Privacy Policy

Information We Collect

Contact details you submit: first and last name, business name, email address, and optionally phone number and website.

Security-company profile details: state, active guard range, supervisor count, client-site range, services offered, and office or administrative staff count.

Assessment data: your answers to the 40 questions, the scores derived from them, and activity such as when you completed the assessment, downloaded the report or clicked to book a call.

How We Use Information

To generate your score, report and action plan, and to keep your assessment resumable through your private link.

To contact you about your results and our services, where you have consented to that contact.

To improve aggregated, de-identified insights across security-company sizes and service types.

How We Share Information

We do not sell your information. We share it only with service providers who host and operate this platform on our behalf, and where we are legally required to do so.

Your Private Link

Your assessment is reachable through a unique, unguessable link. Anyone who has that link can view and continue that assessment, so treat it as confidential and avoid posting it publicly.

Your Choices and Rights

Depending on where you live, you may have rights to request access to, correction of, or deletion of your personal information, or to object to or limit certain uses of it.

You can also ask us to stop contacting you about our services at any time.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Assessment records are retained for a defined retention period that runs from the date the assessment is completed. We may retain certain information for longer where necessary to comply with legal or regulatory obligations, enforce agreements, resolve disputes, prevent fraud or abuse, maintain security records, or protect the rights of the business or others.

In practice, assessment data is kept until the earliest of: the retention period expiring, a verified deletion request being completed, or the related record being closed and any applicable retention requirement expiring — except where one of the reasons above requires longer retention.

When information is no longer required, we delete it or irreversibly anonymize it in accordance with our data-retention procedures.

Assessment Data

TechReady360™ assessment responses, scores, recommendations and the related record identifiers are retained for a defined retention period that runs from the date the assessment is completed, unless the information is deleted earlier following a verified request or must be retained longer for an applicable legal or operational reason.

Deleting your assessment records may remove your previous results, your report and any historical comparison with earlier assessments.

Contact and Account Information

Contact information you submit through our forms is retained for the duration of the business relationship and for a defined period afterward, subject to applicable legal requirements and to deletion requests.

Where an account exists, account information is retained while the account remains active and for a defined period after it is closed, where that is necessary for security, recordkeeping, dispute resolution or legal obligations.

Not all categories of information carry the same retention period.

Anonymized Information

We may retain information that has been irreversibly anonymized so that it can no longer reasonably be linked to an individual or business. Anonymized information may be used for analytics, benchmarking, product improvement and research.

We do not treat a record as anonymized if it could still reasonably be re-identified.

Requesting Deletion or Anonymization

Depending on applicable law, you may request deletion of personal information associated with your assessment or account.

Contact us through the details published on TechHealthcheck.com using the subject line “Privacy Request — Deletion”.

We may request reasonable information to verify the identity or authority of the person making the request before we process it. We do not ask for more information than we need for that check.

Where appropriate, we may satisfy a deletion request by irreversibly anonymizing information so it can no longer reasonably be associated with you.

We process verified deletion requests according to our privacy-request procedures and applicable law. We may retain limited information after a deletion request where retention is required or permitted for legal, regulatory, fraud-prevention, security, contractual, accounting, or dispute-resolution purposes, including where records are subject to a legal hold.

How We Handle Privacy Requests

Our process is: (1) we receive the request; (2) we verify identity or authority where necessary; (3) we identify the applicable records; (4) we delete or anonymize them; (5) we confirm completion to you.

We aim to acknowledge privacy requests promptly after we receive them and to complete verified requests within the timeframe required by applicable law, including any permitted extension. We will tell you if we need more time.

Backups, Logs and Analytics

Deleted information may remain temporarily in secure backup systems until those backups are overwritten. Backup copies are overwritten on our normal backup-retention schedule.

Certain security, audit and fraud-prevention records may be retained separately where necessary to protect the service and investigate misuse. Security, audit and fraud-prevention records are kept separately for a limited period.

Aggregated or anonymized analytics may be retained longer, because they no longer identify an individual user.

Contact Us About Privacy

If you have questions about this Privacy Policy, your personal information, or a privacy-related request, contact us.

You can reach us through the contact details published on TechHealthcheck.com. When you write to us, use the subject line “Privacy Request” so we can route it correctly.

Responsible entity: the operator of TechHealthcheck.com.