top of page
download.png

PRIVACY POLICY

 

Effective Date: August 1, 2026

 

R3DOUBT Security Group LLC ("R3DOUBT," "we," "us," or "our") respects your privacy and is committed to protecting personal information entrusted to us.

 

This Privacy Policy describes how R3DOUBT collects, uses, discloses, retains, and protects personal information when you visit or interact with our website, r3doubtsecurity.com (the "Website"), contact us, communicate with us, or otherwise interact with R3DOUBT in connection with our business.

 

R3DOUBT provides cybersecurity, incident response, digital forensics, compliance, governance, risk management, security assessment, and related professional services to commercial and government organizations.

Because the nature of our cybersecurity services may require us to access sensitive information on behalf of our customers, this

 

Privacy Policy distinguishes between:

  1. Personal information collected through our Website and ordinary business activities, which is governed by this Privacy Policy; and

  2. Customer information that R3DOUBT processes on behalf of a customer in connection with a cybersecurity, compliance, assessment, investigation, or other professional-services engagement, which is primarily governed by the applicable contract, statement of work, data-processing terms, security requirements, and other agreements between R3DOUBT and the customer.

 

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through:

  • The R3DOUBT Website;

  • The Website's contact form;

  • Communications with R3DOUBT by email, telephone, or other business communications;

  • Requests for information about R3DOUBT's services;

  • Business development and sales activities;

  • Marketing communications that R3DOUBT may introduce in the future;

  • Employment or recruiting activities conducted through or in connection with R3DOUBT; and

  • Other interactions in which this Privacy Policy is provided or referenced.

This Privacy Policy does not replace or supersede contractual privacy, confidentiality, security, data-processing, or information-handling requirements that apply to R3DOUBT's customer engagements.

 

2. Information We Collect

The information R3DOUBT collects depends on how you interact with us.

 

A. Information You Provide Directly

When you contact R3DOUBT through our Website or otherwise communicate with us, we may collect information such as:

  • Name;

  • Business email address;

  • Telephone number;

  • Company or organization;

  • Information included in your inquiry or message;

  • Information about the services you are interested in;

  • Professional or business information;

  • Information provided during sales or business-development discussions;

  • Information provided when requesting a proposal, consultation, demonstration, or other service; and

  • Other information you voluntarily provide to us.

Our Website contact form currently collects your name, email address, telephone number, and the information you provide in the "How Can We Help You" field.

 

B. Employment Information

R3DOUBT may collect information from individuals who apply for employment or otherwise seek to work with R3DOUBT.

Depending on the recruiting process, this information may include:

  • Name and contact information;

  • Resume or curriculum vitae;

  • Employment history;

  • Education and professional qualifications;

  • Certifications and credentials;

  • References;

  • Information provided during interviews;

  • Other information voluntarily provided during the application process; and

  • Information reasonably necessary to evaluate an applicant's qualifications.

Employment-related information may be subject to additional notices or requirements under applicable law.

C. Information Received in Connection with Customer Engagements

R3DOUBT provides cybersecurity and related professional services. Depending on the scope of an engagement, a customer may authorize R3DOUBT to receive, access, collect, analyze, or otherwise process information that may include personal information or sensitive business information.

Examples may include:

  • Employee and user information;

  • Names, usernames, email addresses, and business contact information;

  • User and administrator account information;

  • Endpoint and device information;

  • Hostnames, IP addresses, MAC addresses, and other network identifiers;

  • Network architecture and infrastructure information;

  • Domain, DNS, firewall, VPN, and network configuration information;

  • Cloud infrastructure and cloud-security configuration information;

  • Microsoft 365, Google Workspace, AWS, Azure, OCI, or other cloud-environment information;

  • Vulnerability scan results;

  • Penetration-testing findings;

  • Risk-assessment and compliance-assessment results;

  • Security logs and event data;

  • Endpoint detection and response data;

  • Authentication and identity logs;

  • System and application configurations;

  • Operating-system and software information;

  • Incident-response and digital-forensics information;

  • Malware or suspicious files;

  • Email messages and email metadata when relevant to an authorized investigation;

  • Security alerts and threat intelligence;

  • Forensic images and forensic artifacts;

  • Documents supplied for compliance, GRC, CMMC, HIPAA, NIST, or similar assessments;

  • Policies, procedures, diagrams, inventories, and security documentation;

  • Credentials, access tokens, API keys, certificates, or other access information when required for an authorized engagement;

  • Sensitive or confidential business information;

  • Customer proprietary information and intellectual property; and

  • Regulated information that may exist within systems being assessed or investigated.

Customer information of this nature is processed only in connection with authorized services and according to the applicable customer agreement and engagement requirements.

 

3. How We Use Personal Information

R3DOUBT may use personal information for legitimate business purposes, including to:

  • Respond to inquiries and requests;

  • Communicate with prospective and existing customers;

  • Provide, administer, and support requested services;

  • Prepare proposals, statements of work, and other business documents;

  • Conduct sales and business-development activities;

  • Schedule meetings, consultations, assessments, or other services;

  • Establish and maintain business relationships;

  • Process employment applications;

  • Send service-related communications;

  • Send newsletters, cybersecurity information, industry updates, event information, or other marketing communications when permitted by law;

  • Improve our Website, services, and business operations;

  • Protect the security and integrity of our systems and Website;

  • Detect, investigate, and prevent fraud, abuse, unauthorized access, or other potentially harmful activity;

  • Comply with applicable legal, regulatory, contractual, or governmental requirements;

  • Establish, exercise, or defend legal claims; and

  • Carry out other purposes disclosed at the time information is collected or otherwise permitted by applicable law.

 

4. Sales and Marketing Communications

Information submitted through the Website may be used to respond to inquiries and conduct reasonable sales follow-up regarding R3DOUBT's services.

R3DOUBT does not currently distribute a recurring marketing newsletter. R3DOUBT intends to introduce recurring marketing communications in the future, which may be approximately bi-weekly.

Future marketing communications may include:

  • Cybersecurity insights;

  • Industry information;

  • Service updates;

  • Events;

  • Educational content;

  • Company announcements; and

  • Information about R3DOUBT services.

Where required by applicable law, R3DOUBT will obtain appropriate consent before sending marketing communications.

Marketing recipients may opt out of marketing communications by using the unsubscribe mechanism included in the applicable communication or by contacting us at privacy@r3doubtsec.com.

Opting out of marketing communications will not prevent R3DOUBT from sending necessary transactional, contractual, security, or other non-marketing communications.

 

5. Website Technology, Cookies, and Tracking

The R3DOUBT Website is currently built using Wix.

The R3DOUBT domain is registered through GoDaddy, and DNS services are managed through Cloudflare.

Based on the information currently provided to R3DOUBT, the Website does not currently use:

  • Google Analytics;

  • Google Tag Manager;

  • LinkedIn Insight Tag;

  • Meta/Facebook Pixel;

  • Microsoft Clarity;

  • Hotjar;

  • Embedded YouTube or Vimeo content; or

  • Other identified analytics or advertising tracking technologies.

 

The Website also does not currently use a cookie-consent banner.

R3DOUBT does use reCAPTCHA on the Website. reCAPTCHA may involve the collection or processing of information by the provider of that service for security and abuse-prevention purposes. Users should review the applicable provider's privacy terms for additional information.

 

Although R3DOUBT does not currently use cookies for analytics or advertising purposes based on the information available to us, Website infrastructure or third-party services may use technologies necessary to operate, secure, or maintain the Website.

R3DOUBT may update its use of cookies, analytics, or other technologies in the future. If our practices materially change, we will update this Privacy Policy and implement any required notices or consent mechanisms.

 

6. Contact Form Information

When you submit information through the R3DOUBT Website contact form, the information is stored in the Website's backend and is directed to R3DOUBT personnel through email.

The contact form currently collects:

  • Name;

  • Email;

  • Telephone number; and

  • Information submitted in the "How Can We Help You" field.

Contact-form submissions are currently retained in the Website backend for as long as the Website remains hosted under the current website-management arrangement. Related email communications may also remain in R3DOUBT's email environment for as long as maintained under applicable business practices.

R3DOUBT does not currently represent that Website contact-form information is automatically deleted after a specific number of days.

 

7. How We Share Personal Information

R3DOUBT does not sell or rent personal information.

R3DOUBT may disclose or permit access to personal information when reasonably necessary to operate our business, provide services, respond to requests, protect our systems, or satisfy legal and contractual obligations.

These disclosures may include:

Service Providers

 

R3DOUBT may use trusted third-party service providers that process information on our behalf. These providers may include technology and business-service providers supporting:

  • Business email and collaboration;

  • Website hosting and infrastructure;

  • Domain and DNS services;

  • Electronic signatures;

  • Accounting and financial administration;

  • Business operations; and

  • Other services reasonably necessary to operate R3DOUBT or provide contracted services.

R3DOUBT currently uses Microsoft 365 for business email, collaboration, identity, document storage, and related business operations.

R3DOUBT currently uses DocuSign for electronic signatures and agreements.

R3DOUBT may use additional service providers in the future as its business operations develop.

Where appropriate, R3DOUBT seeks to require service providers to use personal information only for authorized purposes and to maintain appropriate safeguards.

Legal and Regulatory Requirements

R3DOUBT may disclose information when required or permitted by law, regulation, legal process, court order, subpoena, governmental request, or other lawful authority.

Business Transactions

R3DOUBT may disclose information as reasonably necessary in connection with an actual or proposed merger, acquisition, financing, reorganization, sale of assets, corporate restructuring, or similar business transaction, subject to applicable legal requirements.

Protection of Rights and Security

R3DOUBT may disclose information when reasonably necessary to:

  • Protect the rights, property, or safety of R3DOUBT;

  • Protect customers, employees, or other individuals;

  • Investigate suspected fraud or abuse;

  • Detect or prevent cybersecurity incidents;

  • Enforce applicable agreements; or

  • Establish, exercise, or defend legal claims.

8. Customer Information and Cybersecurity Engagements

R3DOUBT's cybersecurity engagements may involve access to information that is significantly more sensitive than information ordinarily collected through the public Website.

Customers may provide R3DOUBT with access to systems, networks, cloud environments, security tools, documentation, logs, credentials, forensic artifacts, or other information necessary to perform an authorized engagement.

R3DOUBT will process such information for the purposes authorized by the customer and the applicable engagement documentation.

Where R3DOUBT processes personal information on behalf of a customer, the customer may determine the purposes and means of processing and may act as the controller or otherwise retain responsibility for the information under applicable law.

The customer's agreement with R3DOUBT, including any applicable Master Services Agreement, Statement of Work, Data Processing Agreement, security requirements, or other contractual documentation, governs the handling of customer information to the extent those terms apply.

Customers should not provide R3DOUBT with credentials, access tokens, API keys, regulated information, or other sensitive information unless such information is necessary for an authorized engagement or specifically requested or authorized by R3DOUBT.

9. Confidential and Regulated Information

R3DOUBT may encounter confidential, proprietary, regulated, or otherwise sensitive information while performing authorized cybersecurity, compliance, incident-response, digital-forensics, or related services.

Depending on the engagement, this may include information associated with:

  • CMMC;

  • HIPAA;

  • NIST frameworks;

  • Governance, risk, and compliance programs;

  • Government systems;

  • Regulated environments;

  • Security investigations;

  • Incident response; and

  • Other regulatory or contractual requirements.

The specific requirements governing such information will be established through the applicable customer agreement and engagement documentation.

Nothing in this Privacy Policy is intended to modify or replace contractual requirements governing regulated, classified, controlled, proprietary, or otherwise specially protected information.

10. Information Security

R3DOUBT is a cybersecurity company and takes the protection of information seriously.

R3DOUBT maintains administrative, technical, and organizational safeguards intended to protect personal information and other information entrusted to us against unauthorized access, use, alteration, disclosure, or destruction.

The safeguards appropriate to particular information may depend on:

  • The nature and sensitivity of the information;

  • The purpose for which it is processed;

  • The nature of the applicable engagement;

  • Applicable legal and contractual requirements; and

  • The risks associated with the processing.

No method of transmission or storage can be guaranteed to be completely secure. Accordingly, R3DOUBT cannot guarantee that information transmitted to or from our Website or systems will never be subject to unauthorized access or other security incidents.

11. Data Retention

R3DOUBT retains personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, to provide services, maintain appropriate business and financial records, comply with legal and contractual obligations, resolve disputes, enforce agreements, protect our systems, or otherwise fulfill legitimate business purposes.

Retention periods may vary depending on:

  • The type of information;

  • The purpose for which it was collected;

  • Whether the information relates to a customer engagement;

  • Legal or regulatory requirements;

  • Contractual obligations;

  • Security or investigative requirements; and

  • Other legitimate business needs.

Customer engagement information may be retained according to the applicable customer agreement, Statement of Work, security requirements, or other contractual terms.

 

 

12. International Data Processing

R3DOUBT is based in the United States and may provide services to customers in North America and the European Union.

Personal information may therefore be processed, stored, or accessed in the United States or other jurisdictions in which R3DOUBT or its service providers operate.

Where applicable law requires additional safeguards for international transfers of personal information, R3DOUBT will use legally recognized transfer mechanisms and safeguards appropriate to the circumstances.

For individuals in the European Union, R3DOUBT will process personal information in accordance with applicable data-protection requirements to the extent those requirements apply to R3DOUBT's activities.

The applicability of European data-protection laws may depend on the nature of the processing and the relationship between R3DOUBT and the individual or organization involved.

13. European Union Privacy Rights

To the extent the General Data Protection Regulation ("GDPR") or other applicable European data-protection law applies to your personal information, you may have certain rights, subject to applicable limitations and exceptions.

These may include the right to:

  • Request access to personal information;

  • Request correction of inaccurate or incomplete personal information;

  • Request deletion of personal information;

  • Request restriction of processing;

  • Object to certain processing;

  • Request portability of certain personal information;

  • Withdraw consent where processing is based on consent; and

  • Lodge a complaint with a relevant data-protection supervisory authority.

The legal basis for processing personal information may depend on the circumstances and may include:

  • Performance of a contract;

  • Compliance with legal obligations;

  • Legitimate interests;

  • Consent; or

  • Other lawful bases recognized under applicable law.

Where R3DOUBT relies on consent, you may withdraw consent at any time, subject to applicable legal requirements and the consequences of withdrawal.

R3DOUBT does not currently use automated decision-making or profiling to make decisions producing legal or similarly significant effects on individuals through the Website.

 

14. California Privacy Notice

This section applies to California residents and is intended to provide additional information regarding the collection, use, disclosure, and rights associated with personal information under applicable California privacy laws, including the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), to the extent those laws apply to R3DOUBT.

Categories of Personal Information We May Collect

Depending on how you interact with R3DOUBT, we may collect or receive the following categories of personal information:

Identifiers and Contact Information

This may include your name, email address, telephone number, company or organization, and other information you provide when contacting R3DOUBT.

Professional or Employment-Related Information

This may include your job title, company or organization, professional qualifications, employment history, resume information, or other professional information that you voluntarily provide to us.

Internet or Network Information

This may include information associated with your interaction with our Website, such as IP address, browser or device information, and other technical information that may be processed by Website infrastructure or security technologies.

Commercial Information

This may include information concerning services you request, your communications with R3DOUBT, proposals, business relationships, and other information relating to your interactions with R3DOUBT.

Employment-Related Information

If you apply for a position with R3DOUBT, we may collect information contained in your application, resume, employment history, education, qualifications, certifications, references, and related communications.

Sensitive Personal Information

In connection with an authorized cybersecurity, compliance, incident-response, digital-forensics, or other professional-services engagement, R3DOUBT may encounter information that may constitute sensitive personal information under applicable law.

Such information may include account credentials, authentication information, security logs, information relating to security incidents, or other sensitive information contained within systems or materials that R3DOUBT is authorized to assess or investigate.

R3DOUBT does not collect sensitive personal information through its public Website for advertising purposes.

Sources of Personal Information

R3DOUBT may obtain personal information from:

  • You directly;

  • Your employer or organization;

  • Customers or prospective customers;

  • Employment applicants;

  • Business partners;

  • Service providers;

  • Information submitted through our Website;

  • Communications with R3DOUBT; and

  • Information generated through authorized cybersecurity or professional-services engagements.

Purposes for Collecting and Using Personal Information

R3DOUBT may collect and use personal information for the business and commercial purposes described throughout this Privacy Policy, including:

  • Responding to inquiries;

  • Providing requested services;

  • Communicating with customers and prospective customers;

  • Conducting sales and business-development activities;

  • Preparing proposals and contracts;

  • Managing business relationships;

  • Recruiting and evaluating employment applicants;

  • Maintaining and securing our Website and systems;

  • Preventing fraud, abuse, and unauthorized activity;

  • Complying with legal and contractual obligations;

  • Establishing, exercising, or defending legal claims; and

  • Sending marketing communications where permitted by applicable law.

Disclosure of Personal Information

R3DOUBT does not sell or rent personal information.

R3DOUBT may disclose personal information to service providers and other third parties when reasonably necessary to operate our business, provide services, process information on our behalf, comply with legal requirements, protect our systems, or otherwise fulfill the purposes described in this Privacy Policy.

R3DOUBT currently uses third-party service providers including:

  • Microsoft 365, for business email, collaboration, identity, document storage, and related business operations; and

  • DocuSign, for electronic signatures and agreements.

R3DOUBT may also use website hosting, domain, DNS, infrastructure, accounting, financial, legal, professional, and other business-service providers as necessary to operate the company and provide services.

Sale or Sharing of Personal Information

R3DOUBT does not sell personal information for monetary or other valuable consideration.

R3DOUBT does not share personal information for cross-context behavioral advertising based on its current Website and marketing practices.

R3DOUBT does not currently use advertising pixels, behavioral advertising technologies, or third-party analytics platforms for targeted advertising.

Because R3DOUBT does not currently engage in the sale or sharing of personal information as defined by applicable California privacy law, R3DOUBT does not currently provide a "Do Not Sell or Share My Personal Information" mechanism.

If R3DOUBT's practices change in a manner that creates an applicable right to opt out of the sale or sharing of personal information, R3DOUBT will update this Privacy Policy and provide the notices and mechanisms required by applicable law.

California Privacy Rights

Subject to applicable law and certain exceptions, California residents may have the right to:

  • Know/Access: Request information about the personal information R3DOUBT has collected, used, disclosed, or otherwise processed;

  • Correct: Request correction of inaccurate personal information;

  • Delete: Request deletion of personal information collected from or about you;

  • Opt Out of Sale or Sharing: Opt out of the sale or sharing of personal information, where applicable;

  • Limit Certain Uses of Sensitive Personal Information: Request limitations on certain uses or disclosures of sensitive personal information where applicable;

  • Non-Discrimination: Not receive discriminatory treatment for exercising privacy rights provided by applicable law; and

  • Withdraw Consent: Where processing is based on consent, withdraw consent subject to applicable legal requirements.

Certain rights may be subject to exceptions or limitations under applicable law.

How California Residents May Submit a Request

California residents may submit privacy requests by contacting:

privacy@r3doubtsec.com

R3DOUBT currently accepts privacy requests by email.

When submitting a request, please provide sufficient information for R3DOUBT to understand and evaluate your request. R3DOUBT may request additional information reasonably necessary to verify your identity and protect against unauthorized disclosure of personal information.

R3DOUBT will process and respond to qualifying requests within the time periods required by applicable law.

Authorized Agents

Where permitted by applicable California law, you may designate an authorized agent to submit a privacy request on your behalf.

R3DOUBT may require appropriate documentation verifying the agent's authority to act on your behalf and may take reasonable steps to verify your identity before fulfilling the request.

California Consumer Requests and Customer Engagement Information

R3DOUBT provides cybersecurity and related professional services to businesses and government organizations.

In the course of an authorized engagement, R3DOUBT may process information on behalf of a customer rather than for R3DOUBT's own purposes.

Where applicable law treats R3DOUBT as a service provider, contractor, processor, or similar role with respect to customer information, the rights and obligations associated with that information may be governed by the applicable customer agreement and applicable law.

R3DOUBT may therefore be unable to fulfill certain requests directly when the information is controlled by or processed on behalf of a customer. In those circumstances, R3DOUBT may refer the request to the applicable customer or otherwise handle the request as required by applicable law and contract.

California Notice at Collection

Information collected through the R3DOUBT Website's contact form is used to respond to inquiries, conduct sales follow-up, communicate regarding requested services, and for other purposes described in this Privacy Policy.

The Website contact form currently collects:

  • Name;

  • Email address;

  • Telephone number; and

  • Information submitted in the "How Can We Help You" field.

R3DOUBT does not sell or share this information for cross-context behavioral advertising.

This Privacy Policy serves as the primary online notice describing R3DOUBT's applicable privacy practices. Where California law requires a separate Notice at Collection to be provided at or before the point of collection, R3DOUBT will provide the required notice in the applicable location on the Website.

California Children's Privacy

R3DOUBT does not knowingly sell or share the personal information of individuals under 16 years of age.

The R3DOUBT Website and services are intended primarily for businesses, organizations, professionals, and adults.

Changes to California Privacy Information

R3DOUBT may update this California Privacy Notice when our data practices, business operations, Website technologies, or applicable legal requirements change.

The effective date of the Privacy Policy appears at the beginning of this document.

 

15. Privacy Rights and Requests

Depending on where you reside and applicable law, you may have rights concerning personal information R3DOUBT maintains about you.

Requests may include requests to:

  • Access personal information;

  • Correct inaccurate information;

  • Delete information;

  • Restrict or object to certain processing;

  • Obtain a copy of certain information;

  • Withdraw consent where applicable; or

  • Opt out of marketing communications.

Privacy requests should be submitted by email to:

privacy@r3doubtsec.com

R3DOUBT may need to verify your identity before completing certain requests. This is intended to protect personal information and prevent unauthorized disclosure.

R3DOUBT will respond to legitimate privacy requests within the time required by applicable law.

Certain information may be exempt from deletion, access, or other requests where retention or processing is necessary or permitted by applicable law, including for legal, security, contractual, or regulatory purposes.

 

 

16. Children's Privacy

The R3DOUBT Website and services are intended for businesses, organizations, professionals, and other adults.

R3DOUBT does not knowingly seek to collect personal information directly from children through the Website.

If you believe a child has provided personal information to R3DOUBT through the Website without appropriate authorization, please contact us at privacy@r3doubtsec.com.

17. Third-Party Websites and Services

The R3DOUBT Website may contain links to third-party websites, resources, social-media pages, or services.

R3DOUBT does not control the privacy practices of third parties.

When you access a third-party website or service, that third party's privacy policy and terms govern your interaction with that service.

R3DOUBT encourages users to review the privacy practices of third parties before providing them with personal information.

18. Do Not Track and Similar Browser Signals

Some browsers provide "Do Not Track" or similar privacy signals.

Because the R3DOUBT Website does not currently use behavioral advertising or analytics tracking, R3DOUBT does not currently use such signals to provide targeted advertising.

If Website technologies or tracking practices change, R3DOUBT may update this section as appropriate.

19. Changes to This Privacy Policy

R3DOUBT may update this Privacy Policy from time to time to reflect changes in:

  • Our business practices;

  • Website technology;

  • Services;

  • Legal or regulatory requirements;

  • Data-processing practices; or

  • Privacy and security practices.

When we make changes, we will update the "Effective Date" at the beginning of this Privacy Policy.

If a change is material, R3DOUBT may provide additional notice when required by applicable law.

We encourage you to periodically review this Privacy Policy.

20. Contact R3DOUBT

If you have questions about this Privacy Policy, our privacy practices, or wish to submit a privacy request, please contact:

R3DOUBT Security Group LLC
1924 Tabby Way
New Smyrna Beach, FL 32168
Volusia County, Florida

Privacy: privacy@r3doubtsec.com
General: info@r3doubtsec.com

Website: r3doubtsecurity.com

Important Notice

This Privacy Policy is intended to describe R3DOUBT's general privacy practices relating to its Website and business activities. It does not replace or modify contractual obligations governing customer information, cybersecurity engagements, data-processing activities, confidentiality, security requirements, regulated information, or other information subject to a separate agreement.

R3DOUBT recommends that customers review their applicable agreements and engagement documentation for specific requirements governing customer data.

bottom of page