Privacy Policy

1. Overview

Ally Secure LLC ("Ally Secure," "we," "us," or "our") provides AI governance, cybersecurity, and digital trust advisory services. This Privacy Policy explains what information we collect through allysecure.com (the "Site"), how we use and share it, and the choices and rights available to you.

This policy applies to visitors of the Site and to prospective and existing clients interacting with us through the Site. It does not apply to information we may process on behalf of clients under a separate services agreement, which is governed by that agreement.

2. Information we collect

Information you provide directly

• Contact details you submit through forms, email, or scheduling links — such as name, work email, phone number, company, and job title.
• The content of messages you send us, including details you choose to share about your organization's AI governance or security posture.
• Responses you provide to the AI Governance Maturity Assessment. Assessment responses are processed in your browser to generate your results and are not required to include identifying information unless you choose to request a follow-up conversation.

Information collected automatically

• Device and usage data, such as browser type, general location derived from IP address, pages viewed, referring URLs, and timestamps.
• Cookies and similar technologies, described in Section 4, where you have consented to non-essential categories.

3. How we use information

• To respond to inquiries and schedule strategy sessions.
• To operate, secure, and improve the Site and its content.
• To understand aggregate trends in how the Site is used, where you have consented to analytics cookies.
• To comply with legal obligations and enforce our Terms of Use.

We do not use information submitted through the Site to make automated decisions that produce legal or similarly significant effects about you.

4. Cookies and tracking technologies

We use a small number of cookie categories, which you can manage at any time using the Cookie Settings link in the site footer:

Where required by applicable law, non-essential cookies are not set until you provide consent through the cookie banner or preferences panel. You can withdraw consent at any time, which will stop future non-essential cookies from being set; it does not affect the lawfulness of use before withdrawal.

5. How we share information

We do not sell personal information. We may share information with:

• Service providers who support hosting, scheduling, email delivery, and analytics on our behalf, under confidentiality and data protection terms.
• Professional advisors such as legal or accounting counsel, as needed.
• Authorities where disclosure is required to comply with law, protect rights, or respond to a valid legal process.
• A successor entity in connection with a merger, acquisition, or sale of assets, subject to this policy or a materially similar one.

6. Data retention

We retain contact and inquiry information for as long as needed to respond to your request, maintain our client relationship, and meet legal, accounting, or reporting obligations, after which it is deleted or anonymized.

7. Your rights under GDPR / UK GDPR

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data, subject to legal exceptions.
• Restrict or object to certain processing, including for direct marketing.
• Request portability of data you provided to us.
• Lodge a complaint with your local data protection supervisory authority.

Where we rely on consent (for example, for analytics or marketing cookies), you may withdraw that consent at any time without affecting processing that occurred before withdrawal.

8. Your rights under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose.
• Delete personal information we hold about you, subject to certain exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information — Ally Secure does not sell or share personal information for cross-context behavioral advertising.
• Limit use of sensitive personal information, to the extent we collect any.
• Exercise these rights without facing discrimination for doing so.

You may submit a request through the contact details below, or designate an authorized agent to do so on your behalf. We may need to verify your identity before fulfilling certain requests.

9. Other U.S. state privacy rights

Residents of states with comprehensive privacy laws currently in effect (including Virginia, Colorado, Connecticut, Utah, and others) may have rights similar to those described above, such as the right to access, correct, delete, and obtain a portable copy of personal data, and to opt out of certain processing. You may exercise these rights using the contact details in Section 14.

10. International data transfers

We are based in the United States. If you access the Site from outside the United States, your information may be transferred to, stored, and processed in the United States or other jurisdictions with data protection laws that may differ from those of your home jurisdiction. Where required, we use appropriate safeguards for such transfers.

11. Data security

We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children's privacy

The Site is directed at business professionals and is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can address it.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Site after changes take effect constitutes acceptance of the revised policy.

14. Contact us

For questions about this Privacy Policy or to exercise your privacy rights, contact us at privacy@allysecure.com.