Privacy Policy

Last updated: June 20, 2026

Stonegate Compliance ("we," "us," "our") respects your privacy. This policy explains what information we collect through stonegatecompliance.com, why we collect it, and how we handle it. We keep it plain on purpose: a firm that advises on security should be clear about its own.

Information you give us

When you use our contact form, we collect what you choose to submit: your name, company, email, phone number, preferred contact method, and any optional details about your company size, the CMMC level you think you need, or your situation. We use this information only to respond to you, arrange a call, and discuss or provide the services you ask about.

Please do not send sensitive information through this website. Do not submit Federal Contract Information (FCI), Controlled Unclassified Information (CUI), passwords, or detailed descriptions of your security weaknesses through the contact form or by email. If we work together, we will set up a separate, secured channel for anything sensitive.

The free CMMC self-assessment checklist stores your answers only in your own browser (local storage on your device); we do not receive them unless you choose to email yourself a copy. If you use the "email a copy" option, the email address and the answers you entered are transmitted through our email provider (Resend) to deliver the copy to you and to let us follow up.

Information collected automatically

As with most websites, our hosting and security providers automatically record basic technical information when you visit, such as your IP address, browser and device type, the pages you view, and the date and time. This is used to operate the site, keep it secure, and prevent abuse.

Cookies and tracking

We do not use advertising cookies, and we do not track you across other websites. Our infrastructure provider may set strictly necessary cookies for security and bot protection. Any site analytics we use are privacy-focused: they do not rely on tracking cookies and do not sell your activity.

Who we share it with

We do not sell your information. We share it only with the service providers we use to run the site and respond to you, and only as needed to do so:

• Cloudflare hosts the site and provides content delivery, security, bot protection (Turnstile), and email routing.
• Resend delivers the email generated by our contact form.
• Google provides the inbox that receives your message.

These providers process your information on our behalf under their own privacy terms. We may also disclose information if required by law.

How long we keep it

We keep the information you send only as long as we need it to respond to you and, if you become a client, to provide and document our services. If you would like us to delete an inquiry, just ask.

How we protect it

We collect only what we need, limit who can access it, serve the site over encrypted connections (HTTPS), and use reputable providers. Protecting information is the core of what we do, and we hold our own handling to the same standard we help clients meet.

Your choices

You can ask us what information we hold about you, ask us to correct it, or ask us to delete it. Email us at hello@stonegatecompliance.com and we will help. Depending on where you live, you may have additional rights under your local privacy laws; contact us and we will work with you in good faith.

Changes to this policy

We may update this policy as our practices or the law change. When we do, we will revise the "last updated" date at the top of this page.

Contact

Questions about this policy or the information we hold? Email hello@stonegatecompliance.com.