Privacy Policy

This policy explains what information Entelechy Security collects through this website, why it is collected, how long it is kept, and how you can ask me to access, correct, or delete it. Entelechy Security, Inc. is a one-person practice operated by Coco Bloom in California, United States, and I am the person who handles these requests.

1. Information I collect

This site currently has no contact form and no newsletter sign-up, and it does not use analytics, advertising, or tracking technologies. It does not set nonessential cookies — see the Cookie Policy for detail. My hosting provider may process server logs, including IP addresses, for security and reliability purposes as part of operating the site.

If you contact me directly, I process the details you send — your name, the way to reach you, your organization, and the content of your message — to respond and, if we go on to work together, to scope that work.

A contact form and a newsletter are planned. Before either goes live, this policy will be updated to describe exactly what it collects and on what basis, and the newsletter will use double opt-in. Contact enquiries will never be added to a mailing list.

2. Why I collect it, and the lawful basis

• To respond to your enquiry, and to perform any resulting engagement. Lawful basis: legitimate interests, your consent where required, and contract once an engagement is in view.
• To keep the site secure and available. Lawful basis: legitimate interests.

I do not sell personal information, and I do not use enquiries for advertising.

3. Retention

Enquiries that do not lead to an engagement are kept only as long as needed to respond and for a limited period afterward, then deleted. Enquiries that become client work are retained under the engagement’s own records-retention terms. The specific retention period for general enquiries is being confirmed and will be stated here.

4. Service providers

Operating this site involves a small number of providers acting on my instructions, currently a website host and an email provider for my business correspondence. Each processes information only to provide its service to me. Where a provider is located outside your country, transfers are made using the safeguards available to that provider, such as standard contractual clauses. The specific providers and safeguards will be named here once a form-delivery service and a newsletter platform are selected.

5. Your rights

Depending on where you live, you may have the right to request access to the information I hold about you, correction of inaccurate information, deletion, restriction of processing, portability, objection to processing based on legitimate interests, and withdrawal of consent. You also have the right to complain to your data protection authority.

To make a request, reach me through the details on the Contact page and describe what you would like done. I will respond within 30 days and may need to confirm your identity first. There is no charge for a reasonable request. Further detail for individuals in the EU, EEA, and UK is in the GDPR Statement.

6. Security and children

Information you send is transmitted over encrypted connections and access is limited to me. No transmission or storage method is perfectly secure, and I will not claim otherwise. This site is intended for business audiences and is not directed to children; I do not knowingly collect information from anyone under 16.

7. Changes

If this policy changes, the date at the top will be updated. Material changes affecting how I use information already collected will be described in the updated policy.