Privacy Policy

Last updated: 2026-04-19

1. Introduction

Encyphir Risk Management Incorporated ("Company," "we," "us," or "our") is committed to protecting the privacy of our clients, prospects, and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you engage with our risk management services, visit our website, or communicate with us.

By using our services or providing us with your information, you agree to the terms of this Privacy Policy. If you do not agree, please refrain from using our services.

2. Information We Collect

We may collect the following categories of personal information:

2.1 Personal Identification Information

Full name, job title, and employer information
Email address, mailing address, and telephone number
Government-issued identification where required for compliance purposes

2.2 Financial and Business Information

Business financial statements, revenue data, and risk exposure profiles
Insurance policy details and claims history
Credit information and banking details for billing purposes

2.3 Technical and Usage Information

IP address, browser type, and device identifiers
Pages visited, time spent on site, and referral URLs
Cookies and similar tracking technologies

2.4 Communications

Records of correspondence via email, phone, or written mail
Information provided in forms, surveys, or assessments

3. How We Use Your Information

We use the information we collect for the following purposes:

To provide, administer, and improve our risk management services
To assess risk exposure and develop tailored risk mitigation strategies
To communicate with you about your account, services, and relevant updates
To comply with applicable laws, regulations, and legal obligations
To detect, prevent, and address fraud, security incidents, or other harmful activity
To conduct internal analytics and improve our business operations
To send transactional communications, service alerts, and important notices

4. Mobile Communications and Text Messaging

We may communicate with you via SMS/text message for purposes such as appointment reminders, service alerts, and account notifications, subject to your prior consent.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

By opting in to receive text messages from us, you acknowledge and agree to the following:

Message frequency may vary depending on the nature of your engagement with our services.
Standard message and data rates may apply as set by your mobile carrier.
You may opt out at any time by replying STOP to any text message we send.
For assistance, reply HELP or contact us directly at the information provided in Section 10.

5. Disclosure of Your Information

We do not sell your personal information. We may share your information only in the following limited circumstances:

5.1 Service Providers

We may engage trusted third-party vendors who assist in delivering our services (e.g., cloud hosting, data analytics, payment processors). These parties are contractually obligated to use your data solely for the purpose of providing services on our behalf and must maintain appropriate security standards.

5.2 Legal and Regulatory Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of our Company, clients, or the public.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

5.4 With Your Consent

We may share your information with third parties when you have provided explicit consent for us to do so.

6. Data Security

We implement industry-standard administrative, technical, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

Encrypted data transmission using TLS/SSL protocols
Access controls and role-based permissions for internal staff
Regular security assessments and vulnerability testing
Secure off-site data backups and disaster recovery procedures

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to take steps to protect your own information and notify us immediately if you suspect unauthorized access.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. When information is no longer required, we securely delete or anonymize it in accordance with our data retention schedule.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

Right to Access: Request a copy of the personal information we hold about you.
Right to Correction: Request that we correct inaccurate or incomplete information.
Right to Deletion: Request that we delete your personal information, subject to applicable legal obligations.
Right to Restrict Processing: Request that we limit the processing of your information in certain circumstances.
Right to Data Portability: Request that we provide your information in a structured, machine-readable format.
Right to Opt Out: Opt out of certain communications or data uses at any time.

To exercise any of these rights, please contact us using the information in Section 10. We will respond to your request within the timeframe required by applicable law.

9. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and understand user behavior. You may configure your browser settings to refuse cookies; however, doing so may limit certain functionality of our website.

We use the following types of cookies:

Essential Cookies: Necessary for the website to function properly.
Analytics Cookies: Help us understand how visitors interact with our site (e.g., Google Analytics).
Preference Cookies: Remember your settings and preferences for a better experience.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Encyphir Risk Management Incorporated

Attn: Privacy Officer

Email: privacy@encyphir.com

Phone: (888) 965-5150

1401 21st St, STE R Sacramento, CA 95811

11. Updates to This Policy

We reserve the right to update or modify this Privacy Policy at any time. If we make material changes, we will notify you by updating the effective date at the top of this document and, where appropriate, by email or a notice on our website. Your continued use of our services following any changes constitutes your acceptance of the revised policy.