2. Privacy Policy

2.1 Scope

This Privacy Policy explains how GRCGlobal.US collects, uses, discloses, and protects personal information when you visit the Site, submit forms, or communicate with us. It does not cover information governed by a separate written services agreement, which controls for client engagement data.

2.2 Information we collect

• Information you provide: name, business email, phone, company, role, and message content when you contact us, request a proposal, apply to a role, or subscribe.
• Automatically collected: IP address, device/browser type, pages viewed, referring URLs, and similar analytics data collected via cookies and similar technologies.
• From third parties: information from analytics, marketing, recruiting, or CRM providers, and from public professional sources, consistent with their terms.

2.3 How we use information

• To respond to inquiries and provide requested information and services.
• To evaluate staffing/candidate interest and manage recruiting.
• To operate, secure, maintain, and improve the Site.
• To send administrative or (where permitted) marketing communications, which you may opt out of.
• To comply with legal obligations and enforce our terms.

2.4 Legal bases (where applicable)

Where required, we process personal information based on your consent, our legitimate business interests, the performance of a contract, and/or compliance with legal obligations.

2.5 How we share information

We do not sell personal information. We may share it with service providers acting on our behalf (e.g., [hosting, analytics, email/CRM, recruiting platforms]), with professional advisors, in connection with a business transaction, and where required by law or to protect rights and safety.

2.6 Cookies & analytics

We use cookies and similar technologies as described in the Cookie Notice (Section 4). We use [e.g., Google Analytics / other] to understand Site usage. You can control cookies through your browser and, where offered, our cookie banner.

2.7 Data retention & security

We retain personal information only as long as necessary for the purposes described or as required by law, then delete or de-identify it. We use reasonable administrative, technical, and physical safeguards appropriate to a GRC-focused business; however, no method of transmission or storage is completely secure.

2.8 Your rights & choices

Depending on where you live, you may have rights to access, correct, delete, or restrict use of your personal information, to opt out of certain processing, and to appeal a decision. To exercise rights, contact [contact@grcglobal.us]. We will verify and respond as required by applicable law. Florida residents may have rights under the Florida Digital Bill of Rights where its thresholds apply.

2.9 Children’s privacy

The Site is intended for business users and is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child provided us information, contact us and we will delete it.

2.10 International visitors

The Site is operated in the United States. If you access it from outside the U.S., you understand your information may be processed in the U.S., which may have different data-protection laws than your location.

2.11 Changes & contact

We may update this Privacy Policy and will revise the “Last updated” date. Questions: [contact@grcglobal.us].