Introduction
SOC2Auditors.org ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.
Information We Collect
Information You Provide
When you use our quote request form or contact us, we may collect:
- Name and email address
- Company name and size
- Industry and compliance requirements
- Any other information you choose to provide
Automatically Collected Information
When you visit our website, our hosting, security, and cookieless analytics systems process limited technical information, including:
- Network address and browser type needed to serve and protect the request
- Approximate location (country, and state or province in the US and Canada) derived from your network address when you submit a quote request, included in the anonymized request sent to auditors
- Device information and operating system
- Pages visited and time spent on pages
- Referring sites and campaign parameters, without storing the page's search query or URL fragment
How We Use Your Information
We use the information we collect to:
- Connect you with verified SOC 2 auditors
- Respond to your inquiries and provide customer support
- Improve our website and services
- Send you relevant information about SOC 2 compliance, with your consent
- Analyze website usage and trends
Information Sharing
We may share your information with:
- SOC2Auditors.org: When you request quotes, we share your information with selected auditors to provide you with estimates.
- Service Providers: Third-party vendors who help us operate our website and services.
- Legal Requirements: When required by law or to protect our rights.
We do not sell your personal information to third parties.
Cookies and Tracking Technologies
We use self-hosted, cookieless analytics to understand aggregate page traffic and a limited set of named actions, such as opening a quote form or following a public directory link. Our analytics integration does not intentionally create analytics cookies or browser-storage identifiers, and we do not send form fields, names, email addresses, phone numbers, inquiry identifiers, free text, or customer identifiers to analytics.
Pageviews and those named actions are recorded by two self-hosted collectors, at analytics.100signals.com and stats.100signals.com. Neither records anything when your browser sends a Do Not Track signal. The first excludes URL fragments and any search parameters other than standard campaign (utm) tags. The second records the page path, referring site, page title, and screen width, notes when you scroll past the top of a page, and keeps only the campaign source and name from a link's search parameters (for example, utm_source and utm_campaign). Anonymous visitor and visit counts are estimates derived from technical request data; they are not persistent identities and are not joined to quote or customer records. We are working toward a 25-month online analytics retention limit, but automated deletion is not active and records may currently be retained longer. Security tools and form providers may use strictly necessary storage or cookies for their own functions. In each browser tab, your browser keeps a broad category for how you first reached the site (for example, a search engine or an AI assistant) in session storage until the tab closes. We record that category only if you submit a quote request.
Data Security
We implement appropriate technical and organizational security measures to protect your personal information. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
Your Rights
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal information
- Opt out of marketing communications
- Object to processing of your personal information
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us at hello@soc2auditors.org.