Privacy Policy

Effective Date: July 20, 2026
Last Updated: July 20, 2026

PerfectSync Cyber LLC ("PerfectSync," "we," "us," or "our") operates the website located at perfectsync.io and its subdomains, including dev.perfectsync.io (collectively, the "Site"). This Privacy Policy explains what personal information we collect through the Site, how we use it, and the rights available to you.

This policy covers the Site only. If you are an active or prospective client, your engagement with PerfectSync, including any advisory work, due-diligence engagement, or data shared under a signed Master Services Agreement, Statement of Work, or Business Associate Agreement, is governed by that agreement, not by this policy.

1. Who We Are

PerfectSync Cyber LLC is a Miami, Florida-based cybersecurity consultancy.

Registered address: 936 SW 1st Ave Ste #100, Miami, FL 33130
Contact: hello@perfectsync.io

2. Information We Collect

2.1 Information You Provide Directly

  • Contact and intake forms: name, email address, company name, job title, and the content of your message.
  • Newsletter or email opt-in: email address, and name if provided.
  • Client portal access: login credentials, engagement-related documents, and case or matter details you or your organization submit in connection with an active engagement.
  • Payment information: billing name, billing address, and payment details processed on our behalf by Stripe. We do not store full payment card numbers on our own servers.

2.2 Information Collected Automatically

  • Analytics and usage data: pages viewed, referring URL, device and browser type, approximate location (derived from IP address), and time on page, collected through Google Analytics (GA4).
  • Cookies and similar technologies: see Section 5 below.

2.3 Information From Client Engagements

Where an engagement involves review of your organization's systems, security posture, or compliance documentation (including material relevant to HIPAA, ERISA, or M&A due diligence), that information is governed by the applicable signed agreement and, where required, a separate Business Associate Agreement. It is not collected through this Site and is not addressed further in this policy.

3. How We Use Your Information

We use the information described above to:

  • Respond to inquiries submitted through contact or intake forms.
  • Send newsletter content to those who have opted in, and allow opt-out at any time.
  • Operate, secure, and improve the Site.
  • Understand aggregate visitor behavior through analytics.
  • Administer the client portal and process payments for active engagements.
  • Meet legal, tax, audit, and regulatory obligations.

We do not sell personal information, and we do not use Site visitor data to serve third-party advertising.

4. Legal Basis for Processing (EU/UK/EEA Visitors)

Where the General Data Protection Regulation (GDPR) or UK GDPR applies, we rely on the following legal bases:

  • Consent: for newsletter opt-in and non-essential cookies.
  • Legitimate interest: for responding to inquiries, securing the Site, and analytics used to improve it.
  • Contract performance: for client portal access and payment processing tied to an active engagement.
  • Legal obligation: where retention or disclosure is required by law.

You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Cookies and Tracking Technologies

The Site uses:

  • Essential cookies: required for the Site and client portal to function; these cannot be disabled without impairing functionality.
  • Security cookies: Google reCAPTCHA, used to protect our contact form from spam and abuse. These are essential to Site security and cannot be disabled without impairing functionality.
  • Analytics cookies: Google Analytics (GA4), used to understand visitor behavior in aggregate. GA4 may set cookies and collect data as described in Google's own privacy documentation.

Where required by law (including under GDPR and ePrivacy rules), we will request consent before setting non-essential cookies via a cookie banner. You can also control cookies through your browser settings.

6. How We Share Your Information

We share personal information only with:

  • Service providers who support Site operation, including our hosting provider (Hostinger), analytics provider (Google Analytics), security provider (Google reCAPTCHA), payment processor (Stripe), and email/newsletter platform (Beehiiv). These providers are contractually restricted from using your data for their own purposes.
  • Legal and regulatory authorities, where disclosure is required to comply with law, enforce our Terms and Conditions, or protect the rights, property, or safety of PerfectSync, our clients, or others.
  • Successors, in the event of a merger, acquisition, or asset sale, subject to this policy or a materially equivalent one.

We do not sell or share personal information for cross-context behavioral advertising, as those terms are defined under CCPA/CPRA.

7. Data Retention

We retain:

  • Contact form submissions and newsletter subscriptions for as long as needed to respond to your inquiry or until you unsubscribe, plus a reasonable period for record-keeping.
  • Analytics data per the retention window configured in our Google Analytics (GA4) property, currently set to [Insert: check GA4 Admin → Data Settings → Data Retention].
  • Client portal and payment data for the duration of the engagement plus any period required by contract, tax, or regulatory retention obligations.

8. Data Security

We apply technical and organizational safeguards appropriate to a firm whose own business is cybersecurity, including TLS encryption in transit, restricted administrative access, and a hardened server configuration. No system is completely secure, and we cannot guarantee absolute security of information transmitted to or from the Site.

9. Your Privacy Rights

9.1 If You Are in the EU, UK, or EEA (GDPR)

You have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion, subject to legal retention requirements.
  • Restrict or object to certain processing.
  • Receive your data in a portable format.
  • Lodge a complaint with your local data protection supervisory authority.

To exercise these rights, contact us at hello@perfectsync.io.

9.2 If You Are a California Resident (CCPA/CPRA)

You have the right to:

  • Know what personal information we have collected, used, and disclosed about you in the preceding 12 months.
  • Request deletion of personal information, subject to legal exceptions.
  • Correct inaccurate personal information.
  • Opt out of the sale or sharing of personal information. PerfectSync does not sell or share personal information as those terms are defined under CCPA/CPRA.
  • Limit the use of sensitive personal information. We do not use sensitive personal information for purposes beyond what is necessary to provide our services.
  • Not receive discriminatory treatment for exercising any of these rights.

To exercise these rights, contact us at hello@perfectsync.io. We will verify your request using the information reasonably available to us before responding.

9.3 All Other Visitors

Regardless of location, you may contact us at any time to ask what information we hold about you or to request its deletion, and we will respond consistent with applicable law.

10. International Data Transfers

Where personal information is transferred from the EU, UK, or EEA to the United States, we rely on appropriate safeguards, including Standard Contractual Clauses where required.

11. Children's Privacy

The Site is directed at business professionals and is not intended for individuals under 18. We do not knowingly collect personal information from children.

12. Third-Party Links

The Site may link to third-party websites, including MergeSentinel or partner resources. This policy does not apply to those sites, and we are not responsible for their privacy practices.

13. Changes to This Policy

We may update this policy from time to time. The "Last Updated" date at the top reflects the most recent revision. Material changes will be reflected on this page.

14. Contact Us

Questions about this policy or your personal information can be directed to:

PerfectSync Cyber LLC
936 SW 1st Ave Ste #100, Miami, FL 33130
hello@perfectsync.io

This policy describes PerfectSync's data practices in connection with the perfectsync.io website. It is not legal advice and should be reviewed by qualified counsel prior to publication, particularly regarding GDPR representative obligations, current data retention windows, and the specific third-party processors in use.