Privacy Policy

This Privacy Policy is maintained by Tuan Security Group LLC to explain how we handle information when you visit our website at www.tuansecuritygroup.com or contact us about our SOC 2, ISO 27001, and fractional security services. If you have any questions about this policy, you can reach us at john@tuansecuritygroup.com.

1. Information we collect

We collect very limited personal information. Most of our site can be browsed without providing any personal data. We may collect information you voluntarily provide when you:

• Email us to book an enterprise readiness assessment;
• Ask a question about SOC 2, ISO 27001, or fractional security advising;
• Subscribe to updates or request a resource, if available.

The information we typically receive is limited to your name, email address, company name, and any details you choose to share in your message. We do not collect sensitive personal information through this website.

2. Cookies and tracking

We do not use third-party analytics, advertising, or tracking cookies on this website. We do not use Google Analytics, Meta Pixel, or similar tracking tools. Any first-party cookies that may be set by the browser are strictly functional and support basic website features, such as maintaining a menu state. You can control or delete cookies through your browser settings at any time.

3. How we use your information

We use the information you provide only for the purposes you expect:

• Responding to your inquiry or scheduling an assessment;
• Delivering the services you request;
• Keeping records of our business communications;
• Complying with legal or professional obligations.

We do not sell your personal information. We do not share your information with unrelated third parties for marketing purposes.

4. Legal basis for processing (GDPR)

For visitors located in the European Economic Area, United Kingdom, or Switzerland, our legal basis for processing personal data is typically your consent or our legitimate interest in responding to your inquiry and providing our services. If we rely on consent, you can withdraw it at any time by contacting us.

5. Your privacy rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate information;
• Request deletion of your personal information;
• Object to or restrict certain processing;
• Request portability of your data where applicable;
• Opt out of the sale of personal information, where applicable.

To exercise any of these rights, email us at john@tuansecuritygroup.com. We will respond within the timeframe required by applicable law.

6. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, the purposes for which we use it, and the categories of third parties with whom we share it. As described above, we do not sell personal information. We do not use personal information for targeted advertising. You may request access to or deletion of your personal information by contacting us at the email address above.

7. Data retention and security

We keep personal information only for as long as necessary to respond to your inquiry, provide our services, maintain business records, and comply with legal obligations. We apply reasonable administrative, technical, and physical safeguards to protect the information we receive. Because no method of transmission or storage is completely secure, we cannot guarantee absolute security.

8. Third-party services

We may use standard third-party services for hosting, email, or other business functions. These service providers process data only on our behalf and under appropriate confidentiality and security obligations. We do not authorize them to use your information for their own purposes.

9. International visitors

Tuan Security Group LLC is based in Virginia, United States. If you contact us from outside the United States, your information may be transferred to and processed in the United States. By using our website or contacting us, you consent to this transfer.

10. Children's privacy

Our website and services are not directed to children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

12. Contact us

For privacy questions, requests, or concerns, please contact:

Tuan Security Group LLC
Email: john@tuansecuritygroup.com
Located in Virginia, United States