This Privacy Policy explains how SMB Security HQ (“we,” “us,” or “our”) collects, uses, and protects your information when you visit https://smbsecurityhq.com (the “Site”). By using the Site, you agree to the practices described here.

SMB Security HQ is operated by SMB Security HQ team, located in California United State. If you have any questions, contact us at admin@smbsecurityhq.com


1. Who is responsible for your data

For the purposes of the EU and UK General Data Protection Regulation (GDPR), the data controller is SMB Security HQ team, contactable at [admin@smbsecurityhq.com].

2. What information we collect

Information you provide to us

  • Email address when you subscribe to our newsletter or download a resource (such as a checklist or template).
  • Name and message when you use our contact form.
  • Comments, if you leave one on an article, along with the name and email you submit with it.

Information collected automatically

When you visit the Site, we and our service providers may automatically collect:

  • Log and device data — IP address, browser type, operating system, referring pages, and the dates/times of your visits.
  • Usage data — the pages you view, links you click, and how you navigate the Site.
  • Cookies and similar technologies — see Section 4.

We do not intentionally collect sensitive personal information, and we ask that you do not send it to us through the Site.

3. How we use your information

We use the information we collect to:

  • Send the newsletter, resources, and updates you requested (and only those).
  • Respond to your enquiries and provide support.
  • Operate, maintain, and improve the Site and its content.
  • Measure traffic and understand how our content is used (analytics).
  • Display and, where applicable, optimise advertising.
  • Detect, prevent, and address security issues, fraud, or abuse.
  • Comply with our legal obligations.

4. Cookies and tracking technologies

Cookies are small text files stored on your device. We use:

  • Essential cookies — required for the Site to function.
  • Analytics cookies — to understand how visitors use the Site (see Section 5).
  • Advertising cookies — where we serve ads, to deliver and measure them (see Section 6).

You can control or delete cookies through your browser settings, and where required by law we ask for your consent through a cookie banner before setting non-essential cookies. Disabling some cookies may affect how the Site works.

5. Analytics

We use [Google Analytics 4 / your analytics tool] to understand how visitors interact with the Site. This service may set cookies and process data such as your IP address (often truncated/anonymised) and usage patterns. We use this only in aggregate to improve our content. For more information, see the provider’s own privacy policy, and you may opt out using tools such as the [Google Analytics Opt-out Browser Add-on].

6. Advertising

We may display ads served by third-party advertising partners [e.g., Mediavine, Raptive, or Google AdSense]. These partners may use cookies and similar technologies to show ads based on your prior visits to this and other websites.

  • You can learn about and opt out of personalised advertising at [youradchoices.com] (US), [youronlinechoices.eu] (EU), and through your device settings.
  • Where we serve ads to EU/UK visitors, our advertising partners participate in an approved consent framework, and we request consent via our cookie banner.

7. Affiliate links

Some links on the Site are affiliate links: if you click one and make a purchase, we may earn a commission at no extra cost to you. Clicking an affiliate link may pass a non-identifying tracking reference to the merchant so the referral can be credited. This never changes our editorial verdicts. See our full Affiliate Disclosure for details.

8. Email marketing

If you subscribe, we use [your email provider, e.g., MailerLite / ConvertKit] to store your email address and send our newsletter and resources. Every email includes an unsubscribe link, and you can opt out at any time. We do not sell your email address.

9. How we share your information

We do not sell your personal information. We share it only with:

  • Service providers who help us run the Site (hosting, email delivery, analytics, advertising), bound by contracts to protect your data.
  • Legal and safety recipients — where required by law, court order, or to protect our rights, users, or the public.
  • In a business transfer — if the Site is acquired or merged, subject to this policy.

10. International data transfers

We operate online and serve a global audience. Your information may be processed in countries other than your own, including the [United States], which may have different data-protection laws. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for these transfers.

11. Data retention

We keep personal information only as long as needed for the purposes described here:

  • Newsletter data until you unsubscribe or ask us to delete it.
  • Contact-form messages for as long as needed to handle your enquiry and our records.
  • Analytics data for the retention period set in our analytics tool.

12. Your privacy rights

If you are in the EU or UK (GDPR)

You have the right to access, correct, delete, restrict, or object to our processing of your personal data, to data portability, and to withdraw consent at any time. Our legal bases for processing are consent (e.g., the newsletter), legitimate interests (e.g., securing and improving the Site), and legal obligation. You may also lodge a complaint with your local supervisory authority.

If you are in California (CCPA/CPRA)

You have the right to know what personal information we collect, to request its deletion, to correct it, and to opt out of any “sale” or “sharing” of personal information. We do not sell your personal information. To exercise these rights, contact us at [admin@smbsecurityhq.com].

To make any request, email us at [admin@smbsecurityhq.com]. We will respond within the timeframe required by applicable law and may need to verify your identity first.

13. Data security

We take reasonable technical and organisational measures to protect your information, including encryption in transit (HTTPS) and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

14. Third-party websites

The Site links to third-party websites (including the products we review and our affiliate partners). We are not responsible for the privacy practices of those sites. Please review their privacy policies before providing any information.

15. Children’s privacy

The Site is intended for business owners and professionals and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

16. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above, and significant changes may be highlighted on the Site. Your continued use of the Site after changes take effect constitutes acceptance of the updated policy.

17. Contact us

If you have questions about this Privacy Policy or your personal data, contact us at:

SMB Security HQ team Email: [admin@smbsecurityhq.com]