Effective date: November 7, 2026
Evergreen Cyber Security LLC (“we,” “us”) respects your privacy. This policy describes what information we collect when you use evergreencybersecurity.net, contact us, or work with us, why we collect it, and the choices you have.
Information we collect and why
Inquiries. When you contact us by the form, email, or phone, we receive what you provide (such as name, email, company, phone number, and message). The contact form uses a standard mailto link: it opens your own email program, and the site itself does not store submissions. We use this information to respond to you, scope work, and, if we engage, deliver the agreed services.
Client engagements. To deliver services you authorize in writing, we process the information needed for that work, such as domain names, DNS records, system and configuration details, findings, contracts, and invoices.
DMARC monitoring. For clients who buy DMARC monitoring, we receive aggregate reports from mailbox providers about the client’s domain. These contain sending IP addresses, message counts, and authentication results, and we use them only to provide the monitoring service. We do not request failure (forensic) reports, which can include email addresses and message headers, unless a data processing agreement has been signed.
Business outreach. We collect publicly available business contact information (such as business names, people’s names and titles, and business email addresses) from business websites, directories, and other public sources, to identify businesses that may need our services and to send them business-to-business outreach email.
Website. Our website host may automatically log basic technical data (such as IP address, browser type, and pages requested) for security and operation of the site.
Unsubscribing from outreach
If you receive an outreach email from us and don’t want more, reply with “unsubscribe” or email desk@evergreencybersecurity.net with “Unsubscribe” in the subject. We add opt-out requests to our do-not-contact list and stop sending within 10 business days (usually the same day). We never charge a fee or ask for anything other than your email address.
What we don’t do
- We do not sell personal information, and we do not share it for targeted advertising.
- We do not use information you submit through this site for marketing lists.
- This site does not use advertising or tracking pixels, tracking cookies, or analytics that collect personal information.
- Do Not Track: We don’t track visitors over time or across other websites, and we don’t allow third parties to do so on this site, so we don’t change anything in response to browser Do Not Track signals.
- We do not collect consumer health data as defined by Washington’s My Health My Data Act (RCW 19.373). Please don’t include health information in messages to us; if you do, we’ll use it only to respond to you and won’t keep it longer than needed.
- Our website and services are directed to businesses, not children. We do not knowingly collect personal information from children under 13. If you believe a child has sent us information, contact us and we will delete it.
Service providers and sharing
We use service providers to run our business, including Netlify (website hosting) and Google Workspace (email). These providers process data on our behalf to provide their services to us. We do not share your information with other third parties except as needed to perform a service you authorized, or when required by law.
Retention
We keep inquiry correspondence only as long as needed to respond and for reasonable business records. We keep your signed agreement, the e-signature record, and billing records for 7 years as business records. DMARC report data is kept for the period in the client agreement. Outreach contact records are kept while relevant, and do-not-contact entries are kept so that we continue to honor your request.
Your choices and rights
Wherever you live, including Washington, you can ask us to tell you what personal information we hold about you, correct it, or delete it, or to stop contacting you. Email desk@evergreencybersecurity.net with your request. We may need to confirm your identity before acting, and we will respond within a reasonable time. Some information may be kept where the law requires it, such as tax records.
Security
We take reasonable steps to protect the information you provide. No method of transmission or storage is completely secure.
Security incidents. If we discover a breach of the security of personal information we hold on a client’s behalf, we will notify that client immediately following discovery, as Washington law requires (RCW 19.255.010(2)), so the client can meet its own notice obligations. If a breach affects personal information we hold for our own purposes, including information individual clients give us, we will notify affected people as required by law (in Washington, generally no more than 30 days after discovery).
Changes
If we change this policy, we will post the updated version here with a new effective date.
Contact
Questions about this policy: desk@evergreencybersecurity.net
Postal address: Evergreen Cyber Security LLC
PO BOX 98431
LAKEWOOD WA 98496