Privacy Policy - Id Zero

2.1 Website Contact Information

We collect only the information you voluntarily provide through our website contact forms and inquiries:

• Name: Your first and last name for identification and communication
• Email Address: Your business email address to respond to inquiries
• Organization: Your company or organization name
• Message Content: Any inquiry details, service requests, or information you choose to share

We do not use tracking cookies, analytics tools, or purchase data from third parties for our website.

2.2 Professional Service Data

When providing enterprise cybersecurity services under separate service agreements, we may need to access or process technical data from your systems, including:

• Identity System Configuration: Active Directory structures, Entra ID configurations, user account hierarchies, and group memberships
• Security Policy Data: Authentication policies, access controls, privilege assignments, and security settings
• System Logs: Identity-related logs, authentication events, and security incident data
• Technical Metadata: System diagnostics, performance data, and configuration backups related to identity management

Important Service Data Notes:

• Access is provided only under explicit written authorization in service agreements
• Data is accessed solely to perform contracted cybersecurity services
• We implement enterprise-grade security controls during all data access
• Service data handling is governed by individual client contracts and confidentiality agreements

3.1 Website Information

We use contact information to:

• Respond to service inquiries and consultation requests
• Communicate about our cybersecurity capabilities and services
• Provide preliminary assessments and recommendations
• Schedule consultations and service discussions

3.2 Service-Related Data

We use technical system data exclusively to:

• Perform contracted identity security assessments and implementations
• Deliver Active Directory and Entra ID hardening services
• Implement Enterprise Access Model architectures
• Provide security monitoring and incident response services
• Generate compliance reports and security documentation
• Deliver ongoing support for implemented solutions

4.1 Website Data Protection

We implement appropriate technical and organizational measures to protect your contact information against unauthorized access, alteration, disclosure, or destruction.

4.2 Enterprise Service Data Protection

For client system data, we implement enhanced security controls including:

• Encrypted connections and secure access protocols compliant with industry standards
• Multi-factor authentication and privileged access management
• Role-based access controls on a strict need-to-know basis
• Compliance with relevant security frameworks (NIST, MITRE ATT&CK, Essential 8)
• Regular security assessments of our own infrastructure and processes

While we implement comprehensive security measures, no method of data transmission or storage is completely secure.

6.1 Contact Information

We retain your contact information only as long as necessary to respond to inquiries and maintain our business relationship. You may request deletion of your contact information at any time.

6.2 Service Data

Client system data is handled according to the terms specified in individual service agreements. We typically do not retain client data longer than necessary to complete contracted services, unless ongoing support or compliance requirements necessitate retention.