This Privacy Policy explains how XNOR LLC ("XNOR," "we," "us," or "our") collects, uses, and shares information when you visit getcmmc.consulting (the "Site"), contact us, or respond to our advertising. By using the Site or submitting information to us, you agree to the practices described here.
Information We Collect
Information you provide. When you complete our contact form or a lead form in one of our advertisements, you may provide your name, email address, telephone number, company name, the CMMC level you're interested in, your timeline or current compliance status, and any details you include in a message. You don't need to provide this information to browse the Site, but we can't respond to an inquiry without it.
Information collected automatically. When you visit the Site, certain information is collected automatically, including your IP address, browser type, device information, pages viewed, referring URLs, and the dates and times of your visits. This is collected through analytics and advertising technologies described below.
Cookies & Tracking Technologies
We use the following services, which may set cookies or collect data on our behalf:
- Cloudflare Web Analytics — privacy-focused, aggregate traffic measurement that does not use cookies to track you across sites.
- Google Ads & conversion tracking — when you arrive from one of our ads, Google cookies and tags (gtag.js) help us measure conversions and the effectiveness of our advertising. These technologies are used for advertising and analytics purposes.
- Google Fonts — the Site loads fonts hosted by Google, which may receive your IP address as part of delivering them.
You can control or block cookies through your browser settings, and you can opt out of personalized Google advertising at Google Ads Settings.
How We Use Information
- To respond to your inquiries and provide the consulting services you request;
- To follow up about CMMC compliance, assessments, and related services;
- To measure and improve the performance of the Site and our advertising;
- To maintain the security and integrity of the Site; and
- To comply with legal obligations.
How We Share Information
We do not sell your personal information. We share information only as follows:
- Service providers — vendors that operate the Site and our forms on our behalf, including Formspree (contact form delivery), Google (advertising, lead forms, and analytics), and Cloudflare (hosting and analytics). These providers process your information only to provide services to us.
- Legal and safety — when required by law, regulation, legal process, or to protect the rights, property, or safety of XNOR, our clients, or others.
- Business transfers — in connection with a merger, acquisition, or sale of assets.
Note that the use of advertising cookies for cross-context behavioral advertising may be considered "sharing" under certain state privacy laws; see "Your Privacy Rights" below for how to opt out.
Third-Party Sites & Tools
The Site links to third-party resources, including our free NIST SP 800-171 compliance tracker hosted at app.getcmmc.consulting and credential verification pages. We are not responsible for the privacy practices of websites we don't control. Our free tracker stores your inputs locally in your own browser and does not transmit them to us; please review the privacy practices of any third-party tool you use.
Data Retention
We retain inquiry and lead information for as long as needed to respond to you, provide services, and meet our legal and business obligations, after which we delete or de-identify it. Leads collected through forms are subject to retention limits and are exported to our records.
Data Security
We use reasonable administrative, technical, and physical safeguards to protect the information we handle. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your Privacy Rights
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising. California residents have these rights under the CCPA/CPRA, and residents of other states may have similar rights. To exercise any of these rights, email us at neal@getcmmc.consulting. We will not discriminate against you for exercising your rights.
Our Site honors browser-based opt-out preference signals, such as the Global Privacy Control (GPC), where applicable.
Children's Privacy
The Site is intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, please contact us and we will delete it.
International Visitors
XNOR is based in the United States, and the Site is operated from the United States. If you access the Site from outside the U.S., your information will be processed in the United States, where data protection laws may differ from those in your jurisdiction.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be reflected on this page.
Contact Us
Questions about this Privacy Policy or our data practices? Contact:
XNOR LLC
Email: neal@getcmmc.consulting