Information we collect
Cobalt Risk Advisory LLC (“Cobalt,” “we,” “us,” or “our”) may collect information you provide, including your name, company, business email, phone number, advisory priority, target timing, and request context. We may also collect engagement communications, approved project records, invoices, and basic technical data such as browser type, IP address, and website activity.
We do not request payment card details through the public form. Payment information, if applicable, is handled by the selected payment or banking provider under its own terms.
How we use information
We use information to review and respond to requests, assess engagement fit, prepare proposals and scopes, provide advisory services, maintain business and security records, issue invoices, prevent misuse, comply with law, and improve website reliability.
Advisory engagement data
Cybersecurity engagements may involve confidential architecture, policy, vendor, control, and evidence information. The handling of client materials is governed by the applicable written agreement, statement of work, and confidentiality terms. Public website submission does not create an advisory relationship or authorize access to systems.
Service providers and disclosures
We may share information with providers supporting hosting, communications, document management, billing, scheduling, security, and professional operations, only as reasonably necessary for those services. We may also disclose information to comply with lawful requests, protect rights or safety, investigate misuse, or support a business transfer subject to appropriate protections.
Retention and security
We retain information for service delivery, recordkeeping, dispute resolution, security, and legal obligations. We apply reasonable administrative and technical measures appropriate to the information handled, but no transmission or storage method can be guaranteed completely secure.
Your choices
Depending on your location, you may have rights to request access, correction, deletion, or restriction of certain personal information, subject to legal, contractual, and operational exceptions. You may opt out of non-service marketing communications at any time.
Cookies, external links, and children
The website may use essential cookies and limited performance data. Third-party links are governed by their own privacy practices. Our services are directed to businesses and adults and are not intended for children under 13.
Policy changes
We may update this policy as practices or legal requirements change. The revised policy will be posted with an updated effective date.
Contact
Privacy requests may be sent to direct@cobaltriskadvisory.com or mailed to Cobalt Risk Advisory LLC, 1616 Auburn Dr, Lexington, KY 40505.