ANNOUNCEMENT: Remediate Risks Faster with Contextualized, Trusted, and Actionable AI Monitoring.

Fortress Information Security Privacy Policy

This Privacy Policy was last updated on June 20, 2024.

 

Table of Contents

 

 

 

 

Introduction


Fortress Information Security LLC and its subsidiaries, divisions, and affiliates (collectively, “we,” “us,” or “Fortress”) want you to be familiar with how we collect, use, and disclose the information you provide to us. Accordingly, we have developed this Privacy Policy (the “Policy”) so that you can make educated and informed decisions about the personal information that you entrust to us by utilizing our website, https://www.fortressinfosec.com/ (the “Site”) or any other platform on which this Policy is posted or linked (collectively, the “Service”).

Your use of this Service is governed by and conditioned upon your agreement to this Policy and our Terms of Use, regardless of how you access the Service (including but not limited to through the Internet, through a mobile network, or in any other manner). By using the Service, you are agreeing to the terms in this Policy and our Terms of Use, both on your behalf, and on behalf of the company, government agency, or juridical entity that you are affiliated or associated with, and you represent and warrant that you have the authority to bind such entity to this Policy and our Terms of Use. If you do not have such authority, or if you do not agree to this Policy or our Terms of Use, you are not allowed to use the Service.

This Privacy Policy is written in the English language. We do not guarantee the accuracy of any translated versions. To the extent any translated versions conflict with the English language version, the English language version shall control.

PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND HOW WE HANDLE YOUR INFORMATION. BY USING THE SERVICES, YOU ACKNOWLEDGE YOU HAVE READ AND UNDERSTAND THE PRIVACY POLICY AND THAT WE WILL COLLECT, USE, AND SHARE YOUR INFORMATION AS SET FORTH BELOW.

 

 

 

Children’s Privacy: No Users Under Eighteen Years of Age


The Service is not targeted for use by children. We will never knowingly request or collect personal information from any child. If you are under eighteen years old, please do not provide your information through our Service. Upon notification that a child has provided us with personally identifiable information, we will delete the child’s personally identifiable information from our records. If you believe we might have any information from a child, please contact us at Privacy@FortressInfoSec.com.

In addition, if you are a California resident under the age of eighteen, while we do not allow users under the age of eighteen and you should notify us so we may delete your information, specifically, you may request us to remove content or information posted on our websites or stored on our servers by (a) submitting a request in writing to Privacy@FortressInfoSec.com, and (b) clearly identifying the content or information you wish to have removed and providing sufficient information to allow us to locate the content or information to be removed. However, please note that we are not required to erase or otherwise eliminate content or information if (i) other state or federal laws require us or a third party to maintain the content or information; (ii) the content or information was posted, stored, or republished by another user; (iii) the content or information is anonymized so that the minor cannot be individually identified; (iv) the minor does not follow the instructions posted herein on how to request removal of such content or information; or (v) the minor has received compensation or other consideration for providing the content. Further, nothing in this provision shall be construed to limit the authority of a law enforcement agency to obtain such content or information.

 

 

 

Collection of Personal Information


Information you provide to us

Fortress will collect personal information from you directly when you apply to use any of the Service, interact with our Service, contact us for any reason, use our Service, or retain our Service.

Information we obtain indirectly

We may receive personal information about you from information provided to us by our customers as well as third-party affiliates or partners and from marketing companies that provide us with such information as a part of their relationship with us.

We may combine this with information that we already have collected about you. Such collected information could include contact details (such as email address) and previous purchase history or interests.

Information collected automatically

When you use our Service, we collect certain information about you automatically through our use of cookies (more information about our use of cookies follows later in this Privacy Policy) and similar technologies such as standard internet log information and usage information, including your IP address, browser type and language, access times, location, usage data, and referring website addresses.

 

 

 

Categories of Personal Information Collected and Purpose for Collection


We may collect the following categories of personal information: (1) contact information including your name, email address, street address, city, state, zip code, and telephone number; (2) authentication information, including the username and password that you use to register an account; (3) device and usage information and online behavior information, such as your IP address, mobile network information, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, general geolocation, information about how and when you use our Service, and other technical information, including online activity, preferences, and time spent viewing features; (4) comments, reviews, and suggestions; and (5) personal preferences including product preferences, online preferences, and interests.

We use HotJar, Hubspot, and BrandGen for analytics, marketing, customer services, and content management. We also use Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies to help us analyze how users use the website and enhance your experience when you use the Service. For more information on how Google uses this information, click here.

If you are a job applicant, employee, owner, director, officer, or contractor of Fortress (individually referenced in this Policy as “employee” and collectively referenced as “employees”), we further collect educational, professional, and employment-related information, which may include certain sensitive personal information. Specifically, we collect information such as your Social Security Number, driver’s license number or state ID card number, passport number, and other unique personal identifiers associated with you or other beneficiaries such as your spouse or child; employment and education history, professional licenses, marital or domestic partner status, date of birth, age, gender, classifications protected under state or federal Equal Employment Opportunity laws (such as race or national origin), medical condition or information, and health insurance information and policy number; precise geolocation history, including badge access and telematics data; and financial information, including bank account, billing address, and information about your income and account balances. Note, while prospective employees may apply for jobs on this Site, we do not collect sensitive personal information on the Site for employment purposes.

Unless you are an employee, or as otherwise stated in a separate agreement, Fortress does not collect sensitive personal information such as your social security, driver’s license, state identification card, or passport number; your account login, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; your racial or ethnic origin, religious or philosophical beliefs, or union membership; the contents of your mail, email and text messages, unless we are the intended recipient of the communication; your genetic data; your biometric information for the purpose of uniquely identifying you; and personal information collected and analyzed concerning your sex life or sexual orientation. We ask that you not send nor disclose this sensitive personal information to us.

We take commercially reasonable measure to ensure we collect and process the minimum amount of personal information from you that is necessary to conduct our business, provide you with web-based and mobile applications, communicate with you, customer support, user verification, provide you with information on our services and content, website maintenance and improvements, and comply with legal requirements.  If you are an employee, we also collect and process personal information, including the categories of sensitive personal information described above, for employment-related purposes such as determining your eligibility for a position with the company; managing compensation, benefits, and employment-related expenses; managing professional development, performance, and conduct; protecting the company against illegal activity and other misconduct; undertaking activities to verify and maintain the quality, safety, and performance of our products and services; and complying with our legal obligations.

 

 

 

Use and Disclosure of Personal Information


Fortress may store and use your personally identifiable information for (i) product or Service fulfillment; (ii) voluntary marketing, promotional, and advertising purposes, such as to inform you of products or services available from us; (iii) internal operations, such as improving your customer experience – this includes auditing current interactions and optimizing user experience; (iv) detecting security incidents, protecting against malicious, deceptive activity, and taking all necessary and appropriate steps to mitigate current and future risk; (v) debugging and repairing internal information technology as necessary; (vi) undertaking internal research for technological development and demonstration; and (vii) to share with trusted third party service providers to help us perform activities to improve your customer experience.

Third parties are prohibited from using your personally identifiable information beyond providing services to us and are required to maintain the information’s confidentiality and privacy. Fortress does not trade, rent, or sell your personal information to third parties, share your personal information with third parties for cross-context behavioral advertising, or process it for targeted advertising or consumer profiling, and in the preceding twelve months we have not sold or shared any personal information.

We may share and disclose, and have within the preceding twelve months shared or disclosed, your personal information for the following limited purposes:

  • With third party service providers who perform services and functions on our behalf to support our interactions with you. These service providers may assist with technical operation of our Service, provide analytics, process orders, transactions and payments, or provide customer service. We may also share non-identifying information, such as aggregate statistics or usage information, with third parties.
  • As required by applicable law, statute, rule, regulation or professional standard, or through subpoena, search warrant or other legal process.
  • For regulatory compliance purposes.
  • When explicitly requested or consented to by you.
  • When required to deliver publications or reference materials requested by you.
  • For administrative or maintenance purposes related to the Service.

While we have not shared or disclosed your personal information for this reason within the last twelve months, we may also share or disclose your personal information if we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, dissolution, sale of all or a portion of our assets, or transition of service to another provider (collectively a “Transaction”). Your personal information may be shared in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of or following that Transaction along with other assets. In such a case, unless prohibited by applicable law, your information would remain subject to the privacy policy applicable at the time of such transfer, unless you discontinue use of our Service.

Unless otherwise required by law, the personal information we collect will only be retained for so long as the information is needed for our professional, marketing, or analytic purposes or to comply with your request, or until you ask for the information be deleted.  

 

 

 

Cookies and Other Technologies


We may use cookies, web beacons, pixel tags, mobile analytics software, log files, or other technologies to collect certain information about your online activity and interactions with our Service which allows us to keep track of analytics and certain statistical information that enables us to improve our services and provide you with more relevant content and advertising.

Some of the cookies we use are necessary to enable you to move around the Service and use its features.  We also use functional cookies to record information about the choices you have made and to allow us to tailor the Service to our users; for example, to remember your language or region or that you have already completed a survey. This information is usually anonymized and is not used for any other purpose.  We may also use analytic services (such as Google Analytics, described above) to help us understand how effective our content is, what interests our users have, and to improve how the Service works. In addition, we use web beacons or tracking pixels to count visitor numbers and performance cookies to track how many individual users access the Services and how often. This information is used for statistical purposes only, and we do not use such information to personally identify any user. 

You may, however, disallow receiving cookies at any time through your web browser. Similarly, you may set your mobile device to refuse to provide certain information, but certain features of the Service may not work without such information. It is not our intention to use cookies to retrieve information that is unrelated to our Service or your interaction with our Service.

While we do not currently sell or share personal information, we do recognize do-not-track and opt-out preference signals, such as the Global Privacy Control, on browsers, browser extensions, or devices that support such a signal. Such signals will be automatically linked to your browser or device identifier, and we will process them as a valid, automatic request to opt-out of the sale and sharing of your personal information in the event personal information is ever shared or sold.

If you would like more information about who we share our data with and why, please contact us.

 

 

 

Linked Sites


Our Service may contain links to other websites owned and operated by third parties, including without limitation social media websites, that we think you might be interested in (each a “Linked Site”). When you click on a link to a Linked Site, you will leave our Service and go to that Linked Site, and another entity may collect personal information or anonymous data from you. We have no control over, do not review, and cannot be responsible for, these Linked Sites or their content. Please be aware that the terms of this Policy do not apply to these Linked Sites or their content, or to any collection of your personal information by third parties through the Linked Sites. Fortress is not responsible for the privacy practices or the content of such Linked Sites. Please be aware of where you are at all times. Fortress expressly disclaims any liability that may arise from your use or provision of any of your information whatsoever to Linked Sites. You understand and agree that by clicking on a link to a Linked Site that you have left our Service.

 

 

 

Security


The security and confidentiality of your personal information is important to us. We follow reasonable commercial standards for organizational, technical, and administrative measures to protect the personal information submitted to us, both during transmission and once it is received.  

Please be advised, however, that while we take reasonable security measures to protect your personal information, such measures cannot be guaranteed to be secure. We cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security, and improperly collect, access, steal, or modify your personal information. The security of any account that you may make with us relies on your protection of your user profile information.

If you believe any personal information you have submitted to us is unsecure or have any other privacy concerns, please notify us immediately at Privacy@FortressInfoSec.com.

 

 

 

Unsubscribe

 

If you no longer wish to receive marketing emails from us, you may opt-out of receiving such emails by following the unsubscribe instructions contained in any such email or by contacting us at Privacy@FortressInfoSec.com with the subject “unsubscribe.” Please note we still may need to send you transactional emails associated with the operation of the Service.

 

 

 

Consent to Processing and International Transfer


The Service is controlled and operated by us from the United States. Fortress may process, transfer, and store your information on servers located in the United States. As a result, your personal information may be subject to data protection and other laws that may differ from your country of residence. Your personal information may be disclosed in response to inquiries or requests from government authorities or to respond to judicial process in the countries in which we operate. By using the Services, or by providing us with any information, you consent to the collection, processing, maintenance, and transfer of such information in and to the United States and other applicable territories in which the privacy laws may not be as comprehensive as, or equivalent to, those in the country where you reside or are a citizen. 

 

 

 

Changes To Our Privacy Policy


We reserve the right to change or modify this Policy or our Service at any time, and any changes are effective upon being posted unless we advise otherwise. If we make any material changes to this Policy, we will notify you by email or post notice on the Site before the change becomes effective.

We encourage you to frequently review the Site for the latest information on our privacy practices. Use of information we collect now is subject to the version of the Policy in effect at the time such information is used. You are bound by any changes to this Policy when you use the Service after such changes have been first posted. If you do not accept the terms of this Policy, we ask that you do not register with us and that you do not use our Service. Please exit the Service immediately if you do not agree to the terms of this Policy.

 

 

 

Contact Us


Fortress welcomes your questions and comments about privacy. If you would like to reach us, please email us at Privacy@FortressInfoSec.com  or write to us at 250 South Orange Avenue, Suite 500, Orlando, Florida 32801.

 

 

 

Special Notice for California Residents


If you would like to submit a Consumer Request, you can contact us at Privacy@FortressInfoSec.com.  If you choose to submit a Consumer Request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information if we cannot verify that the person making the Consumer Request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.

“Personal information” means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. “Personal information” does not include publicly available information.

  • Request to Correct. You may correct or update your personal information at any time by logging into your account or by contacting us.
  • Request to Access. You may submit a Consumer Request to obtain a copy of or access to the personal information that we have collected on you.
  • Request to Know. You may submit a Consumer Request to receive information about our data collection practices.
    • Right to Know what Personal Information is being Collected. You may request information on the categories of personal information we have collected about you; the categories of sources from which the personal information is collected; our business or commercial purpose for collecting, selling, or sharing personal information; the categories of third parties to whom we have disclosed personal information, if any; and the specific pieces of personal information it has collected about you.
    • Right to Know what Personal Information is Sold or Shared and to Whom. You may also request the categories of personal information that we have collected about you; the categories of personal information that we have sold or shared about you and the categories of third parties to whom the personal information was sold or shared, by category or categories of personal information for each category of third parties to whom the personal information was sold or shared, and the categories of personal information that we have disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose.

Please note that the categories of personal information, sources, and disclosure will not exceed what is contained in this Policy. Additionally, we are not required to retain any information about you if it is only used for a one-time transaction and would not be maintained in the ordinary course of business. We are also not required to reidentify personal information if it is not stored in that manner already, nor is it required to provide the personal information to you more than twice in a twelve-month period.

  • Request to Limit the Use of Your Sensitive Personal Information. We do not collect, use, or disclose sensitive personal information, unless you are an employee, in which case we collect, use, and disclose certain sensitive personal information only for employment-related purposes reasonably expected by employees. However, if you believe that we may have collected sensitive personal information about you, you may request that we limit the use or disclosure of your sensitive personal information.
  • Request to Delete. You may request that we delete personal information we have collected from you. Subject to certain exceptions set out below we will, on receipt of a verifiable Consumer Request, delete your personal information from our records, direct any service providers to do the same, and notify all third parties to whom we have shared your personal information to delete it unless this proves impossible or involves disproportionate effort. Please note that we may not delete your personal information if it is necessary to:
    • Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by the consumer, or reasonably anticipated by the consumer within the context of a business’ ongoing business relationship with the consumer, or otherwise perform a contract between the business and the consumer.
    • Help to ensure security and integrity to the extent the use of the consumer’s personal information is reasonably necessary and proportionate for those purposes.
    • Debug to identify and repair errors that impair existing intended functionality.
    • Exercise free speech, ensure the right of another consumer to exercise that consumer’s right of free speech, or exercise another right provided for by law.
    • Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code.
    • Engage in public or peer-reviewed scientific, historical, or statistical research that conforms or adheres to all other applicable ethics and privacy laws, when the business’ deletion of the information is likely to render impossible or seriously impair the ability to complete such research, if the consumer has provided informed consent.
    • To enable solely internal uses that are reasonably aligned with the expectations of the consumer based on the consumer’s relationship with the business and compatible with the context in which the consumer provided the information.
    • Comply with a legal obligation.
  • Right to Access Information About Automatic Decision-Making. We do not currently engage in automated individual decision-making. However, in the event we ever do so, we will inform you of such change and you may request information about and opt out of such automated decision-making.
  • Right to Data Portability. You may also request that we transfer your personal information to another entity, to the extent such transfer is technically feasible.

We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may charge you a different rate, or provide a different level of quality, if the difference is reasonably related to the value provided by your personal information.

 

 

 

Special Notice for Colorado Residents


Personal information or “personal data” means “information that is linked or reasonably linkable to an identified or identifiable individual.” “Personal data” does not include de-identified or publicly available information.

  • Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
  • Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
  • Request to Delete. You may request that we delete the personal data it has collected on you. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
  • Request to Opt-Out. You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising or consumer profiling. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
  • Right to Data Portability. You may also request that we transfer your personal information to you or another entity, to the extent such transfer is technically feasible.
  • Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Colorado Attorney General.
  • Withdraw Consent for Your Sensitive Personal Information. We do not collect, use, or disclose sensitive personal information, unless you are an employee, in which case we collect, use, and disclose certain sensitive personal information only for employment-related purposes reasonably expected by employees. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at Privacy@FortressInfoSec.com. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.

We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

 

 

 

Special Notice for Connecticut Residents


Personal information or “personal data” means “information that is linked or reasonably linkable to an identified or identifiable individual.” “Personal data” does not include de-identified or publicly available information.

  • Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
  • Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
  • Request to Delete. You may request that we delete the personal data it has collected on you. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
  • Request to Opt-Out. You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising or consumer profiling. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
  • Right to Data Portability. You may also request that we transfer your personal information to you or another entity, to the extent such transfer is technically feasible.
  • Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Connecticut Attorney General or submit a complaint online at https://portal.ct.gov/AG/Common/Complaint-Form-Landing-page.
  • Withdraw Consent for Your Sensitive Personal Information. We do not collect, use, or disclose sensitive personal information, unless you are an employee, in which case we collect, use, and disclose certain sensitive personal information only for employment-related purposes reasonably expected by employees. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at Privacy@FortressInfoSec.com. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.

We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

 

 

 

Special Notice for Delaware Residents


Personal information or “personal data” means “information that is linked or reasonably linkable to an identified individual or an identifiable individual.” “Personal data” does not include deidentified data or publicly available information.

  • Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
  • Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
  • Request to Delete. You may request that we delete the personal data that you have provided to us. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law. 
  • Request to Opt-Out. You may submit a request to opt out of the sale of your personal data. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising, consumer profiling, or automated decision making.
  • Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Delaware Attorney General.
  • Withdraw Consent for Your Sensitive Personal Information. We do not collect, use, or disclose sensitive personal information, unless you are an employee, in which case we collect, use, and disclose certain sensitive personal information only for employment-related purposes reasonably expected by employees. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at Privacy@FortressInfoSec.com. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.

We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you. 

 

 

 

Special Notice for Florida Residents 


Personal information or “personal data” means “information that is linked or reasonably linkable to an identified individual or an identifiable individual” and includes pseudonymous data when such data is used with additional information. “Personal data” does not include deidentified data or publicly available information.

  • Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
  • Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
  • Request to Delete. You may request that we delete the personal data that you have provided to us. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law. 
  • Requests to Opt-Out. You may submit a request to opt out of the sale of your personal data; however, we do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling. We also do not collect, use, or disclose sensitive personal information (also referred to herein as “sensitive data”) unless you are an employee, in which case we collect, use, and disclose certain sensitive personal information only for employment-related purposes reasonably expected by employees, but if you believe that we may have collected any other sensitive data about you, such as precise geolocation, you may withdraw your consent to any use or disclosure of your sensitive data and opt-out of the collection and processing of such sensitive data. We further do not collect personal data through the operation of a voice recognition or facial recognition feature; however, you may also opt out of such collection in the event we do use such features.
  • Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Florida Attorney General.

If you’d like to make any of the above requests, you can contact us at Privacy@FortressInfoSec.com. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.

We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

 

 

 

Special Notice for Indiana Residents 


Personal information or “personal data” means “information that is linked or reasonably linkable to an identified individual or an identifiable individual.” “Personal data” does not include deidentified data, aggregated data, or publicly available information.

  • Request to Access. You may submit a request to confirm or to obtain a copy or representative summary of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
  • Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
  • Request to Delete. You may request that we delete the personal data that you have provided to us. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law. 
  • Request to Opt-Out. You may submit a request to opt out of the sale of your personal data. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
  • Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Indiana Attorney General.
  • Withdraw Consent for Your Sensitive Personal Information. We do not collect, use, or disclose sensitive personal information, unless you are an employee, in which case we collect, use, and disclose certain sensitive personal information only for employment-related purposes reasonably expected by employees. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at Privacy@FortressInfoSec.com. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.

We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

 

 

 

Special Notice for Iowa Residents 


Personal information or “personal data” means “information that is linked or reasonably linkable to an identified individual or an identifiable individual.” “Personal data” does not include deidentified data, aggregated data, or publicly available information.

  • Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
  • Request to Delete. You may request that we delete the personal data that you have provided to us. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law. 
  • Request to Opt-Out. You may submit a request to opt out of the sale of your personal data. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising.
  • Appeal. If we notify you that no action is to be taken in response to your request to access, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Iowa Attorney General.
  • Withdraw Consent for Your Sensitive Personal Information. We do not collect, use, or disclose sensitive personal information, unless you are an employee, in which case we collect, use, and disclose certain sensitive personal information only for employment-related purposes reasonably expected by employees. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at Privacy@FortressInfoSec.com. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.

We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

 

 

 

Special Notice for Kentucky Residents


Personal information or “personal data” means “any information that is linked or reasonably linkable to an identified or identifiable natural person.” “Personal data” does not include de-identified data or publicly available information.

  • Request to Access. You may submit a request to confirm whether we are processing your personal data or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
  • Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
  • Request to Delete. You may request that we delete the personal data provided by or obtained about you. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
  • Request to Opt-Out. You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising or consumer profiling. We do not sell, rent, or lease your personal data to third parties;  however, you may submit a request to opt out of the sharing of your personal information for interest-based or targeted advertising.
  • Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Kentucky Attorney General or submit a complaint online at https://www.ag.ky.gov/about/Office-Divisions/OCP/Pages/default.aspx.
  • Withdraw Consent for Your Sensitive Personal Information. You may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at Privacy@FortressInfoSec.com. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and street address) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.

We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

 

 

 

Special Notice for Maryland Residents


Personal information or “personal data” means “information that is linked or reasonably linkable to an identified or identifiable individual.” “Personal data” does not include de-identified or publicly available information.

  • Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
  • Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
  • Request to Delete. You may request that we delete the personal data it has collected on you. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
  • Request to Opt-Out. You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising or consumer profiling. We do not sell, rent, or lease your personal data to third parties.
  • Right to Data Portability. You may also request that we transfer your personal information to you or another entity, to the extent such transfer is technically feasible.
  • Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Maryland Attorney General.
  • Withdraw Consent for Your Sensitive Personal Information. We do not collect, use, or disclose sensitive personal information. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you like to make any of the above requests, you can contact us at Privacy@FortressInfoSec.com. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and street address) in order to comply with your request. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.

We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

 

 

 

Special Notice for Montana Residents 


Personal information or “personal data” means “information that is linked or reasonably linkable to an identified individual or an identifiable individual.” “Personal data” does not include deidentified data or publicly available information.

  • Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
  • Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
  • Request to Delete. You may request that we delete the personal data that you have provided to us. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law. 
  • Request to Opt-Out. You may submit a request to opt out of the sale of your personal data. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
  • Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Montana Attorney General.
  • Withdraw Consent for Your Sensitive Personal Information. We do not collect, use, or disclose sensitive personal information, unless you are an employee, in which case we collect, use, and disclose certain sensitive personal information only for employment-related purposes reasonably expected by employees. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at Privacy@FortressInfoSec.com. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.

We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

 

 

 

Special Notice for Nebraska Residents


Personal information or “personal data” means “any information, including sensitive data, that is linked or reasonably linkable to an identified or identifiable individual, and includes pseudonymous data when the data is used by a controller or processor in conjunction with additional information that reasonably links the data to an identified or identifiable individual.” “Personal data” does not include de-identified or publicly available information.

  • Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
  • Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
  • Request to Delete. You may request that we delete the personal data it has collected on you. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
  • Request to Opt-Out. You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising or consumer profiling. We do not sell, rent, or lease your personal data to third parties.
  • Right to Data Portability. You may also request that we transfer your personal information to you or another entity, to the extent such transfer is technically feasible.
  • Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Nebraska Attorney General.
  • Withdraw Consent for Your Sensitive Personal Information. We do not collect, use, or disclose sensitive personal information. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you like to make any of the above requests, you can contact us at Privacy@FortressInfoSec.com. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name and email address) in order to comply with your request. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.

We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

 

 

 

Special Notice for Nevada Residents


We do not sell, rent, or lease your personally identifiable information to third parties. However, if you are a resident of Nevada and would like to submit a request not to sell your personally identifiable information, you may do so by emailing us at Privacy@FortressInfoSec.com.

 

 

 

Special Notice for New Hampshire Residents


Personal information or “personal data” means “any information that is linked or reasonably linkable to an identified or identifiable individual.” “Personal data” does not include de-identified or publicly available information.

  • Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
  • Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
  • Request to Delete. You may request that we delete the personal data it has collected on you. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
  • Request to Opt-Out. You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising or consumer profiling. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
  • Right to Data Portability. You may also request that we transfer your personal information to you or another entity, to the extent such transfer is technically feasible.
  • Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the New Hampshire Attorney General.
  • Withdraw Consent for Your Sensitive Personal Information. You may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at Privacy@FortressInfoSec.com. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.

We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

 

 

 

Special Notice for New Jersey Residents


Personal information or “personal data” means “any information that is linked or reasonably linkable to an identified or identifiable person.” “Personal data” does not include de-identified or publicly available information.

  • Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
  • Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
  • Request to Delete. You may request that we delete the personal data it has collected on you. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
  • Request to Opt-Out. You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising or consumer profiling. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
  • Right to Data Portability. You may also request that we transfer your personal information to you or another entity, to the extent such transfer is technically feasible.
  • Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the New Jersey Attorney General.
  • Withdraw Consent for Your Sensitive Personal Information. You may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at Privacy@FortressInfoSec.com. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.

We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

 

 

 

Special Notice for Oregon Residents

 

Personal information or “personal data” means “data, derived data or a unique identifier that is linked to or is reasonably linkable to a consumer or to a device that identifies, is linked to or is reasonably linkable to one or more consumers.” “Personal data” does not include deidentified data or publicly available information.

  • Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
  • Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
  • Request to Delete. You may request that we delete the personal data that you have provided to us. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law. 
  • Request to Opt-Out. You may submit a request to opt out of the sale of your personal data. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
  • Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Oregon Attorney General.
  • Withdraw Consent for Your Sensitive Personal Information. We do not collect, use, or disclose sensitive personal information, unless you are an employee, in which case we collect, use, and disclose certain sensitive personal information only for employment-related purposes reasonably expected by employees. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at Privacy@FortressInfoSec.com. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.

We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

 

 

 

Special Notice for Tennessee Residents 


“Personal information” means “information that is linked or reasonably linkable to an identified individual or an identifiable individual.” Personal information does not include deidentified data, aggregated data, or publicly available information.

  • Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal information that we have collected on you including what the information is, how it’s been used, whether it’s been sold, and who it’s been disclosed to. Your personal information may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
  • Request to Correct. You may correct or update your personal information at any time by logging into your account or by contacting us.
  • Request to Delete. You may request that we delete the personal information that you have provided to us. We will delete your personal information from our records and direct any service providers to do the same unless retention is required by law. 
  • Request to Opt-Out. You may submit a request to opt out of the sale of your personal information. We do not sell, rent, or lease your personal data to third parties and do not process your personal information for targeted advertising or consumer profiling.
  • Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Tennessee Attorney General.
  • Withdraw Consent for Your Sensitive Personal Information. We do not collect, use, or disclose sensitive personal information, unless you are an employee, in which case we collect, use, and disclose certain sensitive personal information only for employment-related purposes reasonably expected by employees. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at Privacy@FortressInfoSec.com. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.

We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

 

 

 

Special Notice for Texas Residents 


Personal information or “personal data” means “information that is linked or reasonably linkable to an identified individual or an identifiable individual” and includes pseudonymous data when such data is used with additional information. “Personal data” does not include deidentified data or publicly available information.

  • Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
  • Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
  • Request to Delete. You may request that we delete the personal data that you have provided to us. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law. 
  • Request to Opt-Out. You may submit a request to opt out of the sale of your personal data. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
  • Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Texas Attorney General.
  • Withdraw Consent for Your Sensitive Personal Information. We do not collect, use, or disclose sensitive personal information, unless you are an employee, in which case we collect, use, and disclose certain sensitive personal information only for employment-related purposes reasonably expected by employees. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at Privacy@FortressInfoSec.com. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.

We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

 

 

 

Special Notice for Utah Residents


Personal information or “personal data” means “information that is linked or reasonably linkable to an identified individual or an identifiable individual.” “Personal data” does not include deidentified data, aggregated data, or publicly available information.

  • Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
  • Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
  • Request to Delete. You may request that we delete the personal data that you have provided to us. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
  • Right to Data Portability. You may also request that we transfer your personal information to you or another entity, to the extent such transfer is technically feasible.
  • Request to Opt-Out. You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising.
  • Withdraw Consent for Your Sensitive Personal Information. We do not collect, use, or disclose sensitive personal information, unless you are an employee, in which case we collect, use, and disclose certain sensitive personal information only for employment-related purposes reasonably expected by employees. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at Privacy@FortressInfoSec.com. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.

We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

 

 

 

Special Notice for Virginia Residents


Personal information or “personal data” means “any information that is linked or reasonably linkable to an identified or identifiable natural person.” “Personal data” does not include de-identified data or publicly available information.

  • Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
  • Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
  • Request to Delete. You may request that we delete the personal data provided by or obtained about you. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
  • Request to Opt-Out. You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising or consumer profiling. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
  • Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Virginia Attorney General or submit a complaint online at https://www.oag.state.va.us/consumer-protection/index.php/file-a-complaint.
  • Withdraw Consent for Your Sensitive Personal Information. We do not collect, use, or disclose sensitive personal information , unless you are an employee, in which case we collect, use, and disclose certain sensitive personal information only for employment-related purposes reasonably expected by employees. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at Privacy@FortressInfoSec.com. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.

We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.