Privacy Policy

This policy explains how PlainScore IT Compliance and Security Group, LLC (“PlainScore,” “we,” “us”) handles information collected through this website. It applies to this website only. Information we receive while performing services for a client is governed by the engagement letter and any data protection terms agreed with that client, not by this policy.

Who we are

PlainScore IT Compliance and Security Group, LLC is a Florida limited liability company located at 432 Mallowbranch Dr, Saint Johns, FL 32259, United States. For information collected through this website, PlainScore is the data controller. You can reach us at info@plainscore.net or 904-257-6241.

What we collect

Information you give us. The only place this site asks you for information is the contact form. When you submit it, we collect:

Your name
Your email address
Your company name, if you choose to provide it
The service area you are asking about
The message you write

Information collected automatically. When you submit the contact form, we store a one-way cryptographic hash of the IP address the submission came from, not the address itself. The hash lets us recognize repeated automated abuse of the form and cannot be reversed to recover your address. The form also contains a hidden field that legitimate visitors never see or fill in; submissions that complete it are discarded as automated.

Like almost every website, this site is served by a hosting provider whose infrastructure may keep standard server logs containing IP addresses, browser type, requested pages, and timestamps for a limited period for security and operational purposes. We do not use those logs to identify or profile visitors.

What we do not collect

No user accounts, logins, or passwords; the site has none.
No analytics, advertising, or tracking cookies, pixels, or scripts.
No third-party scripts, fonts, or embedded content that would let another company observe your visit.
No payment information; nothing is sold through this site.
No precise location, device fingerprinting, or cross-site tracking.

Cookies

This site sets one cookie. It is an essential, session-scoped security token that protects the contact form against cross-site request forgery. It contains no personal information, is not used for tracking, and expires when you close your browser. Because it is strictly necessary for the form to work, no consent banner is shown for it. Blocking it in your browser will prevent the contact form from submitting but will not affect the rest of the site.

How we use information

We use the information from the contact form to:

Respond to your inquiry and follow up on it
Prepare a proposal or engagement if you ask for one
Keep a record of our correspondence with you
Detect, rate-limit, and investigate abuse of the form

We do not use your information to send marketing you did not ask for, we do not build profiles, and we do not make automated decisions about you.

We do not sell personal information and we do not share it with third parties for their own marketing. We disclose it only:

To the hosting and database provider that runs this site, which processes it on our behalf under contract
To professional advisers such as lawyers, accountants, or insurers, where needed
When required by law, subpoena, court order, or a lawful request from a public authority
To protect the rights, property, or safety of PlainScore, our clients, or others
To a successor if PlainScore is merged, acquired, or sells its assets, in which case this policy continues to apply to the transferred information

Retention

Contact form submissions are kept only as long as needed to respond to and follow up on your inquiry. We review stored submissions at least every twelve months and delete those that are no longer needed. If an inquiry leads to an engagement, the related correspondence becomes part of that client file and is kept in accordance with the engagement terms and our record-keeping obligations. You can ask us to delete your submission sooner at any time; see Your rights and choices.

Security

This site is served over HTTPS. Contact submissions are stored in a database with access restricted to PlainScore personnel who need it. The site uses strict security headers, a content security policy that permits only first-party code, request rate limiting, cross-site request forgery protection, and server-side validation of every form field. IP addresses are stored only as one-way hashes. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we apply to our own site the practices we recommend to clients.

Your rights and choices

Whoever you are and wherever you live, you can ask us to:

Tell you what information we hold about you
Correct information that is inaccurate
Delete the information you submitted
Stop contacting you

Send requests to info@plainscore.net. We will need enough information to confirm the request comes from you, normally by replying from the email address you used on the form. We respond within thirty days, or sooner where the law requires it. There is no charge, and you will not be treated differently for exercising these rights.

Visitors in the EEA, UK, and Switzerland

If you are in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation or its UK and Swiss equivalents apply. Our legal bases for processing are: steps taken at your request before entering into a contract (Article 6(1)(b)) for responding to inquiries about our services, and our legitimate interests (Article 6(1)(f)) in running a secure website and keeping business correspondence. We do not rely on consent for the contact form, so there is nothing to withdraw; you simply do not have to submit it.

In addition to the rights above, you have the rights to restrict or object to processing, to data portability, and to lodge a complaint with your national supervisory authority. This site is hosted in the United States, so information you submit is transferred there. The United States has not received a general adequacy decision from the European Commission, and PlainScore is not a participant in the EU-U.S. Data Privacy Framework. We rely on the derogation for transfers necessary for pre-contractual steps taken at your request (Article 49(1)(b)), and we protect the information as described in this policy.

California residents

PlainScore does not currently meet the thresholds that make a business subject to the California Consumer Privacy Act as amended by the California Privacy Rights Act. We nonetheless honor the rights that law gives California residents. In the past twelve months we have collected only the categories listed under What we collect: identifiers (name, email, company) and the content of your message, all provided by you directly. We use them for the purposes listed under How we use information. We have not sold or shared personal information, as those terms are defined in California law, and we do not use or disclose sensitive personal information. You may request to know, correct, or delete your information, and you will not be discriminated against for doing so. Because we do not sell or share personal information, Global Privacy Control and similar opt-out signals have nothing to opt you out of, and there is no “Do Not Sell or Share” link. An authorized agent may submit a request on your behalf with your written permission.

Children

This site is intended for businesses and is not directed to children under sixteen. We do not knowingly collect information from children. If you believe a child has submitted information to us, contact us and we will delete it.

Changes and contact

We will post any changes to this policy on this page and update the date at the top. Material changes will be noted here for at least thirty days. Questions about this policy or about our handling of your information can be sent to info@plainscore.net, by phone at 904-257-6241, or by mail to PlainScore IT Compliance and Security Group, LLC, 432 Mallowbranch Dr, Saint Johns, FL 32259. Our Legal Notices & Service Disclaimers describe the terms of this website and the nature of our assessment services.