SCF Privacy Notice

COMMITMENT TO CONFIDENTIALITY
Secure Controls Framework Council, LLC (SCF Council) operates the Secure Controls Framework (SCF) website and strives to honor the confidentiality of its users (customers). Verutus want visitors to the SCF website and SCF users to have confidence that their Personal Data (PD) is adequately protected.

If you have any questions concerning our privacy notice please contact us by email at support@securecontrolsframework.com and include your name, telephone number and email address so that we can contact you.

CONFIDENTIALITY OF BUSINESS RECORDS - DISCLOSURE NATURE, FREQUENCY & PURPOSE
We consider customer information that we keep to be confidential. We may collect PD from customers and disclose it to a third party, if disclosure is necessary to render services and to conduct related business activities. We limit to collection of sensitive information and take reasonable precautions to prevent unauthorized access to that information. We may be required by law to disclose any customer information to government entities, without advance notice to customer(s).

WHAT WE COLLECT
Any PD we maintain on record is what was voluntarily provided to us, by you, or given to us through cookies, by your system, in the process of completing using the SCF website. PD may include your:

Name
Mailing address
Telephone number
Email address
SCF-specific website usage history
Demographic information such as postcode, preferences and interests
Other information relevant to customer surveys and/or offers

WHAT WE DO WITH THE INFORMATION WE GATHER
We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:

Internal record keeping.
We may use the information to improve our products and services.
We may periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you provided.
From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone or mail.
We may use the information to customize the website according to your interests.
Verutus does share customer email addresses and contact information with SCF sponsors so they may send promotional emails about their products, special offers or other information which a SCF sponsor thinks you may find interesting using the email address and/or contact information that you provided.

SECURITY
We are committed to ensuring that your information is adequately protected. In order to prevent unauthorized access or disclosure, we have put in place suitable administrative, physical and technical controls to safeguard the information we collect online. We also maintain procedural safeguards that restrict access to your PD to employees, or individuals working on our behalf and under confidentiality agreements, who need to know your PD in order to provide the products and services that you request.

HOW WE USE COOKIES
Cookies also allow us to personalize your experience, advertise to you on other websites and speed the check-out process. A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyze web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyze data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

LINKS TO THIRD-PARTY WEBSITES
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we are not responsible for the protection mechanisms and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy notice. You should exercise caution and look at the privacy notice applicable to the website in question.

HOW YOU CAN CONTROL THE USE OF YOUR PERSONAL INFORMATION
If you created an account, you can login and update your PD or opt to have your email address removed from our mailing list. If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by writing to or emailing us at support@securecontrolsframework.com to change your preferences.

There are known methods that spammers can use to hide their identity by using other people's email address to send out emails. If you have any question about the genuineness of an email you receive that appears to be from Verutus, contact us to verify the legitimacy of the email and do not furnish personal information in response to the email in question.

You may request details of personal information which we hold about you. A small fee may be payable to cover administrative costs associated with processing the request. If you would like a copy of the information held on you please write to 30 N Gould St., Suite 3209, Sheridan, WY 82801 and state your request.

If you believe that any information we are holding on you is incorrect or incomplete, please contact us as soon as possible. We will promptly correct any information found to be incorrect.