Privacy Policy

Dogwood Security LLC ("Dogwood Security," "we," "our," or "us") operates the website dogwoodsecurity.net and provides managed IT, cybersecurity, and physical security services. This policy describes what information we collect, how we use it, and what rights you have over it.

1. Information we collect

Information you give us directly

When you fill out a contact or quote request form on our website, we collect:

• Name
• Business name
• Phone number
• Email address
• Industry
• Any information you include in the message field

We use this information solely to respond to your inquiry and scope services.

Information collected automatically

Our website may collect standard web server logs including IP address, browser type, referring page, and pages visited. This data is used for security and troubleshooting only and is not linked to individual identities.

Information from service engagements

If you become a Dogwood Security client, we collect and store information necessary to manage your IT environment. This includes network documentation, credentials (stored in IT Glue with role-based access controls), device inventories, and support history. This data is governed by your service agreement and any applicable data handling addendum (DHA or BAA).

2. How we use your information

• To respond to quote requests and service inquiries
• To scope, deliver, and invoice for services
• To maintain your IT environment documentation
• To comply with legal obligations

We do not use your information for advertising, marketing to third parties, or profiling.

3. Third-party services

We use the following third-party services that may process data submitted through our website:

• Formspree — processes contact form submissions and forwards them to us via email. Formspree's privacy policy is available at formspree.io/legal/privacy-policy.
• Cloudflare — hosts and delivers our website. Cloudflare may log request metadata for security and performance purposes. Cloudflare's privacy policy is available at cloudflare.com/privacypolicy.

We do not sell, rent, or share your personal information with any third party for their marketing purposes.

4. Physical security systems

Dogwood Security installs and manages camera and access control systems on behalf of clients. By default, all footage and access logs are stored locally on hardware owned by the client. We do not retain copies of camera footage or access logs beyond what is necessary to provide managed services. Access to client camera systems is logged and limited to authorized personnel.

5. Data retention

Contact form submissions are retained for up to 12 months. Client service records are retained for the duration of the service agreement plus three years. You may request deletion of your information at any time by contacting us at the address below; we will delete what we are not legally required to retain.

6. Security

We apply the same security practices to our own data that we sell to clients: role-based access, MFA on all administrative accounts, encrypted credential storage, and documented access logs. No transmission over the internet is 100% secure, but we take reasonable measures to protect information in our care.

7. Your rights

You may request at any time:

• A copy of the personal information we hold about you
• Correction of inaccurate information
• Deletion of your information (subject to legal retention requirements)

To make a request, email hello@dogwoodsecurity.net with "Privacy Request" in the subject line. We will respond within 30 days.

8. Texas and other state privacy rights

If you are a Texas resident, the Texas Data Privacy and Security Act (TDPSA, effective July 1, 2024) provides the following rights with respect to your personal information:

• Access: request a copy of the personal information we hold about you
• Correction: request correction of inaccurate information
• Deletion: request deletion of your information
• Portability: receive your information in a portable format
• Opt-out: opt out of targeted advertising or profiling that produces legal effects

We do not sell personal information and do not engage in targeted advertising.

To exercise any of these rights, email hello@dogwoodsecurity.net with "Privacy Request" in the subject line. We will respond within 45 days. We may extend this period once by 45 additional days with notice.

We honor Global Privacy Control (GPC) browser signals as a valid opt-out of targeted advertising. Because we do not engage in targeted advertising, GPC signals have no material effect on our data practices.

If you are a California resident, you may have similar rights under the California Consumer Privacy Act (CCPA). Contact us at the address below to exercise those rights.

9. Children

Our website and services are directed at businesses and business owners. We do not knowingly collect personal information from anyone under 18.

10. Changes to this policy

We may update this policy from time to time. Material changes will be noted by updating the "Last updated" date at the top of this page. We encourage you to review this page periodically.

11. Contact

Questions about this policy or requests regarding your data:
Dogwood Security LLC
Palestine, TX
hello@dogwoodsecurity.net
(903) 373-9434