How we handle your information.

1. Scope of This Statement

Veilant Access LLC ("Veilant Access," "we," "us," or "our") provides this Privacy Statement to explain how we collect, use, disclose, and safeguard information when you visit our website, submit an inquiry, or engage us for accessibility audit, remediation, or monitoring services. It does not apply to third-party websites you may reach through links on our site, which maintain their own privacy practices.

2. Information We Collect

We collect information in three general categories:

• Information you provide directly — your name, business name, email address, phone number, job title, and the details of your inquiry when you submit a contact or intake form, request a quote, or correspond with us by email.
• Information about the website(s) you ask us to review — the public URLs, staging or development environment access you choose to provide, and any supporting materials (screenshots, prior audit reports, style guides) you share to scope or complete an engagement.
• Automatically collected technical information — standard web server logs (such as IP address, browser type, device type, and pages visited) generated when you browse our site, used only for security monitoring, troubleshooting, and understanding aggregate site usage.

We do not knowingly collect sensitive categories of personal information (such as health, financial account, or government ID numbers) through our website, and we ask that you not include such information in contact form submissions.

3. How We Use Information

We use the information described above to:

• Respond to inquiries and provide requested quotes or consultations;
• Scope, perform, and deliver audit, remediation, and monitoring engagements;
• Send engagement-related communications, such as findings reports and invoices;
• Maintain, secure, and improve our website and service delivery; and
• Comply with our legal, tax, and accounting obligations.

We do not use the information you submit to us for advertising purposes, and we do not sell personal information, as that term is defined under applicable state privacy law.

4. Handling of Your Website Code & Content

When an engagement requires access to your source code, staging environment, or content management system, we treat that material as confidential business information belonging to you. We access only what is necessary to complete the scoped audit or remediation work, we do not use your proprietary code or content to train any third-party artificial intelligence model, and we do not repurpose it for any client other than you. Access credentials you provide are used only for the duration of the engagement and are deleted or revoked once the work is complete, unless you ask us to retain them for an ongoing monitoring engagement.

5. When We Share Information

We do not rent, sell, or trade your personal information or your website's proprietary materials to marketing lists, data brokers, or unrelated third parties. We may share information in limited circumstances:

• Service providers — such as email, invoicing, or scheduling platforms that process data on our behalf under confidentiality obligations, solely to help us operate our business;
• Legal requirements — where disclosure is required to comply with a valid legal process, protect our rights, or address safety or security concerns; and
• Business transfers — in the event of a merger, acquisition, or sale of assets, subject to standard confidentiality protections and this Statement continuing to govern any transferred personal information.

6. Security & Retention

We use reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction, including encrypted transmission and restricted internal access to client materials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We retain personal information and engagement records only as long as reasonably necessary to fulfill the purposes described in this Statement, satisfy legal and accounting obligations, and resolve disputes, after which it is securely deleted or de-identified.

7. Your Rights & Choices

You may contact us at any time to:

• Request access to, or a copy of, the personal information we hold about you;
• Ask us to correct inaccurate information;
• Request deletion of your personal information or engagement records, subject to limited legal or accounting retention requirements; and
• Withdraw consent to future marketing communications at any time.

We will respond to verified requests within a reasonable timeframe, and in any event within the timeframe required by applicable law.

8. Cookies & Analytics

Our website may use minimal, privacy-respecting analytics to understand aggregate visitor trends, such as which pages are most visited. We do not use third-party advertising trackers or cross-site behavioral advertising cookies. Most browsers allow you to block or delete cookies through their settings; doing so should not affect your ability to use the core content of our site.

9. Children's Privacy

Our services are directed at businesses, organizations, and adult professionals. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected such information, we will delete it promptly.

10. State & International Rights (CCPA/GDPR)

Depending on where you are located, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act, or the EU/UK General Data Protection Regulation (GDPR), including rights to know, access, delete, correct, and limit the use of your personal information, and to be free from discrimination for exercising those rights. To exercise any applicable rights, contact us using the details below; we will verify your request and respond within the timeframe required by the relevant law.

11. Changes to This Statement

We may update this Privacy Statement from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page reflects the most recent revision. Material changes affecting how we handle previously collected information will be communicated to active clients directly.

12. Contact Us

Questions about this Privacy Statement, or requests regarding your information, can be directed to privacy@veilantaccess.com or through our contact form.

---

This Privacy Statement is provided for general informational purposes and does not constitute legal advice. Organizations engaging Veilant Access for audit, remediation, or monitoring services should refer to their signed services agreement for terms governing that specific engagement.