Privacy notice

What this assessment collects, why, and what choices you have.

Who is asking

This assessment is provided by CyberShield Advisory LLC, 116 Agnes Rd Ste 200, Knoxville, TN 37919.

Questions about this notice, the information held about you, or a request to correct or delete your information can be sent to privacy@cybershieldadvisory.com.

What is collected

The assessment collects the information you provide, together with a small amount of information needed to operate the assessment. This includes:

• Your email address.
• Your answers to the assessment questions.
• The size of your organisation.
• The domain of your email address, taken from the address itself. This may be used to distinguish an organisational address from a personal email account.
• Where the assessment link came from, if the link contains that information — for example, the name of an event, campaign, referral, or conversation.
• The date and time you submitted the assessment, including the version of the privacy or consent wording shown to you.

Limited technical information may also be processed automatically by the systems that deliver and protect the service, such as normal server or security logs. This information is not used to build a marketing profile about you.

What is not collected

The assessment does not connect to the systems you are assessing.

It does not ask for or accept passwords, credentials, security keys, or access to your environment.

The assessment page does not use third-party advertising or social-media tracking technologies. It loads nothing from any other site — no third-party analytics, no external fonts or scripts — and it sets no cookies.

There is no tracking pixel in the assessment report or in emails sent about it, and open or click tracking is not enabled in the service used to send them.

How use is measured

The service may keep aggregate counts showing how the assessment is used — for example, how many times an assessment page was loaded or how many assessments were submitted.

CyberShield Advisory may also measure how people use the assessment itself, such as whether an assessment was completed or a report was downloaded.

Where this measurement is designed to be anonymous or aggregate, it is not used to identify you or build a profile about you.

If measurement practices change in a way that materially changes how information about you is collected or used, this notice will be updated.

Why the information is used

Your assessment information is used to:

• process the assessment;
• generate your report;
• send the report to you;
• respond to questions or requests concerning the assessment.

The assessment will not create an assessment record unless you complete the required consent step and submit it.

Your assessment answers are not sold, rented, or provided to another organisation for that organisation's marketing.

Communications

Messages necessary to provide something you requested — such as delivering your assessment report or responding to you — may be treated separately from promotional or marketing communications.

If you opt out of promotional communications, that choice will be respected. It does not prevent CyberShield Advisory from sending a message that you specifically request, such as another assessment report.

Who else may process the information

CyberShield Advisory uses systems and service providers necessary to operate the assessment and deliver your report. These currently include or are expected to include:

• CyberShield Advisory's customer records system;
• Resend, the service used to send the email carrying your report;
• Railway, which hosts the assessment, its database, the customer records system, and the backups of both;
• Cloudflare, which controls and protects access to the customer records system; and
• the provider that operates CyberShield Advisory's own email, which handles any message you send to the address in this notice.

Service providers acting on behalf of CyberShield Advisory are not permitted to use your assessment information for their own marketing.

Your assessment answers are not sent to Microsoft or to vendors mentioned in the assessment questions merely because their products or services appear in a question.

How long information is kept

Assessment records are kept for 24 months from the date the assessment is completed. At the end of that period the record is deleted rather than archived.

You can delete your record yourself at any time before then. Every email we send you carries a link, and the page it opens offers both stopping the emails and deleting the record outright. It takes one click. You do not need an account, and nobody has to reply to you.

You can also ask by writing to privacy@cybershieldadvisory.com, if you would rather, or if you have not had an email from us.

When your record is deleted, your answers, your results and your email address go. One thing remains: an unreadable one-way fingerprint of your address. It is kept for a single purpose — so that nothing sent in future can reach you again — and it cannot be turned back into your address.

Deletion is otherwise subject to any information that must legitimately be retained for legal, security, backup, or recordkeeping purposes. Any information retained for those purposes will not be used for unrelated marketing.

Your choices

You may contact privacy@cybershieldadvisory.com to:

• ask what information is held about you;
• request a copy of it;
• ask for inaccurate information to be corrected;
• request deletion where applicable; or
• withdraw a consent or change a communication preference where applicable.

Every email carries an unsubscribe link. No email is sent without one. You never need to log in to use it.

Unsubscribing from promotional communications is different from asking for your assessment record to be deleted. Both are offered on the page that link opens, as separate choices, and you can make either one without the other.

What this assessment is not

This is a self-assessment. Your answers describe what you understand or believe to be configured in your organisation. They are not independently verified against your systems.

The assessment does not connect to those systems, test them, scan them, or inspect their configuration.

No credential is required to complete the assessment, and none should be provided.

Articles and guides

CyberShield Advisory publishes articles and guides on this site, and our emails may link to them. You can read them without giving your name or email address. Reading these pages sets no cookies, and they load nothing from any other site: no third-party analytics, advertising, fonts or scripts. When a page is viewed, or its link to an assessment is followed, the service records that the event happened, which page and version it involved, and the general source of the visit (for example, that it came from an email campaign). It does not record your IP address, your browser or device, the page you came from, or anything that identifies you. These records are used only to count how articles are used, for example how many times a guide was read or how often readers went on to an assessment. They are never linked to you. That includes after you take an assessment: what you read before then is not joined to your assessment record. Anonymous records are kept for two years and then deleted. Like any website, the systems that deliver and protect these pages may keep normal server and security logs, which are not used to build a profile about you.