Privacy policy

This policy covers castilesecurity.com: what we collect when you visit or fill out a form here, and what we do with it. It does not cover the systems we manage for clients under a service agreement, and it does not cover client assessment work under a separate agreement. Breach Scout’s free Quick Scan is described below.

Information we collect

When you browse this site, we collect the usual technical details: pages viewed, approximate location from your IP address, device and browser type, and how you arrived here. When you submit a form, book a call, or run the free scan, we collect what you type in: your name, email, phone number, company, and any message you provide. Breach Scout derives the Quick Scan domain from your verified work email.

We do not collect payment information on this site. We do not knowingly collect information from anyone under 13.

How we use it

To respond to what you asked for: a call back, a scan result, an answer to a question. To understand which pages are useful and which are not, so we can improve them. To follow up about our services, which you can opt out of at any time by replying to any email or telling us directly.

We do not sell your information. We do not share it with anyone outside Castile Security except the service providers below, and only so they can do the job we hired them for.

Optional analytics and your choice

Our optional Google Analytics, HubSpot website tracking, and Microsoft Clarity scripts load only after you choose “Allow analytics.” Declining does not prevent you from contacting us or booking a call. Use “Analytics preferences” in the footer to change your choice. We remember it in your browser for up to 180 days; if browser storage is unavailable, we ask again on the next page.

• Google Analytics. Measures page views and successful embedded bookings or contact submissions. This integration excludes form contents, names, email addresses, booking identifiers, and advertising click identifiers. Page and referrer URLs omit query strings; supported campaign labels are included. Google advertising signals and ad personalization are disabled.
• HubSpot website tracking. Helps connect visits with inquiries and existing CRM records. This is separate from the contact form, which processes information you submit even when analytics is declined.
• Microsoft Clarity. Provides heatmaps and session recordings of site interactions to help us find confusing pages. Advertising storage consent is denied.

Withdrawing consent disables Google Analytics, tells HubSpot to stop tracking, stops Clarity recording, and removes accessible first-party analytics cookies. It does not erase data already sent to providers. If you allow analytics again on the same page, Clarity recording resumes on your next page visit. Your form entries are not cleared or reloaded when you change your preference.

Functional HubSpot forms and Calendly booking still load their provider resources and may use cookies needed for those services. Calendly provides its own cookie settings. These embedded services and hosting/security services are separate from the optional analytics preference. The optional Cloudflare Web Analytics beacon is not loaded by this website.

Learn how Google uses information from partner sites, or read HubSpot’s privacy policy and Microsoft’s privacy statement.

Campaign information in links

Links can carry campaign source, medium, name, search term, and content tags, along with which button you used. We retain campaign tags with contact inquiries in HubSpot and pass them to Breach Scout or Calendly to understand how visitors reach our services. Advertising click identifiers may pass through website links to Breach Scout’s entry page; they are not forwarded to Calendly by this website. This link handling does not add cookies or browser storage.

Other services we use

Booking a call runs through Calendly. Filling out the contact form or a lead form runs through HubSpot. The site itself is hosted on Netlify. Each of these providers processes the information you give them under their own privacy policy in addition to this one.

Breach Scout Quick Scan

The free Quick Scan verifies your work email and checks public email and website settings for its domain. Your email and results are available to Castile Security to help interpret the findings. If you request a review, your verified email, name, and message are saved to the Castile workspace and sent to its configured notification recipients. No marketing subscription is required to verify your email or view findings. See what to expect from your scan. Paid assessments are scoped separately.

Data retention and security

We keep the information you give us for as long as we have an active relationship with you, and for a reasonable period after in case you come back or a legal or contractual reason requires it. We use standard technical and organizational safeguards to protect it. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security, but protecting information like this is the business we are in.

Your rights and choices

You can ask us what information we hold about you, ask us to correct it, or ask us to delete it, subject to what we are required to keep for legal or accounting reasons. Depending on where you live, you may have additional rights under laws like the California Consumer Privacy Act or the GDPR. To exercise any of these, contact us using the details below.

Children's privacy

This site is intended for business use. We do not knowingly collect information from children under 13, and if we learn that we have, we will delete it.

Changes to this policy

We will update this page when what we do changes, and update the date at the top when we do. We will not make a material change to how we handle information you already gave us without telling you.

Contact us

Questions about this policy or your information: email support@castilesecurity.com or call (915) 995-2495.