Privacy Policy

Effective Date: November 14, 2026

Entity: Galipeault Cybersecurity LLC (doing business as Karma Cybersecurity)

Location: Nashua, New Hampshire

Contact: billy@karmacybersecurity.com

Galipeault Cybersecurity LLC, dba Karma Cybersecurity ("we," "our," or "us") respects your privacy and is committed to protecting the information you share with us. This Privacy Policy outlines how we collect, use, and safeguard your information when you visit our website (karmacybersecurity.com), engage our advisory services, submit contact inquiries, or book consultations.

1. Information We Collect

When you interact with our website or engage our services, we may collect the following categories of information:

  • Direct Inquiries & Contact Data: Name, professional email address, phone number, company name, and details regarding your compliance or cybersecurity requirements submitted via our contact forms or discovery intake fields.

  • Consultation Booking Data: Information provided when scheduling 15-minute compliance discovery calls via our integrated calendar system (including appointment times and meeting notes).

  • Technical & Usage Data: Standard log data collected automatically by our hosting provider (Squarespace), such as your IP address, browser type, referring pages, and device operating system.

2. How We Use Your Information

We use the information we collect strictly for legitimate business and professional purposes, including:

  • Responding to client inquiries, scoping proposals, and delivering advisory, GRC, and fractional CISO services.

  • Scheduling, confirming, and managing client discovery calls and consultations.

  • Fulfilling contractual obligations and maintaining records required for professional compliance and billing.

  • Improving website performance, user experience, and digital security.

3. Data Sharing & Third-Party Tools

We do not sell, rent, or trade your personal or corporate data to third parties. We utilize trusted, industry-standard enterprise platforms to operate our business infrastructure:

  • Squarespace: Website hosting, infrastructure, and form intake management.

  • Google Workspace & Google Calendar: Secure email communication, document management, and consultation scheduling.

These third-party providers process data in accordance with their respective privacy standards and strict confidentiality obligations. We may also disclose information if required to comply with applicable federal, state, or legal frameworks, or to protect our intellectual property and legal rights.

4. Data Security

As a cybersecurity consultancy, we apply rigorous administrative, technical, and physical safeguards to protect all client communications, proprietary scoping data, and personal information against unauthorized access, alteration, disclosure, or destruction.

5. Your Data Rights

Depending on your jurisdiction, you may have the right to request access to, correction of, or deletion of any personal data we hold regarding your inquiries. To submit a data privacy request, contact us directly at billy@karmacybersecurity.com.

6. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our operational practices, legal requirements, or service offerings. Any revisions will be posted directly to this page with an updated effective date.

7. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out to us at: