Privacy policy.

Fortress MSSP LLC ("Fortress MSSP," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit fortressmssp.com or contact us through our web properties. Please read this policy carefully. If you do not agree with its terms, please discontinue use of our site.

We collect information you voluntarily provide to us through our contact form. This includes:

• Full name
• Business email address
• Company or organization name
• Service selection (the service category you are inquiring about)
• Message content (your inquiry or request details)

We do not collect payment information, government identifiers, or sensitive personal data through our website.

Cookies and analytics: We use the technical cookies required for core site functionality, and Google Analytics 4 to understand aggregate site usage. GA4 loads only after you accept our cookie consent banner — if you decline, no analytics cookies are set. We do not use advertising trackers or behavioral profiling tools.

We use the information we collect solely for the following purposes:

• To respond to your inquiry or service request in a timely manner.
• To send transactional emails related to your inquiry (e.g., confirmation that we received your message, follow-up correspondence).
• To evaluate and scope potential engagements you have expressed interest in.
• To maintain records of business communications as required for our operations.

We do not sell your personal information. We do not use your data for unsolicited marketing communications.

We share your information with a limited number of third-party service providers strictly necessary for delivering our services:

We may disclose your information if required by law, court order, or government authority, or to protect the rights, property, or safety of Fortress MSSP LLC, our clients, or the public.

Inquiry records — including your name, email, company, service selection, and message — are retained for two (2) years from the date of submission. This retention period allows us to maintain continuity in business communications and comply with reasonable recordkeeping obligations. After this period, records are securely deleted. If you request deletion prior to this period, we will honor that request (see Section 5).

GDPR (EU/EEA Residents)

If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation:

• Right of Access — request a copy of the personal data we hold about you.
• Right to Rectification — request correction of inaccurate data.
• Right to Erasure — request deletion of your personal data.
• Right to Restriction — request that we limit how we use your data.
• Right to Data Portability — receive your data in a structured, machine-readable format.
• Right to Object — object to processing based on legitimate interests.

CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act grants you the following rights:

• Right to Know — request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete — request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out — we do not sell personal information; this right is satisfied by our policy.
• Right to Non-Discrimination — we will not discriminate against you for exercising your CCPA rights.

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Transmission of data to our email delivery provider is encrypted in transit using TLS. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Our services are directed exclusively to business professionals and enterprise organizations. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected information from a minor, we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website following any changes constitutes your acceptance of the updated policy.

To exercise your privacy rights, submit a data access or deletion request, or ask questions about this policy, contact us at:

We will respond to all legitimate privacy requests within 30 days of receipt.