Privacy Policy

eTrepid Inc. (“eTrepid,” “we,” “us,” or “our”) respects the privacy of visitors to eTrepid.com. This Privacy Policy explains the information processed through our public website, why it is used, when it may be shared, and the choices available to visitors.

This policy applies to the public eTrepid website. Separate agreements and notices may govern client services, managed operations, employment, partner relationships, government contracts, support portals, and other systems.

Information you provide

You may provide business contact information when you schedule a consultation, contact eTrepid, request information, communicate with our team, or use an external service linked from the website. Depending on the interaction, this may include your name, work email, organization, role, telephone number, scheduling preferences, and non-sensitive business context.

Do not submit Controlled Unclassified Information (CUI), credentials, assessment workpapers, incident details, regulated personal information, confidential architecture, vulnerability information, or other sensitive material through a public website field, ordinary email link, or scheduling form. eTrepid will identify an appropriate controlled channel when sensitive information is required for an authorized engagement.

The qualification questions on the eTrepid Consultation page are processed in your browser to guide you to an appropriate next step. The staging implementation audited on August 25, 2026 did not transmit or retain those qualification answers. If you continue to the external scheduling service, information you enter there is processed separately.

Information processed automatically

When you visit the website, eTrepid and its service providers may process ordinary technical information needed to deliver, secure, and maintain the site. This may include:

• IP address and approximate network location;
• browser, device, and operating-system information;
• requested pages, referring pages, timestamps, and response information;
• security, diagnostic, availability, and error records; and
• cookie and consent-preference information.

We seek to collect only information reasonably needed for the website, security, business communication, and applicable legal or contractual obligations.

How we use information

We may use website-related information to:

• provide and secure the website;
• respond to inquiries and schedule requested conversations;
• evaluate appropriate service or acquisition pathways;
• operate, troubleshoot, and improve website performance and accessibility;
• protect eTrepid, our clients, users, systems, and legal rights;
• detect misuse, fraud, security events, or prohibited activity; and
• meet applicable legal, regulatory, contractual, and recordkeeping obligations.

Website content and inquiry data are not a substitute for an authorized secure exchange of client, government, regulated, or assessment information.

Cookies and similar technologies

The website uses necessary technologies for core operation, security, authorized administration, and consent preferences. The Cookie Preferences control allows visitors to review available categories and change optional choices.

The website uses an approved analytics service only after a visitor grants the Analytical cookie choice. It measures aggregate page usage and a limited set of fixed journey events, such as starting or completing the readiness check, completing the browser-local consultation qualification step, selecting an approved consultation or readiness call to action, and continuing to the external scheduling service. eTrepid does not send form answers, names, email addresses, link text, credentials, CUI, or query-string values in these events.

The configured analytics controls disable cross-service signals, user-provided data collection, advertising personalization, and granular location and device data collection. Advertising cookies and targeted-advertising technologies are not part of the approved launch configuration. Visitors may deny or later withdraw Analytical consent through Cookie Preferences. This policy and the consent interface must be revalidated before materially different analytics, advertising, session replay, call tracking, chat, CRM capture, or marketing automation is enabled.

Service providers and external destinations

eTrepid may use service providers to host, secure, maintain, communicate through, and support the website and requested interactions. Current website-related providers or destinations may include:

• website hosting, content management, security, accessibility, and consent-management services;
• consent-based aggregate website analytics;
• external appointment scheduling;
• external client support, billing, and documentation portals; and
• social-media services when a visitor chooses to follow an external social link.

Service providers may process information on eTrepid’s behalf or under their own terms and privacy notices, depending on the service and the visitor’s interaction. eTrepid may also disclose information when reasonably necessary to comply with law, protect rights or safety, investigate misuse, support a transaction involving the business, or carry out an authorized request.

Sale and targeted advertising

eTrepid does not sell personal data collected through this website or use website personal data for targeted advertising.

This commitment must be revalidated if advertising, retargeting, marketing automation, cross-context behavioral advertising, or materially different analytics are introduced.

Retention

eTrepid retains website-related information only for as long as reasonably necessary for the purpose for which it was collected, legitimate security and business needs, dispute resolution, and applicable legal, contractual, and recordkeeping requirements. The approved analytics configuration retains event-level data for 2 months and user-level data for 14 months, without extending that period because of new user activity. Other retention periods may differ by record type and system. Information no longer required should be deleted, anonymized, or managed under the applicable records schedule.

Security

eTrepid uses administrative, technical, and physical safeguards intended to protect information in light of its nature and the associated risk. No website or transmission method can be guaranteed to be completely secure. Visitors should use approved controlled channels for sensitive information and promptly notify eTrepid of suspected website misuse or security concerns.

Privacy choices and rights

You may use the Cookie Preferences control to review or change optional cookie choices. Depending on your location and applicable law, you may also have rights to request access to, correction of, deletion of, or information about certain personal data, and to opt out of certain processing.

Maryland residents may have rights under the Maryland Online Data Privacy Act when that law applies to the relevant processing. Other state, federal, or international laws may provide different rights or exceptions. eTrepid will evaluate a verified request under the law applicable to the request and the relevant record.

To make a privacy request, contact [email protected], call (833) 387-3743, or write to eTrepid Inc., 101 Charles St, La Plata, MD 20646. We may need to verify your identity and authority before acting on a request.

Children

The eTrepid website is intended for business, government, and professional audiences. It is not directed to children under 13, and eTrepid does not knowingly use the public website to collect personal information from children under 13.

Changes to this policy

We may update this policy when website practices, service providers, or applicable requirements change. The “Last updated” date identifies the current published version. Material changes should be reviewed against the website’s actual data flow before publication.

Contact

Privacy questions may be directed to [email protected], (833) 387-3743, or eTrepid Inc., 101 Charles St, La Plata, MD 20646.