Effective Date: 02 January 2026
Last Updated: 22 October 2026
Introduction
Brookmore Solutions (“we,” “our,” “us,” or “Brookmore”) is committed to protecting the privacy and security of your personal information. As a woman-owned, veteran-led cybersecurity and IT consulting firm, we understand the critical importance of data protection and privacy. This Privacy Policy explains how we collect, use, store, protect, and share information when you interact with our website at brookmoresolutions.com or engage our professional services.
This policy applies to all clients, prospective clients, website visitors, and any individuals whose information we process in connection with our business operations.
Information We Collect
Information You Provide Directly
When you interact with Brookmore Solutions, we may collect the following types of information:
Contact Information:
- Full name
- Email address
- Phone number
- Mailing address
- Company name and business address
Company Information:
- Business name
- Industry sector
- Company size
- Organizational structure (as relevant to our services)
Professional Engagement Information:
- Information provided in consultation requests
- Details about your cybersecurity needs and concerns
- Communication preferences
- Contract and billing information
Information Collected Automatically
When you visit brookmoresolutions.com, we automatically collect certain technical information:
Website Usage Data:
- IP addresses
- Browser type and version
- Operating system
- Pages visited and time spent on pages
- Referring website addresses
- Date and time of visits
This information is collected through Google Analytics, which uses cookies and similar tracking technologies to help us understand how visitors use our website and improve user experience.
Information Collected During Service Delivery
Depending on the specific terms of our engagement agreement with clients, we may access or process sensitive information during the course of providing cybersecurity assessments, CMMC evaluations, NIST compliance services, and related consulting work. This may include:
- Network configurations and system diagrams
- Vulnerability assessment results
- Security policies and procedures
- Employee lists and organizational information
- System logs and access control data
- Technical documentation
- Security credentials and authentication information (handled with the highest level of security)
Important: The specific types of sensitive data we access or process are always defined in individual client agreements, and all such data is handled through secure client portals and encrypted channels.
How We Collect Information
We collect information through the following methods:
- Website Contact Forms: When you submit inquiries or request consultations through brookmoresolutions.com. Form submissions are processed and delivered to us by our form service provider, Formspree.
- Automatic Collection: Through Google Analytics when you visit our website
- Direct Communication: Through email, phone calls, and meetings
- Client Onboarding: Through intake questionnaires and initial consultation processes
- Service Delivery: Through secure client portals and encrypted file transfer during active engagements
How We Use Your Information
Brookmore Solutions uses the information we collect for the following purposes:
Service Delivery and Client Relations
- Responding to inquiries and consultation requests
- Providing cybersecurity assessments, compliance evaluations, and IT consulting services
- Delivering reports, documentation, and recommendations
- Managing client relationships and ongoing engagements
- Communicating about project status and deliverables
- Processing payments and maintaining billing records
Business Operations
- Improving our website and user experience
- Understanding visitor behavior and website performance through analytics
- Maintaining accurate business records
- Complying with legal and regulatory obligations
- Protecting against fraud and unauthorized access
- Enforcing our terms of service and contracts
Legal Compliance
- Responding to legal requests and court orders
- Complying with applicable laws and regulations
- Protecting our legal rights and interests
- Meeting industry-specific compliance requirements (CMMC, NIST, etc.)
We do not send marketing emails or newsletters. We will only contact you regarding active service engagements, in response to your inquiries, or for essential business communications related to our relationship.
How We Protect Your Information
As a cybersecurity firm, we take data protection extremely seriously and implement comprehensive security measures that meet or exceed industry standards:
Technical Security Measures
- Encryption: All client data is encrypted both in transit (during transmission) and at rest (during storage)
- Secure Cloud Storage: Client data is stored with major cloud providers that maintain independently audited security programs
- Multi-Factor Authentication (MFA): Required for all access to client data and systems
- Secure File Transfer: All file transfers use encrypted protocols such as SFTP and secure portal access
- Access Controls: Role-based access controls limit data access to authorized personnel only
- Regular Security Audits: We conduct regular assessments of our own security posture and systems
Organizational Security Measures
- Limited Access: Only the CEO and COO of Brookmore Solutions have access to client data
- Need-to-Know Basis: Data access is strictly limited to what is necessary for service delivery
- Background Checks: All employees, contractors, and subcontractors undergo comprehensive background checks
- Security Training: Personnel receive ongoing security awareness and data protection training
- Incident Response Plan: We maintain documented procedures for responding to potential security incidents
- Cyber Liability Insurance: Brookmore Solutions maintains cyber liability insurance as an additional layer of protection
Physical Security
- Secure facilities with controlled access
- Protection of physical documents and devices
- Secure disposal of sensitive information
Data Retention
Brookmore Solutions retains client information according to the following schedule:
Standard Retention Period: Seven (7) years from the conclusion of services or last contact
This retention period applies to:
- Contact information
- Company details
- Financial and billing records
- Contracts and legal documents
- Assessment data and reports
- Project documentation
- Communication records
Early Deletion: Clients may request deletion of their data at any time before the standard retention period expires. Upon receiving such a request, we will securely delete the information within thirty (30) days, except where retention is required by law or legitimate business purposes (such as resolving disputes or enforcing contracts).
Secure Deletion: At the end of the retention period, all client data is securely and permanently deleted using industry-standard data destruction methods.
Legal Requirements: Some data may be retained for longer than seven years when required by applicable laws, regulations, or legal proceedings.
Information Sharing and Disclosure
Brookmore Solutions respects your privacy and limits information sharing to the following circumstances:
Service Providers
We may share information with trusted third-party service providers who assist in our business operations, including:
- Cloud hosting and storage providers (who maintain industry-standard security certifications), including Amazon Web Services, which hosts our website
- Payment processors
- Technology tools used in service delivery (as may be specified in engagement agreements)
All service providers are contractually obligated to protect your information and use it only for the purposes we specify.
Subcontractors
In some cases, as specified in client contracts, we may engage subcontractors to assist with service delivery. All subcontractors:
- Are carefully vetted and undergo background checks
- Sign confidentiality and data protection agreements
- Are granted access only as necessary for the specific engagement
- Must comply with the same security standards we maintain
Legal Requirements
We may disclose information when required by law, including:
- In response to valid subpoenas, court orders, or legal processes
- To comply with government or regulatory investigations
- To protect our legal rights and interests
- To protect the safety and security of individuals or prevent illegal activity
- As required by applicable cybersecurity regulations and compliance frameworks
Business Transfers
In the event of a merger, acquisition, or asset sale, client information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
Your Privacy Rights
You have the following rights regarding your personal information:
Access and Correction
You have the right to:
- Request access to the personal information we hold about you
- Request correction of inaccurate or incomplete information
- Receive a copy of your data in a commonly used format
Deletion
You have the right to request deletion of your personal information at any time. We will honor deletion requests within thirty (30) days, except where:
- We are required to retain information by law
- The information is necessary for ongoing legal proceedings
- Retention is necessary to fulfill legitimate business purposes
Objection and Restriction
You may object to specific uses of your information or request that we restrict processing in specific circumstances.
Data Portability
You have the right to request that we transfer your data to another service provider, where technically feasible.
Exercising Your Rights
To exercise any of these rights, please contact us at:
- Email: info@brookmoresolutions.com
- Website: Submit a request through the “Contact Us” page at brookmoresolutions.com
We will respond to all requests within thirty (30) days. We may need to verify your identity before fulfilling specific requests to protect your information from unauthorized access.
Cookies and Tracking Technologies
Google Analytics
Brookmoresolutions.com uses Google Analytics to collect information about website usage. Google Analytics uses cookies (small text files stored on your device) to track:
- Pages visited
- Time spent on the website
- Navigation patterns
- Geographic location (general region, not precise location)
- Device and browser information
This information is used solely to improve our website and understand how visitors interact with our content. Google Analytics data is anonymized and does not identify individual users.
Managing Cookies
You can control cookies through your browser settings:
- Most browsers allow you to refuse cookies or delete existing cookies
- You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on
- Note that disabling cookies may affect your experience on our website
Do Not Track
Some browsers include “Do Not Track” (DNT) signals. Our website does not currently respond to DNT signals, but we collect minimal tracking data as described above.
Third-Party Links
Our website may contain links to third-party websites, resources, or tools. Brookmore Solutions is not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
Children’s Privacy
Brookmore Solutions does not knowingly collect information from individuals under the age of 18. Our services are designed for businesses and professionals. If we become aware that we have inadvertently collected information from a minor, we will promptly delete it.
Data Breach Notification
Despite our comprehensive security measures, no system is completely immune to security incidents. In the unlikely event of a data breach that affects your personal information, Brookmore Solutions will:
- Investigate the incident promptly and thoroughly
- Notify affected individuals within seventy-two (72) hours of discovering the breach
- Provide details about what information was compromised and the circumstances of the breach
- Explain the steps we are taking to address the breach and prevent future incidents
- Offer guidance on steps you can take to protect yourself
- Comply with all applicable breach notification laws and regulations
Notifications will be sent via email to the address we have on file, and in serious cases, may also be posted on our website.
International Data Transfers
Brookmore Solutions currently serves clients exclusively within the United States. All data is processed and stored within the United States using cloud providers with U.S.-based data centers. We do not transfer personal information internationally.
Should our business expand to serve international clients, we will update this privacy policy and implement appropriate safeguards for international data transfers in compliance with applicable laws.
Industry-Specific Compliance
Brookmore Solutions works with clients across multiple industries, including organizations subject to specific regulatory requirements. When providing services to clients in regulated industries, we comply with applicable sector-specific privacy and security requirements, including:
- Financial and Tax Services: the FTC Safeguards Rule under the Gramm-Leach-Bliley Act (GLBA), and IRS Publication 4557 for tax professionals
- Defense Supply Chain: CMMC (Cybersecurity Maturity Model Certification), DFARS (Defense Federal Acquisition Regulation Supplement), and NIST SP 800-171
- All Clients: applicable state data breach notification laws
- General Standards: NIST Cybersecurity Framework
The specific compliance requirements for each engagement are detailed in the individual client agreements.
Changes to This Privacy Policy
Brookmore Solutions reserves the right to update this Privacy Policy to reflect changes in our practices, legal requirements, or business operations. When we make material changes:
- We will update the “Last Updated” date at the top of this policy
- We will notify active clients via email
- We will post the updated policy on our website
- Continued use of our services after changes become effective constitutes acceptance of the revised policy
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please get in touch with us:
Brookmore Solutions
Email: info@brookmoresolutions.com
Website: brookmoresolutions.com/contact
For privacy-specific inquiries, please include “Privacy Policy” in the subject line of your email.
Your Consent
By using our website or engaging our services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you disagree with this policy, please do not use our website or services.
Brookmore Solutions is committed to maintaining the highest standards of privacy and security. As a cybersecurity firm, we practice what we preach and hold ourselves to the same rigorous standards we recommend to our clients.
This Privacy Policy is effective as of 03 January 2026 and applies to all information collected by Brookmore Solutions.