Pentamix Security Privacy Policy

Effective Date: October 5th 2020
Last Updated: December 1st 2025

Pentamix Security (“Pentamix,” “we,” “us,” or “our”) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you engage with Pentamix Security through our website, services, events, assessments, communications, and digital platforms.

By using our services or interacting with Pentamix Security, you agree to the practices described in this Privacy Policy.

  1. Information We Collect

We may collect the following categories of information:

1.1 Personal Information

  • Name, email address, phone number, employer, job title
  • Billing and invoicing information
  • Event registration details
  • Account and profile information for platforms we manage

1.2 Technical & Security Information

  • IP addresses, device identifiers, browser type, operating system
  • Authentication data and access logs
  • Network telemetry and security-related metadata
  • System configuration information

1.3 Service Delivery & Engagement Information

  • Information provided during cybersecurity assessments, architecture reviews, workshops, or support interactions
  • Logs generated by managed services, monitoring tools, or integrations
  • Communications with our team (email, chat, meeting recordings, support tickets)

1.4 Sensitive or Regulated Data (Only When Required)

For customers operating in regulated environments (e.g., financial services, DoD, public sector), Pentamix Security may receive or process controlled or confidential data solely for the purpose of contracted services.
Such information is handled according to NIST, CMMC, DFARS, SOC 2, and other required frameworks, and only under defined agreements.

  1. How We Use Your Information

Pentamix Security uses collected information to:

  • Deliver cybersecurity services, assessments, and professional consulting
  • Provide managed security operations and architecture guidance
  • Improve system performance, accuracy, and threat detection
  • Respond to inquiries, support requests, and technical issues
  • Send event confirmations, product updates, reports, and operational communications
  • Conduct business analytics, service improvements, and operational reporting
  • Meet compliance, legal, and contractual obligations

We do not sell personal information.

  1. How We Protect Your Information

Pentamix Security employs a multi-layered security program aligned with industry standards:

  • Zero Trust–aligned access controls
  • Encryption of data in transit and at rest
  • Role-based access and least-privilege enforcement
  • Continuous monitoring and threat detection
  • Vendor risk management and secure development practices
  • Regular audits against NIST CSF, CIS Controls, SOC 2, and other frameworks

Where required, we execute Data Processing Agreements (DPAs) and Confidentiality Agreements.

  1. Information Sharing and Disclosure

We may share information only under the following conditions:

4.1 With Your Authorization

Explicit approval for service delivery, assessments, or integrations.

4.2 With Trusted Service Providers

Vendors assisting with:

  • Security monitoring and management
  • Cloud hosting
  • CRM and ticketing systems
  • Event administration

All vendors undergo due diligence and must comply with security requirements.

4.3 Compliance & Legal Requirements

We may disclose information when required to:

  • Comply with legal obligations
  • Respond to regulatory or law enforcement requests
  • Protect the safety, rights, or property of Pentamix Security or customers

We never sell or share data for advertising purposes.

  1. Data Retention

Pentamix Security retains information only as long as necessary to:

  • Deliver contracted services
  • Meet regulatory and compliance obligations
  • Maintain accurate business and audit records

You may request deletion where appropriate and legally permissible.

  1. Your Rights

Depending on your jurisdiction, you may have rights including:

  • Access to personal information
  • Correction or updates
  • Deletion (Right to be Forgotten)
  • Restriction or objection to processing
  • Data portability
  • Opt-out of marketing communications

Requests can be submitted to privacy@pentamixsecurity.com.  Subject: Privacy Policy

  1. Cookies & Tracking Technologies

Pentamix Security may use cookies or analytics tools to:

  • Improve website functionality
  • Understand engagement patterns
  • Enhance user experience

You may control cookies through your browser settings.

  1. International Data Transfers

If information is transferred across borders, Pentamix Security ensures:

  • Adequate protections aligned to GDPR or applicable laws
  • Contractual safeguards (Standard Contractual Clauses)
  • Secure transmission and storage requirements
  1. Children’s Privacy

Our services are not intended for children under 16. We do not knowingly collect data from minors.

  1. Changes to This Policy

We may update this Privacy Policy periodically.
Revisions will be posted with an updated “Effective Date.”

  1. Contact Information

For questions, requests, or privacy concerns, contact us at:

Pentamix Security – Subject: Privacy Policy
Email: privacy@pentamixsecurity.com
Website: www.pentamixsecurity.com
Address: 5555 DTC Parkway, Suite 300
Greenwood Village, CO 80112