Before the Breach/Privacy

Privacy Policy.

How Before the Breach handles information on this website. Plain language, minimal data, and a commitment to keep what you share private.

Effective 27 June 2026

This policy explains what information Before the Breach collects through this website, how we use it, and the choices you have. It covers this public website. Work performed during an engagement is governed by the agreement we sign with you.

Who we are

Before the Breach, LLC is a United States cybersecurity firm. You can reach us at 844.385.1977 or through the contact form on this site.

Information we collect

  • Information you give us: when you submit the contact form, we collect the name, work email, organization (optional), and message you provide.
  • Technical information: our web server records standard request logs, including IP address, date and time, the page requested, and browser user agent, to operate and secure the site.
  • Your theme choice (light or dark) is stored locally in your browser and is never sent to us.

Privacy by default

  • This website runs without advertising cookies, third-party analytics, or tracking pixels.
  • We keep the information you share private and use it only to respond to you.
  • We keep personal information to ourselves and our processors, and we never sell or rent it.

How we use information

We use the information you submit to respond to your inquiry, understand your needs, and prepare a candid read and a short plan. We use server logs to operate, secure, and improve the site.

How the contact form is processed

Form submissions are delivered through Formspree, a third-party form processing service, and then to our email. Formspree processes each submission to deliver it and to filter spam. Their handling of that data is governed by their own privacy terms.

Client portal and engagement data

The client portal shown on this site is a preview. When a portal is provisioned for an active engagement, access and any engagement data are governed by the agreement between you and Before the Breach, and by the security controls we set up for that engagement.

Data retention

We keep contact inquiries for as long as we need them to respond and to maintain our business records, then we remove them. Server logs are retained for a limited period for security and operations.

Security

This site is served over HTTPS with a strict content security policy and standard hardening on our infrastructure. Transmission over the internet still carries risk, so please keep your first message high level. Leave out passwords, credentials, and regulated data, and we will set up a secure channel before any of that is shared.

Your choices and rights

You may ask us to access, correct, or delete the personal information you have submitted. Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA. To make a request, contact us using the details below and we will respond.

Children

This site is intended for businesses and is not directed to children.

Changes to this policy

We may update this policy as our practices evolve. The effective date above reflects the latest version.

Contact