Privacy, explained clearly.

Who we are and what this covers

Avermont Group ("Avermont," "we," "us," or "our") is a cybersecurity and digital protection business based in Pennsylvania, United States. This Privacy Policy explains how we handle personal information when you visit avermontgroup.com, contact us, schedule a consultation, inquire about services, apply for a position, or report a potential security incident through our public channels.

When we provide services under an agreement with a client, that engagement may involve additional privacy, confidentiality, or data-processing terms. This public policy does not replace those arrangements.

Information we receive

The information involved depends on how you interact with us:

• Contact and inquiries: Your name, email address, information you choose to share, and any correspondence you send.
• Consultation bookings: Your name, email, time zone, scheduled meeting details, and answers you provide to booking questions. Phone numbers may be collected if requested or voluntarily provided.
• Careers: Your contact details, selected role, professional background, application responses, and optional professional-profile links or other information you submit.
• Security incident reports: Your contact and organizational information, your description of suspected activity, affected assets, timing, perceived impact, and steps already taken. Reports can contain sensitive information even when not requested.
• Technical website information: Browsers, devices, IP addresses, referral information, pages requested, and related service or security logs may be handled by the website host and services used to operate the site.
• Payment and billing information: When Avermont uses Stripe for payments, we may receive contact and billing details, payment amounts and status, receipts, and limited payment-method details made available by Stripe. Stripe may collect additional transaction, authentication, and fraud-prevention information.

Please do not submit passwords, authentication codes, private keys, payment-card numbers, government identity documents, or confidential security evidence through ordinary booking, email, Discord, or public form fields. If further investigation requires sensitive records, our team will discuss an appropriate exchange method.

How we use information

We use relevant information to respond to inquiries, understand requested security needs, arrange and conduct meetings, evaluate job applications, review incident submissions, coordinate appropriately authorized services, manage billing and payments, maintain business records, handle payment-related inquiries or disputes, and protect against misuse or unauthorized activity. Where appropriate, we may also use correspondence to follow up on a request you made or communicate changes directly related to that request.

Information submitted for an incident report is intended for initial triage, contact, and follow-up. Submitting a report does not itself authorize access to a device or system, create a new service agreement, or establish immediate emergency monitoring.

Booking, forms, email and Discord

The website currently routes selected interactions through external services:

• Calendly: The Get a Quote consultation uses an embedded Calendly booking experience. Booking information is processed within the scheduling service and connected calendar or meeting tools.
• Cal.com: Careers scheduling uses Cal.com. Interview details and answers may be processed by that service and connected meeting or calendar providers.
• Tally: The Report an Incident route opens a Tally form. Avermont receives submitted information for review and follow-up. Tally states that form submissions are stored in Europe.
• Email: Messages sent to mgmt@avermontgroup.com are processed through the email services used by you and Avermont.
• Discord: If you follow our Discord link, Discord's own account and messaging practices apply. Do not post incident details or other confidential information in public Discord channels.
• Stripe: Avermont uses Stripe to process payments for services arranged during or after calls and meetings. Related payment steps take place separately from the public website's booking and incident forms.

These providers may collect device and usage data according to their own notices. You can read their respective privacy policies: Calendly, Cal.com, Tally, Stripe, and Discord.

When information may be shared

Information may be made available to authorized Avermont personnel and the services reasonably needed to host the website, send messages, manage bookings, evaluate applications, review incidents, process payments through Stripe, or carry out an authorized client engagement. Depending on the requested service and applicable agreement, appropriate technical service providers may receive information necessary to assist with delivery or investigation.

We may also disclose information when required by law, to respond to lawful requests, protect rights and safety, investigate misuse, or address suspected fraud. We do not treat a public incident report as permission to circulate its contents in public channels.

This policy does not identify confidential commercial relationships or authorize the disclosure of a client's confidential information outside applicable arrangements.

Storage, security and retention

We aim to limit collection and access to information appropriate for its intended purpose and to handle it with safeguards suited to the nature of the information. No website, email system, cloud service, or transmission method can be guaranteed completely secure.

We keep information for the time reasonably needed to address its purpose, administer relevant relationships, maintain necessary records, handle disputes, and comply with applicable obligations. The precise period depends on the type of record and the service involved. Third-party services also apply their own retention and deletion rules, and copies may remain in legally required records or backups for a period.

If you believe confidential information was submitted accidentally or a communication channel was compromised, contact us promptly using a safe method.

Cookies and similar technologies

Site infrastructure and third-party scheduling or form services may use cookies, local storage, or similar browser technologies for operation, security, preferences, diagnostics, or measuring how their services are used. Embedded booking content is loaded when you open the applicable booking window; third-party services can apply their own browser storage practices.

You can adjust cookie and site-data settings in your browser. Blocking certain storage may interfere with scheduling or other external features. Where applicable law requires consent for optional technologies, those technologies should be configured to respect that requirement. This policy does not replace any consent controls required for technology actually enabled on a deployed website.

Payments and financial information

Avermont uses Stripe to process payments for services arranged during or after calls, meetings, and direct client discussions. The public website does not currently contain a self-service checkout. Payment arrangements and payment steps may be handled separately through Stripe. We do not ask visitors to enter payment-card details in booking forms, job applications, incident reports, or public Discord channels.

When payments are processed, Stripe may collect the payer's name, contact and billing information, payment-method details, transaction amount and date, device information, and related data for processing, authentication, fraud prevention, and legal compliance. Avermont may receive transaction records and limited payment-method information needed to confirm payments, manage billing, address client inquiries, and handle refunds or disputes when applicable. Stripe processes information under its own privacy practices. Read Stripe's Privacy Policy.

Please do not send complete card numbers, verification codes, or other payment credentials through ordinary email, Discord, booking questions, or incident forms. This Privacy Policy describes information handling; pricing, payments, cancellations, and refunds are governed by the applicable client agreement and transaction terms.

Your privacy choices and requests

You may request information about personal data you submitted, ask that inaccurate information be corrected, or request deletion where applicable. You can also ask questions about how information is processed or withdraw optional communications where that choice is offered. Certain information may need to be retained for legitimate operational, security, contractual, or legal reasons.

Send privacy requests to mgmt@avermontgroup.com with the subject Privacy Request. Please do not send identification documents or passwords in an initial request. We may take reasonable steps to verify that a request concerns your own information. We will respond in accordance with applicable law.

Additional rights may apply depending on your residence, how your information is processed, and which privacy laws apply to Avermont's operations. We do not represent that every jurisdiction's privacy law applies to every visitor.

International processing

Avermont is based in Pennsylvania. Some services used for bookings, forms, communications, and related operations may process or store information in other U.S. states or countries. For example, Tally describes European storage for form submissions. Where international data-transfer rules apply, those arrangements must satisfy the relevant legal requirements.

Children and family inquiries

This website's contact, careers, and incident-reporting interfaces are intended for adults or persons authorized to communicate on behalf of an organization or family. The website is not directed to children under 13. If a parent or guardian contacts us about a family security concern, they should provide only the information necessary for an initial conversation and should avoid entering a child's sensitive details into general inquiry fields.

Changes to this policy

We may revise this Privacy Policy as our website, services, vendors, or legal obligations change. The effective date at the top of this page indicates the version currently posted. Material changes may warrant additional notice where required by law.

Contact Avermont Group

Avermont Group
Pennsylvania, United States
mgmt@avermontgroup.com
avermontgroup.com

For suspected security incidents, use the dedicated Report an Incident page. Privacy requests sent by email are not a substitute for incident reporting or an emergency response channel.