Skip to Content

The Practical Matters of CMMC-Join our Latest Webinar on Considerations and Challenges in Pursuing Certification Register Now

Privacy Policy

This website is administered by Tevora.

Summary

Tevora is committed to protecting your personal information. This Privacy Policy (the “Privacy Policy”) relates to our collection, use, disclosure, transfer, and storing of your personal information when accessing our online services. It also relates to our use of any personal information you provide to us by phone, SMS, email, IM/chat, in letters and other correspondence, and in person. We will also provide an option to opt out whenever requesting information that may be shared. 

Our Privacy Notice below is designed to inform you about the information we collect, how we use this information, the security we use, any sharing of your information, and your rights in relation to this personal information in order to comply with the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CPRA”), EU GDPR, and other government regulations related to data privacy. 

For U.S. residents, we apply privacy protections consistent with CPRA, and extend those standards, where feasible, to residents of other U.S. states with applicable privacy laws. 

Personal data we collect

We collect personal information from you for the following purposes:

Categories of personal information we may collect include identifiers (such as name, email address, IP address), professional or employment-related information, internet or other electronic network activity information (such as browsing behavior on our website), commercial information, and in limited circumstances, inferences drawn from the above categories. 

Some cookie-based advertising practices may constitute ‘sharing’ for cross-context behavioral advertising under California law. We do not sell personal information for monetary compensation; however, certain practices may qualify as ‘sale’ or ‘sharing’ under applicable privacy laws. 

We do not knowingly collect or process sensitive personal information (as defined under applicable law), such as precise geolocation, biometric identifiers, or government-issued identification numbers, through our website except where voluntarily provided and necessary for a specific business purpose. 

We collect personal information from you for the following purposes:

  • To access certain areas or services of this website or so that we can send you information that you request regarding our products and services, you may be asked to provide personal information (such as your name, telephone number, and email address). This information is used to communicate with you, respond to your requests for the purposes for which you submitted the information, or to improve our products and services. 
  • This website may use third party cookies or tracking technologies to support marketing and analytics. These tools may collect data like IP address and browsing behavior. We are committed to privacy compliance and do not deploy tracking technologies without appropriate notice and user consent. You may manage your preferences through your browser settings or our website cookie pop-up. 
  • We may, from time to time, contact you to notify you of a particular offering that may be of interest to you. If you do not wish to receive information about our products and services, please let us know by contacting us. 
  • We may record telephone conversations to offer you additional security, resolve complaints, and improve service standards. 
  • We may record visitor information in our workplaces to offer you additional security, resolve complaints, and improve service standards. 

How we use your personal data

The personal information we collect is for specified purposes and services we provide to you including:

  • providing our services, activities, or online content and information about them; 
  • dealing with your requests and inquiries, including where we have a commercial relationship in place; 
  • internally supporting the growth and sustainability of our business; 
  • assessing how to improve the services we provide to you;  
  • deciding how best for us to communicate with you; 
  • preventing fraud; and 
  • complying with legal obligations. 

We use your personal information only for the purposes it was collected. We do not use your personal information for any different purpose other than for what it was obtained without notifying you and seeking your permission first. We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, to comply with legal obligations, resolve disputes, and enforce our agreements.

Sharing your personal data

We will only share your information with Tevora-authorized third parties for specific purposes related to the services we are offering you such as through our account management database. We do not allow third parties to use your personal information for any other purpose. 

We may have to share your personal data as required with regulatory authorities or with law enforcement agencies. 

We periodically appoint digital marketing agents to conduct marketing activity on our behalf, such activity may result in the compliant processing of personal information. 

We may use other companies and individuals that are compliant with processing of personal information to work on our behalf or to review information in order to help us make decisions for the benefit of Tevora and its customers. This may include statistical analysis, market research, IT processing, insurance providers, and credit agencies. 

We make commercially reasonable efforts to ensure that our affiliates and business partners protect your information consistent with this Privacy Policy. 

To deliver products and services to you, it is sometimes necessary for us to transfer your personal information to places outside your home country or region, where it may be stored and processed.  If this happens, we will ensure that the transfer is compliant with all information protection laws and all personal information is secure. By submitting your personal information to us, you agree to the transfer, storing, or use of your information outside your home country or region in the manner described above. 

Privacy Notification on Human Resources New Hire Data Collection: No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. 

Automated Processing and Artificial Intelligence

We may use automated technologies, including artificial intelligence, machine learning, and similar analytical tools, to support and improve our services, operations, and website functionality. These technologies may be used to: 

• analyze website usage and engagement; 
• detect fraud, security threats, or suspicious activity; 
• improve service delivery, cybersecurity, and system performance; 
• evaluate service effectiveness and marketing performance; and 
• support internal analytics and operational decision-making. 

Where automated processing involves personal information, we take steps designed to ensure that such processing is conducted responsibly and in accordance with applicable privacy laws. 

Automated processing tools are generally used to assist human decision-making and are not used to make solely automated decisions that produce legal or similarly significant effects concerning individuals, unless permitted by applicable law. 

Where required under applicable privacy laws, individuals may have the right to: 
• request information about our use of automated decision-making technologies, 

• question the result of automated decisions that produce legal or similarly significant effects and request a human review of such decisions 
• request access to personal information used in automated processing, and 
• request correction or deletion of personal information used in such processing. 

We implement reasonable safeguards designed to ensure that automated systems are monitored, tested, and used in a manner consistent with our privacy and security commitments.

Your U.S. State Privacy Rights

Residents of certain U.S. states, including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Delaware, and New Jersey, may have specific rights regarding their personal information under applicable state privacy laws. 

Where applicable, these rights may include the right to: 

Right to Know / Access 
Request confirmation of whether we process your personal information and obtain access to the personal information we maintain about you, and request a list of the specific third parties to whom we have disclosed your personal information. 

Right to Data Portability 
Request a copy of personal information you previously provided to us in a portable and readily usable format. 

Right to Correction 
Request that we correct inaccurate personal information that we maintain about you. 

Right to Deletion 
Request that we delete personal information we have collected about you, subject to certain legal exceptions. 

Right to Opt Out of Sale or Sharing 
Request that we stop selling or sharing your personal information for purposes such as cross-context behavioral advertising. 

Right to Opt Out of Targeted Advertising or Profiling 
Request that we stop using your personal information for targeted advertising or certain types of profiling. 

Right to Limit Use of Sensitive Personal Information (California Residents) 
California residents may request that we limit the use and disclosure of sensitive personal information to uses necessary to provide requested services or as otherwise permitted by law. 

Right to Non-Discrimination 
We will not discriminate against you for exercising any privacy rights provided under applicable law. 

Exercising Your Privacy Rights 
To exercise any applicable privacy rights, you may contact us using the contact information in the “Contact Us” section provided in this Privacy Policy. We may need to verify your identity before processing certain requests to ensure that personal information is protected and disclosed only to the appropriate individual. 

Depending on applicable law, you may also have the right to designate an authorized agent to submit a request on your behalf. 

Appeals 
Residents of certain states may have the right to appeal a decision regarding a privacy request. If we deny your request, you may contact us to appeal that decision using the contact information in the “Contact Us” section provided in this Privacy Policy. 

California “Shine the Light” Law 
California residents may request information regarding certain disclosures of personal information to third parties for their own direct marketing purposes under California Civil Code Section 1798.83. 

Targeted Advertising and Opt-Out Rights

We may use cookies, pixels, analytics tools, and similar tracking technologies that may collect information about your interactions with our website or services. This information may be used for purposes such as: 

• website analytics and performance measurement; 
• marketing and advertising effectiveness; and 
• delivering relevant advertising content. 

Some of these activities may be considered “targeted advertising,” “sharing,” or “selling” personal information under certain U.S. state privacy laws. 

Where required by law, you have the right to opt out of: 
• the sale of your personal information; 
• the sharing of personal information for cross-context behavioral advertising; and 
• the use of personal information for targeted advertising. 

 
Where legally required, we recognize Global Privacy Control (GPC) signals sent by your browser as a request to opt out of the sale or sharing of personal information for targeted advertising purposes. You may exercise your opt-out rights by: 
• adjusting cookie settings within your browser; 
• using available website cookie preference tools where provided; or 
• contacting us using the contact information provided in this Privacy Policy. 

Please note that opting out may not stop all advertising but may limit advertising that is based on your personal information. 

Keeping your personal data secure

We employ physical, technical, and administrative safeguards to protect the confidentiality and security of your personal information. We use industry-standard procedures to protect your information from loss, misuse, or unauthorized access.

Appropriate technical and organizational measures are taken to protect your data.  However, Tevora cannot guarantee that its security measures will be sufficient and not be breached and that your information will not be disclosed or otherwise accessed in an unauthorized manner.

In the event of any unauthorized access of your information, Tevora will respond in line with any data breach requirements as detailed in the relevant regulations, including US state privacy laws and EU GDPR, in accordance with the Tevora data incident response plan.

Data accuracy and your privacy rights

We require our customer information to be accurate and kept up to date. Inaccurate personal data will be amended or deleted without delay where we are notified of the updated information.

Our customers, as data subjects, have the right to rectify or have their personal data updated, and we will make these changes without delay on request.

Our customers, as data subjects, also have the right to be kept informed of how we collect and process your data, which we endeavor to do through this privacy notice.

Our customers, as data subjects, also have the right to request:

  • Knowledge about how we protect your personal information (as set out in this notice);
  • Opting out or unsubscribing from our newsletter, marketing, or any other services where we rely on your consent for holding your personal information. We will ensure you are unsubscribed as soon as possible;
  • Restricting the use of your personal information and to object to your personal information being sold or shared;
  • Correcting your inaccurate personal information;
  • No longer using your personal information in certain ways (as set out in the notice);
  • Deleting your personal information. Unless we have reasonable grounds to refuse to delete your personal information, we will securely delete the personal information in question within one month. The personal information may continue to exist in certain backups, but we will take steps to ensure that it will not be accessible; and
  • Requesting access to the personal information that we hold about you. Recognize that this right is only available in certain countries and US states, such as European Economic Area (EEA) and California.

We will endeavor to comply with such requests as soon as possible, but in any event we will comply within one month of receipt (unless a longer period of time to respond is reasonable by virtue of the complexity or number of your requests or allowed by law).

Please see below details to contact us in order to exercise any of your rights outlined above.

Updates to our privacy policy

We may update our Privacy Policy from time to time. If we modify our Privacy Policy, we will post the revised version in this online location with an updated revision date.

If we make any material changes to our Privacy Policy, we may also notify you by other means of the changes taking effect, such as by phone, post, or posting a notification on our website.

How to contact us

If you have any questions, concerns or suggestions related to our Privacy Policy above, you can contact our Privacy Team by reaching out to [email protected].