Privacy Policy

1. Who we are

This website, adamscloudcyber.com, is operated by Adams Cloud and Cybersecurity LLC, a California limited liability company ("we," "us," or "our"). This policy covers this website and the forms, downloads, purchases, newsletter, and emails that run through it. It does not cover other websites that we link to.

2. What we collect

Contact, intake, and assessment forms

When you submit a contact, business inquiry, intake, Cybersecurity Maturity Model Certification (CMMC) self-assessment, Health Insurance Portability and Accountability Act (HIPAA) practice scoping, or contract review request form, we receive what you enter. This usually includes your name, email address, telephone number, organization name, and a description of what you need. The assessment forms may also ask about the size and type of your organization and your systems. Depending on the form, we may also ask for your military status, branch of service, military occupation, years of service, security clearance level, LinkedIn profile, city and state, budget range, answers about your organization's security posture and compliance status, and details of a contract. Please enter only what you are comfortable sharing. We receive these submissions by email.

Free tools and the HIPAA Security Risk Quick Check

The answers you give to the Quick Check questions and the other free calculators stay in your web browser. They are not sent to us. If you choose to use the optional follow-up form on a tool page, we receive the contact details you enter and a summary of your results so that we can respond.

HIPAA Evidence Binder download

To download the HIPAA Evidence Binder guide, you enter your first name, your email address, and, if you choose, your practice name. You may also check a separate, unchecked-by-default box to receive our newsletter. We store this request in a database and email you a link to the guide. We also send three short follow-up emails over the next two weeks about using the binder; each one has an unsubscribe link, and unsubscribing stops the rest. We also record technical details about the request: the date and time, your internet protocol (IP) address, your browser and device type, and the page you came from. We use these details to detect abuse and to keep a record of the request. The form includes a hidden field that people do not see. If it is filled in, we flag the request as possibly automated, but we still keep it.

Purchases

When you buy the HIPAA Evidence Binder Kit, you pay on a checkout page run by Stripe, Inc. Stripe collects your card and billing details on its own page. We never see or store your card number. We receive and store your name, your email address, your practice name if you entered one, the amount paid, an order reference, Stripe payment identifiers, and the time of the order. We keep these in our database, and we email you download links that expire after 7 days. When you download a kit file, we record the time, your IP address, your browser type, and the file name with your order, to confirm delivery and to respond to refund requests and payment disputes. Each downloaded file is marked with your practice name, email address, and order reference to identify the licensed practice.

Newsletter

If you subscribe to our newsletter, we collect your email address and, if you give it, your first name. We use a two-step process. We first send a confirmation email, and we add you to the mailing list only after you click the confirmation link. We keep the date you subscribed, the date you confirmed, and, if you later unsubscribe, the date you unsubscribed.

Contract review documents

If you ask us to review a contract, we send you a private upload link. Documents you upload are stored in a private storage area, are used only to perform the review, and are deleted automatically about 7 days after upload. Please remove or redact personal information that is not needed for the review.

Email and telephone

If you email or call us, we keep the messages and any notes we make so that we can follow up and keep a record of our work with you.

Information collected automatically

• Google Analytics. We use Google Analytics to understand how visitors use the site. See section 5.
• Hosting and security. Our site is delivered through Amazon Web Services (AWS), including its content delivery network and web application firewall. These services process your IP address and request details (such as the page requested and your browser type) to deliver pages and to block abusive traffic.
• Security reports. Your browser may automatically send us a brief report, including the page address and a description of the blocked item, if something on a page breaks our security rules. We use these reports to fix problems.
• Third-party images. Some pages show images, such as the Better Business Bureau seal, that load from the servers of the organization that provides them. Those organizations receive your IP address when your browser requests the image.

What we ask you not to send

Please do not enter patient information, protected health information, Social Security numbers, payment card numbers, or passwords in any form on this website. Purchases are made on Stripe's checkout page, not in a form on our site. If you need to share sensitive material for an engagement, contact us first and we will arrange an appropriate method.

3. How we use your information

• To respond to your questions and requests, and to provide the services, tools, and downloads you ask for.
• To send you the newsletter, if you subscribed and confirmed.
• To follow up about a request you made. We may send you one personal follow-up email about your request. We do not add you to a marketing list unless you ask to be added.
• To understand which pages are useful and to improve the site.
• To process and deliver orders and to keep tax and accounting records.
• To protect the site, our systems, and our customers from spam, fraud, and other abuse.
• To meet legal, tax, and contractual obligations and to keep business records.

4. Who we share it with

We do not sell your personal information. We do not share it with others for their own marketing or for cross-context behavioral advertising.

We use a small number of service providers who process information for us, only to help us run the site and our business. The categories of third parties are:

• Cloud hosting, database, and email delivery providers. Amazon Web Services hosts this site, stores form submissions and subscriber records, and delivers our email.
• Email and office productivity providers. Form notifications and our correspondence with you pass through our email accounts.
• Analytics provider. Google provides Google Analytics.
• Payment processor: Stripe, Inc. Stripe collects and processes payment on its own checkout page. See the Stripe Privacy Policy.

We may also disclose information when the law requires it, to respond to valid legal process, to protect the rights, property, or safety of our business or others, or as part of a sale, merger, or transfer of our business, in which case the information would remain subject to this policy or a policy at least as protective of it.

5. Cookies and Google Analytics

This site uses Google Analytics 4 to measure traffic. Google Analytics uses cookies and similar technologies to recognize a browser across visits and to collect information such as the pages you view, how you arrived at the site, your browser and device type, and your approximate location. Google uses IP addresses to provide and protect the service and to estimate where visitors are located. We use this information in aggregate to understand and improve the site. We do not use it to identify individual visitors, and we do not send names or email addresses to Google Analytics.

Google may collect information about your online activity over time on this site when you use it. To learn how Google handles this information, see How Google uses information from sites or apps that use our services and the Google Privacy Policy.

You can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on, or by blocking or deleting cookies in your browser settings. Blocking cookies may affect how some websites work, but our site is designed to remain usable without them.

6. "Do Not Track" signals

Some browsers send a "Do Not Track" signal asking websites not to track the visitor. There is no common standard for how a website should respond to these signals, and this site does not currently change its behavior when it receives one. We do not track you across other websites or online services to build a profile of your activity. Google is the main third party that collects information about your activity on this site over time, through Google Analytics. Google may recognize your browser across other sites that use its services, as described in Google's policy. The Better Business Bureau seal image, Stripe checkout, and our hosting provider also receive standard web requests, such as your IP address and browser type, when your browser loads their content or pages. Section 5 explains how to opt out of Google Analytics.

7. Where and how we store information

Form submissions, subscriber records, and downloads are stored with AWS in data centers in the United States. Our email is handled by providers that operate in the United States. If you visit from outside the United States, your information will be transferred to and processed in the United States.

8. How long we keep information

• Contact and inquiry messages, and correspondence: up to three years after our last contact with you, or longer if you become a client or if we need the record for legal, tax, or contractual reasons.
• Order records: seven years, for tax and accounting purposes.
• Evidence Binder download requests: up to two years after the request, removed by an automatic expiry, unless you become a client or ask us to delete them sooner.
• Newsletter subscribers: until you unsubscribe. After you unsubscribe we keep your email address and the date of your request on a suppression list, so that we do not email you again.
• Unconfirmed newsletter sign-ups: deleted automatically about 30 days after sign-up if you do not click the confirmation link.
• Contract review documents: deleted automatically about 7 days after upload.
• Google Analytics data: for the retention period configured in our Google Analytics account.
• Server and security logs: for the periods set by our hosting providers.

9. Your choices and requests

Email choices

Every newsletter and marketing email we send includes an unsubscribe link in the footer. Selecting the link removes you from the list, and it takes effect right away. We will honor any opt-out request, including one sent by reply or to the address in section 15, within 10 business days, and we do not charge a fee or require anything beyond your email address to opt out. If you did not confirm a subscription, you are not added to the list.

Some emails are not marketing. For example, the email that delivers a purchase, or a reply to a question you asked, is part of providing what you requested. Those messages may not include an unsubscribe link, but you can tell us at any time if you do not want further email from us. The email that delivers the free HIPAA Evidence Binder guide includes an unsubscribe link.

Access, correction, and deletion

You may ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Send the request to thabiti@adamscloudcyber.com from the email address you used with us. We may ask you to confirm that you control that address before we act on the request. We aim to respond within 30 days. We may keep information that we are required or permitted to keep for legal, tax, security, or contractual reasons, and we will tell you if that applies.

10. California residents

Our site follows the California Online Privacy Protection Act by posting this policy, describing the categories of personal information we collect and the categories of third parties that may receive it, describing how you can review and request changes to your information, stating how we notify you of changes, and stating our approach to "Do Not Track" signals. Based on our size, we do not believe the California Consumer Privacy Act currently applies to our business; we honor access, correction, and deletion requests anyway. We do not disclose personal information to third parties for their direct marketing purposes.

11. How we protect information

We take reasonable administrative, technical, and physical measures to protect personal information. These include using encrypted connections (HTTPS) on this site, limiting who can access stored information, and storing it with providers that apply security controls. No website, storage system, or method of transmission can be guaranteed to be completely secure, so we cannot promise absolute security. If a breach involving your personal information occurs, we will notify you and the authorities as the law requires.

12. Children

This website is intended for business owners, professionals, and organizations. It is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, please contact us and we will delete it.

13. Links to other websites

This site links to other websites, including government and standards bodies. We do not control those sites and are not responsible for their privacy practices. Please read their policies.

14. Changes to this policy

We review this policy from time to time. When we change it, we post the updated version on this page and change the effective and last updated date at the top. If we make a material change, we will also email a notice to people who are subscribed to our newsletter. We encourage you to review this page periodically.

15. Contact us

Questions about this policy, or requests about your information, can be sent to:

Effective November 3, 2026, last updated November 4, 2026.