot prevention, abuse prevention, routing, or website operation.

Children

This website is intended for business users and is not directed to children under 13. I do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact me and I will take reasonable steps to delete it.

Your privacy choices

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of personal information, and to opt out of certain processing. CyberObsidian does not sell personal information or process contact form submissions for targeted advertising.

To make a privacy request, use the contact formand include "Privacy Request" in your message. I may need to verify your identity before acting on a request. I may decline a request where permitted or required by law, such as when retention is needed for security, legal compliance, business records, dispute resolution, or legal claims.

State, national, and international users

CyberObsidian is based in Virginia, United States. If you access the site from outside the United States, you understand that information may be processed in the United States or other locations where service providers operate.

Changes to this policy

I may update this policy from time to time. The effective date above shows when it was last updated. Material changes will be posted on this page.

Contact

For privacy questions or requests, use the contact formand include “Privacy Request” in your message.