ARCHIVED POLICY — effective July 16, 2026; replaced September 26, 2026. For current policy visit https://diamondguards.com/privacy DIAMOND BRIGHT CyberGuard™ ← Marketing site Client Login Diamond Bright CyberGuard Privacy Policy Previous published policy, retained for reference. Effective date: July 16, 2026 Operator: Diamond Bright LLC Site: diamondguards.com Privacy Policy Legal & Terms 1. Who we are Diamond Bright LLC operates Diamond Bright CyberGuard and the public website diamondguards.com, including related client portal and assessment services (collectively, the “Services”). For privacy questions, contact cyberguard@diamondguards.com or call (618) 936-8308. 2. Information we collect Depending on how you use the Services, we may collect: Contact and business details you submit (name, business name, email, phone, industry, service area). Account credentials for client portal access (email, password hash, optional MFA settings). Authorization and scope data you provide for network assessments (authorized subnets, domains, contacts, signatures). Service and billing data needed to process packages, invoices, and payments (including limited payment status from processors such as Stripe). Technical and security data from assessments, remote node jobs, reports, tickets, messages, and audit logs. Website usage data such as basic server logs (IP address, browser/user agent, pages requested, timestamps) for security and reliability. Analytics data collected via Google Analytics 4 (GA4) on our public website and related web surfaces, which may include approximate location (derived from IP), device/browser type, pages viewed, referrers, session timing, and similar usage metrics. Google may process this data under its own terms as our analytics provider. 3. How we use information Deliver cyber risk assessments, reports, monitoring, and client portal features you request. Schedule free or paid assessments, communicate results, and provide support. Operate billing, invoices, and payment confirmations. Secure our systems (authentication, abuse prevention, audit trails, fraud/security monitoring). Understand how visitors use diamondguards.com (and related pages) so we can improve content, navigation, marketing performance, and reliability—using Google Analytics 4 for aggregated traffic and engagement insights. Improve service quality and product reliability, using aggregated or operational insights where appropriate. Comply with law, enforce agreements, and protect the rights and safety of clients and Diamond Bright LLC. 4. Legal bases / business purposes We process information to perform a contract or requested service, with your consent where required (for example, marketing communications or scan authorization), for legitimate security and business operations, and to meet legal obligations. 5. Sharing We do not sell your personal information. We may share information with: Service providers that help us host infrastructure, process payments, send email, schedule appointments, or measure website traffic (for example payment processors, email/SMTP providers, booking tools, and Google Tag Manager / Google Analytics / Google LLC), under their respective terms and our configuration of those services. Your authorized representatives when you invite them to the client portal or designate contacts. Professional advisors or authorities when required by law, court order, or to protect rights, safety, and security. Business transfers in connection with a merger, acquisition, or asset sale, subject to appropriate protections. 6. Assessment and security data Cybersecurity assessments may collect technical findings about networks, assets, vulnerabilities, and configurations within the scope you authorize. This data is treated as confidential client security material. We use it to produce reports, remediation guidance, and managed service deliverables. Public marketing samples are redacted and do not disclose live client data. 7. Cookies, sessions, and analytics We use essential cookies/session storage to keep you signed in, protect forms (including CSRF tokens), and maintain portal security settings. These are required for core service delivery. We also use Google Tag Manager (GTM) and Google Analytics 4 (GA4) on our public website and selected related pages. GTM is the tag container (currently GTM-M59TWWKB unless changed in our configuration) that loads analytics and related measurement tags; GA4 measurement ID is currently G-ETRQXDFLGZ unless changed. These tools may set or read cookies and similar technologies (and may use local storage) to collect usage statistics such as pages visited, approximate geography, device/browser information, and traffic sources. Google processes analytics data according to Google’s privacy policy and product terms. We use GTM/GA4 for site performance and marketing insights—not as a third-party advertising network for selling your personal information. You can limit analytics through browser controls (blocking third-party cookies or scripts), privacy extensions, or Google’s available opt-out mechanisms for Analytics where offered. Essential session cookies for login and security may still be required to use the portal. For more detail on Google’s practices, see Google’s Privacy Policy and Google’s documentation for Analytics. 8. Retention We retain information for as long as needed to provide Services, maintain security evidence and audit history, meet contractual/legal obligations, resolve disputes, and enforce agreements. Retention periods vary by record type (accounts, invoices, assessment evidence, logs). 9. Security We apply administrative, technical, and physical safeguards appropriate to a cybersecurity service provider, including access controls, session protections, and monitoring. No method of transmission or storage is 100% secure; please use strong unique passwords and MFA where offered. 10. Your choices Update account profile and security settings in the client portal where available. Request access, correction, or deletion of personal information, subject to legal and security retention needs. Opt out of non-essential marketing emails by replying or contacting us. Limit Google Analytics via browser settings, script/cookie blockers, or Google’s Analytics opt-out options where available. Close a portal account by contacting support (active engagements may require an offboarding process). 11. Children The Services are intended for businesses and authorized adult representatives, not for children under 13 (or the age of digital consent in your jurisdiction). We do not knowingly collect children’s personal information. 12. International visitors We primarily serve U.S. small businesses. If you access the Services from outside the United States, you understand information may be processed in the U.S. and other locations where we or our providers operate. 13. Changes We may update this Privacy Policy from time to time. The effective date above will change when material updates occur. Continued use of the Services after an update means you acknowledge the revised policy. 14. Contact Privacy requests: cyberguard@diamondguards.com Phone: (618) 936-8308 Web: diamondguards.com Operator: Diamond Bright LLC This page is provided for transparency and operational clarity. It is not a substitute for a lawyer-reviewed contract for complex engagements. For custom MSAs, ROE, or enterprise agreements, contact us. Home Privacy Legal Sample Results Client Portal © 2026 Diamond Bright LLC · diamondguards.com · All rights reserved.