Privacy Policy

1. Information We Collect

We collect only the information necessary to respond to your inquiries and provide our navigation services. Specifically, we may collect:

• — Contact form submissions: Your name, email address, company name, and the message or situation you describe.
• — Self-assessment responses: Answers you provide in our CMMC readiness assessment tool. These responses are used to generate your indicative result and are not stored in a database.
• — Newsletter subscriptions: Your email address if you subscribe to CMMC updates.

We do not collect payment information, government identification, or sensitive personal data outside of what you voluntarily provide in the above contexts.

2. How We Use Your Information

We use the information you provide for the following purposes:

• — To respond to your inquiry or contact form submission.
• — To conduct a CMMC scoping conversation and provide you with relevant guidance.
• — To deliver your self-assessment results and explain what they mean.
• — To send CMMC regulatory updates and compliance information if you have subscribed to our newsletter.
• — To maintain business records of our communications.

3. Information Sharing

We do not sell, rent, or share your personal information with third parties for marketing or commercial purposes.

The only circumstance in which we share your contact details with a third party is when we make an introduction to one of our assessment partners — and we will only do so with your explicit consent after discussing whether the introduction is appropriate for your situation.

We do not use third-party advertising networks and we do not share data with data brokers or aggregators.

4. Cookies and Tracking

We use minimal cookies. Specifically:

• — We do not use third-party analytics services (no Google Analytics, no Meta Pixel).
• — We do not use advertising or retargeting cookies.
• — Our website may set basic session cookies required for normal operation of the site. These do not track you across other websites.

5. Data Retention

We retain contact information and communication records for legitimate business purposes, including follow-up on inquiries, maintaining a record of introductions made, and complying with any applicable legal obligations.

You may request deletion of your information at any time by contacting us at hello@meridiancompass.co. We will honor deletion requests unless retention is required by law or necessary to resolve an active dispute.

6. Security

We use reasonable administrative, technical, and physical measures to protect the information we hold from unauthorized access, disclosure, or misuse. However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, and we encourage you to exercise caution when transmitting sensitive information.

7. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• — The right to know what personal information we have collected about you and how it is used.
• — The right to request deletion of your personal information.
• — The right to opt out of the sale of your personal information. (We do not sell personal information.)
• — The right to non-discrimination for exercising your CCPA rights.

To exercise any of these rights, please contact us at hello@meridiancompass.co.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services after changes are posted constitutes your acceptance of those changes.

9. Contact

If you have questions about this Privacy Policy or how we handle your information, please contact us: