Book a Discovery Call
Legal

Privacy Policy

How HCISS LLC collects, uses and protects personal information when you visit hciss.io, contact us or work with us. Last updated: November 2, 2026.

1. Who we are

HCISS LLC ("HCISS", "we", "us") is a cybersecurity company headquartered at 7043 South Constance Ave, Suite 3A, Chicago, Illinois 60649, United States. This policy explains how we handle personal information collected through hciss.io and related pages (the "Site"), our forms, email and discovery calls.

When we deliver services to a client, information we process inside the client's environment is governed by our agreement with that client, and the client controls that data. This policy covers information about visitors, prospects and business contacts.

2. Information we collect

Information you give us

  • Contact and interest forms: name, work email, phone number, organization, the topics or services you select, and your message.
  • Discovery calls and correspondence: details you share about your organization, AI tools, security posture and requirements.
  • Assessments: answers you provide in our AI Security Readiness self-assessment, and the results.
  • Newsletter or event sign-ups: your email address and preferences.

Information collected automatically

  • Technical data: IP address, browser type, device type, operating system and referring page.
  • Usage data: pages viewed, time on page and links clicked.
  • Security data: records used to protect our forms from abuse, such as submission timing and rate-limit counters.

3. How we use information

  • To respond to your enquiry, schedule calls and provide information you request.
  • To prepare proposals and deliver services under a contract.
  • To send updates about services or products you registered interest in. You can opt out at any time.
  • To operate, secure and improve the Site, including detecting spam and abuse.
  • To meet legal, regulatory, tax and accounting obligations.

We do not sell personal information, and we do not use it for cross-context behavioral advertising.

Where the GDPR or similar laws apply, we rely on: consent (for example, when you tick the consent box on our forms); contract (to take steps before or to perform an agreement with you); legitimate interests (to run and secure our business and respond to business enquiries); and legal obligation.

5. How we share information

  • Service providers who host the Site, deliver email, store files or support our operations, under contracts that limit their use of the data.
  • Professional advisers such as lawyers and accountants, under confidentiality duties.
  • Authorities where required by law or to protect rights, property or safety.
  • Business transfers as part of a merger, acquisition or sale of assets, subject to this policy.

6. Cookies and analytics

The Site uses cookies that are necessary for it to work and to keep forms secure. If we use analytics or similar tools, they help us understand how the Site is used. You can control cookies through your browser settings; blocking necessary cookies may affect how the Site works.

The Site loads fonts from Google Fonts, which receives your IP address when the fonts are requested. Embedded or linked content, such as YouTube and LinkedIn videos, is subject to those providers' privacy policies.

7. Retention

We keep enquiry and prospect information for as long as needed to respond and maintain the business relationship, typically no longer than three years after our last contact, unless a longer period is required by law or a contract. Client records are retained as set out in the relevant agreement.

8. Security

We apply administrative, technical and physical safeguards appropriate to the information we hold, including access controls, encryption in transit and least-privilege practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information; to object to or restrict certain processing; to withdraw consent; and to opt out of marketing. Residents of California and other US states with privacy laws may have additional rights, and we will not discriminate against you for exercising them.

To make a request, email info@hciss.io. We may need to verify your identity before responding. If you are in the EU or UK, you may also complain to your local data protection authority.

10. International transfers

HCISS is based in the United States, and information may be processed in the United States and other countries where our service providers operate. Where required, we use appropriate safeguards such as standard contractual clauses.

11. Children

The Site and our services are intended for businesses and professionals. We do not knowingly collect personal information from children under 16.

12. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it was last changed, and significant changes will be highlighted on the Site.

13. Contact us

HCISS LLC, 7043 South Constance Ave, Suite 3A, Chicago, IL 60649, United States
Email: info@hciss.io · Support: support@hciss.io

See also our Terms & Conditions.