Privacy Notice.

This Privacy Notice explains how I Got Hacked ("IGH," "we," "us") collects, uses, shares and protects personal information when you visit igothacked.com, contact us, call our hotline, or ask about our services. It does not cover the content, systems and data we handle for clients during an engagement. That work is governed by the client's signed agreement, which controls if it differs from this notice.

1. Information we collect

Information you give us: your name, work email, phone number, company and role, the services you ask about, and anything you write in a message, callback request or booking request. If you call our hotline, we collect the number you call from and the details you choose to share. We will tell you at the start of a call if we record it.

Information collected automatically: device and browser type, IP address, pages viewed, the page that referred you, date and time of visits, and approximate location based on IP address, collected through cookies and similar technologies.

Information from other sources: business contact details from public sources and professional networks, and from partners who refer you to us.

What not to send us: please do not send passwords, encryption keys, payment card numbers, health records or other sensitive data through website forms or by email. When you engage us, our team will explain a secure way to share incident material. This website does not currently accept file uploads.

2. How we use information

We use personal information to:

• respond to requests and answer hotline calls;
• scope, propose and provide services;
• schedule calls and meetings;
• send service and account communications;
• operate, secure and improve this website;
• prevent fraud, abuse and security incidents;
• comply with legal obligations and enforce our agreements; and
• send marketing communications where the law allows or you have agreed, which you can stop at any time.

We do not make decisions that have legal or similarly significant effects on you solely by automated means.

3. How we share information

We share personal information with:

• service providers that help us run our business, such as hosting, email, scheduling, customer relationship, security and analytics providers, who may use it only to provide services to us;
• professional advisers and partners such as legal counsel, insurers and forensic or recovery partners, when you ask us to involve them or agree to it;
• authorities and other parties when required by law, subpoena or legal process, or to protect rights, safety and security;
• a successor in a merger, acquisition or sale of assets, subject to this notice; and
• anyone else with your consent.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

4. Cookies and similar technologies

We use cookies and similar technologies to keep the site working, remember settings such as reduced motion, understand how the site is used, and keep it secure. You can block or delete cookies in your browser settings, though some features may not work as intended. If we add analytics or advertising tools, we will update this notice and, where required, ask for your consent. We respond to the Global Privacy Control signal as a request to opt out of sale or sharing where the law requires it.

5. How long we keep information

We keep personal information only as long as needed for the purpose it was collected, to meet legal, accounting and contractual requirements, to resolve disputes and to enforce our agreements. Records of website inquiries are deleted or anonymized when they are no longer needed. Client engagement records are kept under the client agreement and our legal obligations.

6. How we protect information

We use administrative, technical and physical safeguards suited to the sensitivity of the information, including access controls, encryption in transit, and limiting access to people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a breach affecting your personal information, we will notify you and regulators as the law requires.

7. International transfers

We are based in Texas, United States, and may process information in the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards for transfers of personal information.

8. Children

Our website and services are for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

9. Your privacy rights

Depending on where you live, you may have the right to:

• know what personal information we hold about you and receive a copy;
• correct inaccurate information;
• delete your information;
• receive it in a portable format;
• object to or restrict certain processing;
• withdraw consent;
• opt out of sale, sharing or targeted advertising; and
• not be treated unfairly for using these rights.

To make a request, email hello@igothacked.com or call (877) 446-8422. We may need to verify your identity before acting. We respond within the time required by law, generally within 45 days, and will tell you if we need more time. You may use an authorized agent, and you may appeal a decision by replying to our response. If you are in the European Economic Area or United Kingdom, you may also lodge a complaint with your local data protection authority.

10. Notice for California residents

In the past 12 months we may have collected these categories of personal information: identifiers such as name, email address, phone number and IP address; commercial information such as services you asked about; internet activity such as pages viewed; professional information such as company and role; and the contents of your communications with us. We collect them from you, your device and referral partners, and use them for the purposes in section 2. We disclose them to the categories of recipients in section 3 for business purposes. We do not sell or share personal information as those terms are defined under California law, and we have no actual knowledge that we sell or share personal information of anyone under 16.

11. Other websites

Our site may link to other websites. We are not responsible for their content or privacy practices, so please read their notices.

12. Changes to this notice

We may update this notice from time to time. We will post the new version here with a new date and, for material changes, provide additional notice where the law requires.

13. Contact us

I Got Hacked, Texas, United States, email hello@igothacked.com, phone (877) 446-8422, available 24 hours a day, 7 days a week for incident response.