This Privacy Policy describes how Port Cyber Corporation (“we,” “us,” or “our”), headquartered in Texas, United States, with locations in Virginia and Maryland, collects, uses, shares, and protects your personal information when you visit our website at httpss://www.portcyber.com or engage with our services (“Services”), such as submitting inquiries or team applications. By using our Services, you consent to these practices. If you disagree, please do not use our Services. This policy complies with applicable U.S. privacy laws, including the Texas Data Privacy and Security Act (TDPSA), Virginia Consumer Data Protection Act (VCDPA), Maryland Online Data Privacy Act (MODPA), California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and similar state laws effective in 2025.

Key Definitions

• Personal Information: Data that identifies or relates to an individual, such as names or emails (aligned with definitions in TDPSA, VCDPA, MODPA, and CCPA/CPRA).
• Sensitive Personal Information: Categories such as racial origin, health data, or precise geolocation—we do not collect these, in compliance with MODPA’s strict prohibitions unless necessary.
• Services: Our website and related IT support interactions.
• Cookies: Small files for tracking browsing activity.

1. Information We Collect

We collect minimal data necessary for our MSP operations:

• Categories Provided by You: Identifiers (names, emails, phone numbers, mailing addresses) and professional information (job titles) from contact forms, service inquiries, or applications.
• Categories Automatically Collected: Internet activity (IP addresses, browser type, device characteristics, usage data like pages visited) via cookies or logs.
• No Sensitive Information Collected: We avoid processing sensitive data as defined under TDPSA, VCDPA, MODPA, or CCPA/CPRA.

2. Purposes for Processing Your Information

We process data based on consent, contractual necessity, or legitimate interests (e.g., security):

• To respond to inquiries and provide IT support.
• To send marketing communications (with opt-out options, including universal mechanisms under TDPSA by January 1, 2025).
• To analyze usage for Service improvements and fraud prevention.
• To comply with legal obligations under state laws.

3. Sharing Your Information

We share limited categories of data (identifiers and internet activity) with:

• Third-party service providers (e.g., hosting vendors, analytics tools such as Google Analytics) under contracts requiring data protection.
• In business transfers (e.g., mergers) or as required by law (e.g., subpoenas).
• Categories of Third Parties: Affiliates, vendors, and legal authorities. We do not sell personal information, engage in targeted advertising, or use data for automated profiling as defined in TDPSA, VCDPA, MODPA, or CCPA/CPRA.

4. Cookies and Tracking Technologies

We use cookies for essential functions (session management) and performance (analytics). You can manage via browser settings. No tracking for cross-site behavioral advertising, in line with MODPA’s consumer protections.

5. Data Retention

We retain identifiers for up to 2 years post-inquiry for support purposes, and internet activity logs for 1 year for security. Data is deleted or anonymized when no longer needed, unless required by law, promoting data minimization as per MODPA.

6. Data Security

We implement reasonable technical and organizational measures, including encryption, access controls, and regular audits, to protect data—aligned with NIST guidelines for MSPs. However, no transmission is 100% secure; use at your own risk.

7. Children’s Privacy

Our Services are not directed to children under 13 (or under 16 for certain processing under MODPA). We do not knowingly collect their data and comply with the Children’s Online Privacy Protection Act (COPPA). For residents under TDPSA, VCDPA, or MODPA, data from minors is treated with heightened protections, requiring parental consent where applicable (which we do not seek).

8. Your Privacy Rights

Depending on your state, you may have rights under laws like TDPSA, VCDPA, MODPA, CCPA/CPRA, etc.:

• Access and obtain a copy of your personal information.
• Correct inaccuracies.
• Delete data.
• Data portability.
• Opt out of sales (we do not sell), targeted advertising, or profiling (we do not engage). To exercise, email info@portcyber.com or call 1-703-795-1000. We verify identity and respond within 45 days (extendable). For denials, appeal via email within 60 days; we review and respond in 60 days. No discrimination for exercising rights. Texas, Virginia, and Maryland residents: Rights include data minimization and assessments for high-risk processing (none here).

CCPA/CPRA-Specific Rights (for California Residents)

• Categories Collected in Past 12 Months: Identifiers, professional info, internet activity.
• Sources: Directly from you or automatically.
• Business Purposes: As in Section 2.
• Sharing: As in Section 3; no sales.
• Shine the Light: We did not disclose for direct marketing in the prior year.
• Under 16: No knowing collection; opt-in required for sales (none occur).

9. International Data Transfers

If data is transferred outside the U.S. (e.g., to cloud providers), we ensure protections equivalent to U.S. standards via contracts.

10. Data Protection Assessments

For activities involving sensitive data or high risks (none currently), we conduct assessments as required by TDPSA, VCDPA, MODPA, and similar laws.

11. Updates to This Policy

We review periodically and update for legal changes. Material updates notified via email or website. Continued use constitutes acceptance.

12. Contact Us

For questions or rights exercises: Email: info@portcyber.com Phone: 1-703-795-1000

For appeals or complaints under TDPSA, VCDPA, or MODPA, please contact us above.