Privacy Policy

1. Introduction

Apex Cyber Risk Advisory LLC (“Apex,” “we,” “us,” or “our”) is a United States-based cybersecurity advisory business. This Privacy Policy explains how we handle personal information when individuals visit our informational website, contact us by email, or communicate with us regarding our advisory services. It applies to these activities; separate contractual terms may govern information handled in client engagements.

2. Information We Collect

Information you provide directly. When you email us, we may receive your name, business email address, job title, organization, telephone number, message content, attachments, and other information you choose to share.

Website technical information. When you visit our website, our website infrastructure provider may process technical information such as IP address, browser or device details, request information, timestamps, and security-related events. The specific data collected depends on the website configuration and services in use.

Our website is informational and does not currently offer contact forms, user accounts, client portals, document uploads, or online payments.

3. How We Use Information

We use personal information as reasonably necessary to respond to inquiries; evaluate and discuss potential engagements; communicate with clients and professional contacts; provide and administer advisory services; maintain business records; operate, secure, and improve our website and communications; prevent abuse; and comply with applicable legal obligations. Where applicable law requires a particular legal basis, we process information on an appropriate basis, such as legitimate interests, performance of a contract, legal obligations, or consent.

4. Cookies, Analytics, and Website Technologies

Our website is hosted using a third-party website hosting and security service provider. This provider may process website traffic, technical information, and security-related data to support website delivery, performance, and protection against malicious activity.

We may use privacy-focused website analytics services to understand aggregate website traffic and performance. Some analytics services operate without analytics cookies or cross-site individual tracking. Whether analytics are active depends on the website configuration.

We do not currently use advertising or behavioral tracking cookies. Certain essential cookies or similar technologies may be used to support website security and functionality. If we introduce non-essential cookies or technologies requiring consent, we will provide appropriate notices and consent choices as required by applicable law. Visitors may also manage cookies through their browser settings.

5. Email Communications and Service Providers

Visitors may contact us at [email protected]. We use a third-party email service provider to receive, send, manage, and store business email communications. Correspondence may be handled by authorized Apex personnel using company email accounts. Our email and website hosting providers may process information on our behalf in connection with the services they provide, subject to their applicable terms and practices. We do not sell personal information.

6. Disclosure of Information

We may disclose information to service providers that support website hosting, email, security, and business operations; to professional advisers when reasonably necessary; to competent authorities when legally required; or in connection with a legitimate business reorganization or transaction, subject to applicable law. We may also disclose information with your direction or consent. We do not disclose personal information to third parties for their independent behavioral advertising purposes.

7. Retention

We retain personal information for as long as reasonably necessary to respond to inquiries, maintain business relationships, provide services, satisfy contractual or legal obligations, resolve disputes, and protect legitimate business interests. Business correspondence may be retained by our third-party email service provider and, where relevant, in authorized business records. Our website hosting and security provider may retain website technical or security information according to its services, configuration, and applicable retention practices.

Retention periods vary by information type and purpose. When information is no longer reasonably needed, we take appropriate steps to delete or anonymize information under our control, subject to legal requirements and technical limitations, including service-provider backup practices.

8. Information Security

We seek to apply reasonable administrative, technical, and organizational safeguards appropriate to the nature of information we handle. No internet transmission or electronic storage system can be guaranteed completely secure. Please avoid sending highly sensitive information through unsolicited email; where needed, appropriate information-sharing arrangements can be discussed directly.

9. International Visitors and Transfers

Apex is based in the United States and primarily serves U.S.-based organizations, although visitors and inquiries may originate from EMEA, APAC, or other regions. Information may be processed in the United States or other countries where our service providers operate. Where applicable data protection laws impose requirements for international processing or transfers, we will address those requirements as appropriate to the activity involved.

10. Your Privacy Rights

Depending on applicable law, you may have rights to request access to, correction of, or deletion of personal information, or to object to or restrict certain processing. You may submit a request to [email protected]. We may need to verify your identity and may decline or limit requests where permitted or required by law. We will respond in accordance with applicable legal requirements.

11. Marketing Communications

The website does not currently offer newsletter subscriptions or collect information through website-based marketing sign-up forms. Apex may communicate directly with clients, prospective clients, and professional contacts about its services and business opportunities, subject to applicable law. Recipients may request that promotional communications stop by emailing [email protected].

12. Children's Privacy

Our website and advisory services are intended for business and professional audiences, not children. We do not knowingly solicit personal information from children through the website. If you believe a child has provided personal information to us, please contact us so we can review the situation and take appropriate action.

13. External Websites

Our website may link to websites operated by third parties. Their privacy practices are governed by their own notices, and we encourage visitors to review those notices.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in our services, website features, data practices, or legal requirements. We will post the revised policy on our website and update its effective date. Additional notice will be provided where required by law.

15. Contact Us

For questions about this Privacy Policy or requests concerning personal information, contact:

Apex Cyber Risk Advisory LLC

Email: [email protected]

Illinois, United States