Privacy Policy

Privacy Overview

At Heights Consulting Group, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us in any way.

As a cybersecurity consulting firm, we understand the importance of data protection and privacy. We adhere to industry best practices and applicable privacy laws to ensure your information is handled securely and responsibly.

Information We Collect

We collect information that you provide directly to us, such as when you:

• Fill out contact forms on our website
• Request a quote or consultation
• Subscribe to our newsletter or communications
• Apply for employment opportunities
• Engage our consulting services
• Contact us via email, phone, or other means

The types of information we may collect include:

• Personal Information: Name, email address, phone number, company name, job title
• Professional Information: Industry, company size, cybersecurity needs, project requirements
• Communication Records: Emails, phone calls, meeting notes, and other correspondence
• Website Usage Data: IP address, browser type, pages visited, time spent on site

SMS Communications and Mobile Number Privacy

When you provide your mobile phone number and opt in to SMS communications, we collect and process this information for the following purposes:

• Service-related notifications and updates
• Appointment reminders and scheduling confirmations
• Security alerts and incident notifications
• Account verification and authentication
• Emergency communications related to cybersecurity incidents
• Marketing communications (only with explicit consent)

Consent and Authorization: We only collect and use your mobile phone number with your explicit consent. By providing your mobile number and opting in to SMS communications, you authorize us to:

• Store your mobile number in our secure systems
• Send SMS messages to your mobile device
• Track delivery and opt-out status of messages
• Maintain records of your consent and communication preferences

Data Protection for Mobile Numbers: We implement enhanced security measures to protect your mobile phone number and SMS communication data:

• Encryption of mobile numbers in our databases
• Secure transmission of SMS messages through certified providers
• Access controls limiting who can view mobile number data
• Regular security audits of SMS communication systems
• Compliance with telecommunications privacy regulations

Opt-Out and Data Deletion: You have complete control over your SMS communications and mobile number data:

• Opt-Out Methods: You can opt out of SMS communications by replying "STOP" to any message, contacting us directly, or updating your preferences
• Data Deletion: Upon your request, we will delete your mobile number from our systems within 30 days
• Consent Withdrawal: You can withdraw your consent for SMS communications at any time
• Communication History: You can request a copy of your SMS communication history

Third-Party SMS Providers: We may use third-party SMS service providers to deliver messages. These providers are:

• Carefully selected for their security and privacy standards
• Bound by contractual obligations to protect your data
• Prohibited from using your mobile number for their own purposes
• Required to delete your data upon termination of our relationship

Retention of Mobile Number Data: We retain your mobile phone number and SMS communication data only as long as necessary:

• For active service agreements: Duration of the agreement plus 2 years
• For marketing communications: Until you opt out or withdraw consent
• For legal compliance: As required by applicable laws and regulations
• For security purposes: As needed to prevent fraud and ensure account security

How We Use Your Information

We use the information we collect to:

• Provide and improve our cybersecurity consulting services
• Respond to your inquiries and requests
• Send you relevant information about our services and industry insights
• Process employment applications
• Comply with legal obligations
• Protect against fraud and ensure security
• Analyze website usage to improve user experience

Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

• Service Providers: We may share information with trusted third-party service providers who assist us in operating our website, conducting business, or servicing you
• Legal Requirements: We may disclose information when required by law or to protect our rights, property, or safety
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction
• Consent: We may share information with your explicit consent

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication procedures
• Employee training on data protection
• Incident response procedures

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Opt-out: Unsubscribe from marketing communications
• Restriction: Request restriction of processing in certain circumstances

To exercise these rights, please contact us using the information provided below.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. These technologies help us:

• Remember your preferences and settings
• Analyze website traffic and usage patterns
• Provide personalized content and recommendations
• Improve website functionality and performance

You can control cookie settings through your browser preferences. However, disabling certain cookies may affect website functionality.

Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

International Data Transfers

If you are located outside the United States, please note that your information may be transferred to and processed in the United States. We ensure appropriate safeguards are in place to protect your information during such transfers.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

We will respond to your inquiry within 30 days of receipt.