Last updated: June 2026
Privacy policy
🔒 The short version
We only collect what we need to run the assessment and deliver your report. We don't share or sell it. If you'd like it deleted, just ask.
What we collect
When you take the assessment we collect your email address (to deliver your score and report), and your answers to the 65 assessment questions. If you purchase the full report we collect order details including your name and payment information, which is processed securely through Shopify Payments — we never see or store your full card number.
We also collect basic analytics — pages visited, time on site, referral source — to understand how people find us. This is aggregated and never tied to your identity.
How we use your information
Your email is used to send your score, and — if you buy the report — to deliver it. We may send one follow-up to ask if the report was helpful. That's it. You can unsubscribe at any time with one click.
Your assessment answers are used to generate your report and score. We may use aggregated, anonymized data (never tied to you personally) to improve the assessment.
What we don't do
We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not use your data to target you with advertising. We do not send unsolicited sales calls or emails. Your data stays with us and our essential service providers (Shopify for payments, email delivery) — full stop.
Data retention
We retain your assessment data and email for up to 24 months. You can request deletion at any time by emailing privacy@crjsecurity.com and we will remove it within 14 days.
Cookies
We use minimal, essential cookies required for the site and checkout to function. We use analytics cookies to understand site usage in aggregate. We do not use advertising or tracking cookies.
Your rights
You have the right to access, correct, or delete your personal data at any time. If you're in Canada, you have rights under PIPEDA, including the right to data portability and the right to object to processing. To exercise any of these rights, email privacy@crjsecurity.com.
Contact
Questions about this policy? Email us at privacy@crjsecurity.com. We aim to respond within two business days.
Ready to see where your business stands?
Get my free security score →