Privacy Policy

Wisp Creation, a service of Fraley GRC Security Solutions, LLC, respects your privacy. This Privacy Policy explains what personal information I collect through this website, how I use it, and how I protect it.

I collect personal information only as needed to communicate with prospective clients, respond to inquiries, and run my business.

This policy covers this website and my initial contact with you. If you become a client, the engagement agreement we sign covers how I handle the information you share during the work.

When you submit the contact form on this website, I may collect:

• Name: To identify you and address my replies.
• Email address: To respond to your inquiry and communicate with you.
• Phone number: If you choose to provide one, to contact you about your inquiry.
• Message content: Any information you choose to include.

If you become a client, I will also ask how your firm handles information: the systems and software you use, your vendors, your policies, and how data moves through your business. I ask about categories of information, not the information itself.

Please do not send client names, Social Security numbers, tax returns, passwords or other client information through the form, by email or during an interview. I don’t need it, and I don’t want to hold it.

If you pay by an online payment service, that service handles your payment details. I receive confirmation of the payment, such as your name, the amount and the date, and I do not receive or store your card number.

My web server also keeps standard technical logs, such as IP address, browser type and the time of each request, which I use to keep the site secure and working.

I collect only what I need for business communication and related purposes.

I use the information you provide only for legitimate business purposes, including:

• Responding to inquiries and requests.
• Discussing whether a security risk assessment or WISP is a fit for your firm.
• Preparing agreements, invoices and the work itself for clients.
• Communicating with clients about their engagement.
• Keeping records of business communications and payments.
• Keeping this website and my systems secure.

I do not sell your personal information or give it to third parties for their own marketing. I do not use contact form submissions to build or sell marketing lists.

Information submitted through this website is stored on a privately managed server, hosted by a VPS provider that I rent and administer.

I take reasonable technical and organizational measures to protect personal information from unauthorized access, disclosure, alteration or destruction. These include access controls, server security settings and other appropriate safeguards. I deliver reports and plans to clients by encrypted email.

No method of electronic storage or transmission is completely secure, and I cannot guarantee absolute security.

I do not sell, rent or share your personal information with third parties for their own marketing or commercial purposes.

I may disclose information when necessary to:

• Operate and maintain this website, my email and my hosting.
• Process payments.
• Comply with applicable laws, regulations, legal processes or lawful requests.
• Protect my rights, security or property, or respond to a security incident.

Any access by service providers is limited to what is reasonably necessary for the services they provide, under applicable agreements and laws.

I keep personal information only as long as reasonably necessary to respond to inquiries, keep business and payment records, provide services, and meet legal obligations.

When information is no longer needed, I take reasonable steps to delete it or dispose of it securely, subject to any recordkeeping requirements.

Depending on where you live and the law that applies, you may have rights over your personal information, including the right to ask for access, correction or deletion.

To make a request, contact me using the details on this website. I may need to verify your identity before acting on certain requests.

This website may link to other websites. I am not responsible for the privacy practices or content of sites run by third parties.

If I use third-party services that collect or process personal information, such as email or payment services, their use of that information may also be governed by their own privacy policies and agreements.

If you have questions about this Privacy Policy or want to make a request about your personal information, please contact me through the contact form or the phone and email on this website.

Wisp Creation, a service of Fraley GRC Security Solutions, LLC Website: https://wispcreation.com/