1. Introduction
GuidePoint takes privacy seriously and understands that you care about how your personal information is collected and used. This website privacy policy (“Privacy Policy“) explains how GuidePoint Security LLC and its affiliates (collectively “GuidePoint,” “we“, “us”, or “our“) processes personal information that we collect through our websites (including www.guidepointsecurity.com), through social media, when you attend Events (defined below) in connection with our sales, marketing and other offline activities, when you submit a job application to GuidePoint and through other activities described in this Privacy Policy (collectively, for the purposes of this Privacy Policy, our “Services“). It also tells you how you can exercise your rights and choices with respect to your personal information, and how you can contact us about our privacy practices.
Please note that if you attend or provide information in connection with any events, webinars, training programs, and conferences we host or sponsor (“Events“), our Event Privacy Notice will apply as well (and govern in the event of any conflict between this Privacy Policy and our Event Privacy Notice).
This Privacy Policy applies when GuidePoint acts as a “controller” of your personal information (i.e., when we determine the purposes and means of processing your personal information). This Privacy Policy does not apply to GuidePoint’s provision of professional services to its clients, which is governed by the applicable service agreement between GuidePoint and the client.
2. Information We Collect
We collect only the personal information that is reasonably necessary for the purposes described in this Privacy Policy. We do not intentionally collect sensitive personal information (such as racial or ethnic origin, health data, biometric data, or precise geolocation) unless required for a specific, disclosed purpose and not prohibited by applicable law.
The personal information we collect depends on how you interact with us, the Services you use, your choices (including privacy settings), and applicable law. We may collect the following categories of information:
2.1. Information You Provide Directly
2.2. Information We Collect Automatically. When you use our Sites, Services, or interact with our digital communications, we automatically collect certain information about your device and how you use our Services. This includes device and online identifiers such as your IP address, device ID, browser type and version, operating system, device name, unique identifiers, and advertising IDs. We also collect usage data including the pages you visit, features you use, links you click, time spent on pages, referring URLs, search queries, date and time of access, and your interaction patterns. Based on your IP address, we may collect approximate location information such as your city or region. We gather analytics data about how you interact with our Sites, Services, emails, and advertisements, as well as cookie data collected through cookies and similar tracking technologies (see Section 5 for more details on cookies).
2.3. Information from Third Parties. We may collect information about you from other sources to assist us in operating our business. These sources include business partners such as joint marketing partners, event co-sponsors, and channel partners. We also receive information from data providers including lead generation services such as LinkedIn Sales Navigator and ZoomInfo, marketing analytics providers, and publicly available sources. When you interact with our social media pages, we may collect information from your social media profiles. If you apply for a position with GuidePoint, we may receive information from professional networks such as LinkedIn or Indeed, as well as from recruitment agencies during the hiring process. For Events, we may receive contact and registration information shared by our Event partners, sponsors, and co-hosts. Where permitted by law, we may also receive employment verification and background check information from background check providers.
3. How We Use Your Information
3.1. Providing Services and Events. We use your personal information to operate, maintain, and provide our Sites, Services, and Events. This includes processing registrations for Events, webinars, and training programs, providing customer support and responding to inquiries, and fulfilling your requests for information or consultations. We may also send service-related communications and updates. Please see our Event Privacy Notice for more details on how we use your personal information to organize, host, and manage Events. We may also use your personal information to analyze trends and behavior to improve our Sites, Services, and Events.
3.2. Marketing and Communications. We use your personal information to send promotional communications about our Services, Events, and offerings in accordance with your preferences and applicable law. This includes providing tailored marketing content and recommendations, conducting marketing research and analyzing campaign effectiveness, and inviting you to participate in surveys, webinars, or Events hosted by GuidePoint or our partners.
3.3. Employment and Recruitment. We use your personal information to evaluate job applications and make hiring decisions. This includes conducting reference and background checks where permitted by law, communicating with applicants about opportunities, managing our recruitment process and maintaining candidate records, and complying with equal employment opportunity requirements. For certain positions requiring government security clearances or access to sensitive client environments, we may collect additional identity verification information, such as citizenship documentation, as required by applicable law or contractual obligations.
3.4. Security. We use your personal information to ensure the security and integrity of our Sites, Services, and systems. This includes detecting, investigating, and preventing fraud, security incidents, and illegal activities, verifying activity, protecting against misuse or abuse of our Services, and enforcing our terms and conditions.
3.5. Legal Compliance. We use your personal information to comply with legal obligations, court orders, and regulatory requirements. This includes responding to lawful requests from public authorities, establishing, exercising, or defending legal claims, and protecting our rights, property, and safety, and those of our users and the public.
3.6. Business Operations. We use your personal information to manage vendor and partner relationships, conduct data analysis and reporting, and maintain records and perform accounting and tax functions.
4. How We Share Your Information
We may share your personal information with the following categories of recipients:
4.1. Affiliates. We disclose the information we collect from you to our affiliates or subsidiaries.
4.2. Service Providers. We share personal information with third-party vendors who perform services on our behalf, including cloud infrastructure and hosting providers, customer relationship management (CRM) and marketing automation platforms, email and communication service providers, event management and registration platforms, background check and recruiting services, information technology support, and professional advisors (lawyers, accountants, auditors). These service providers are contractually obligated to use your personal information only for the purposes of providing services to us and to implement appropriate security measures.
4.3. Business Partners. We may share personal information with our business partners in certain circumstances. When you register for or attend Events co-hosted or sponsored by third parties, we may share your registration information with those partners, and we will clearly identify co-sponsors at the time of registration. We also share information with joint marketing partners, which are companies with whom we conduct joint marketing activities, as well as with channel partners and resellers who help us deliver our Services.
4.4. Legal and Regulatory Authorities. We may disclose personal information when required by law or when we believe in good faith that disclosure is necessary to comply with legal obligations, court orders, or regulatory requirements, or to respond to lawful requests from government authorities. We may also disclose personal information to enforce our terms and conditions, protect our rights, property, or safety, or those of our users or others, and to detect, prevent, or address fraud, security, or technical issues.
4.5. Business Transfers. If (i) we or our affiliates are or may be acquired by, merged with, or invested in by another company, or (ii) if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may transfer the information we have collected from you to the other company. As part of the business transfer process, we may share certain of your personal information with lenders, auditors, and third-party advisors, including attorneys and consultants
4.6. With Your Consent. We may share your personal information with other parties when you direct us to do so or consent to such sharing.
4.7. Aggregated Data. We may share aggregated, de-identified, or anonymized information that cannot reasonably be used to identify you for any lawful business purpose.
5. Cookies and Tracking Technologies
We and our third-party service providers use cookies and other tracking mechanisms to track information about your use of our Site or Services. Cookies are alphanumeric identifiers that we transfer to your device’s hard drive through your web browser for record-keeping purposes. Some cookies allow us to make it easier for you to navigate our Site and Services, while others may allow us to track your activities at our Site and Service.
We use several types of cookies on our Sites and Services. Strictly necessary cookies are essential for the operation of our Sites and Services. Functional cookies enable enhanced functionality and personalization. Analytics and performance cookies help us understand how visitors use our Sites. You can manage your cookie preferences through our cookie consent tool or your browser settings. Please note that disabling certain cookies may limit your ability to use some features of our Sites.
Because there is no consistent industry standard for responding to Do Not Track signals, we do not currently respond to browser Do Not Track signals.
6. Data Security and Retention
We implement appropriate technical, administrative, and physical security measures designed to protect your personal information against unauthorized access, use, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
We retain your personal information only for so long as reasonably necessary for the purposes described in this Privacy Policy or as required by applicable law. When personal information is no longer needed, we securely delete or de-identify it in accordance with our internal data management practices.
7. Your Privacy Rights and Choices
7.1. Opt-Outs. Regardless of your location, you may opt out of marketing emails by clicking the “unsubscribe” link in any promotional email or by contacting us. Please note that even if you opt out of marketing communications, we may still send you service-related messages. You can manage cookie preferences through our cookie consent tool or your browser settings.
7.2. State Rights. Depending on your state of residence, you may have additional rights under applicable privacy laws. These rights may include the right to access, correct, or delete your personal information, the right to opt out of targeted advertising or the sale/sharing of personal information, and the right to appeal a denial of your request. To exercise any state privacy rights, please contact us using the information in Section 14 below.
7.3. Additional Rights for California Residents. If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):
To exercise any of your privacy rights, please contact us using the information in Section 14 below.
8. International Data Transfers
GuidePoint is headquartered in the United States. Your personal information will be processed and stored in the United States. If you are located outside the United States, please be aware that data protection laws in the United States may differ from those in your jurisdiction. By using our Services, you acknowledge the transfer of your personal information to the United States.
9. Children’s Privacy
Our Sites and Services are not directed at children under the age of 16. We do not knowingly collect personal information from children under 16 through our Sites. If we learn that we have collected personal information from a child under 16 without appropriate parental consent, we will delete that information as quickly as possible. If you believe we may have collected information from a child under 16, please contact us immediately at [email protected]. If a child under 16 attends an Event, any personal information collected will be limited to what is necessary for Event administration and will be handled in accordance with applicable law.
10. Third-Party Websites and Services
Our Sites may contain links to third-party websites, services, or applications that are not operated or controlled by GuidePoint Security. This Privacy Policy does not apply to such third-party sites or services. We encourage you to review the privacy policies of any third-party sites or services before providing them with your personal information. We are not responsible for the privacy practices or content of third-party sites.
11. Job Applicants
If you apply for a job with GuidePoint, we collect and process information necessary to evaluate your application and manage our recruitment process. This may include:
• Resume, cover letter, and application materials
• Contact information
• Employment and education history
• References and background check information (where permitted by law)
• Interview notes and assessments
• Voluntary demographic information for equal employment opportunity purposes
We use this information to evaluate your qualifications, make hiring decisions, communicate with you about your application, verify your eligibility to work, conduct reference and background checks (with your consent where required), and comply with legal obligations. If you are not selected for a position, we may retain your information to consider you for future opportunities unless you request deletion. You can opt out of future consideration by contacting us at [email protected] or by writing to us at the address in Section 14.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting a notice on our Sites, sending you an email notification (if you have provided your email address) and/or other appropriate means as required by applicable law.
The “Last Updated” date at the bottom of this Privacy Policy indicates when it was last revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
Your continued use of our Sites or Services or attendance at Events after we post changes constitutes your acceptance of the updated Privacy Policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, or if you wish to exercise any of your privacy rights (including rights to access, correct, or delete your personal information), please contact us at [email protected] or write to us at: GuidePoint Security LLC, Attn: Privacy Team, 1900 Reston Metro Plaza, Suite 701, Reston, Virginia 20190.
We will respond to verified requests within the timeframes required by applicable law (typically 45 days, with a possible extension if needed). To protect your privacy and security, we may verify your identity before fulfilling your request by asking for information such as your name, email address, and other details to confirm your identity.
If we deny your request, you may appeal our decision by contacting us using the methods above, and we will respond to your appeal within the timeframe required by applicable law.
Last Updated: July 1, 2026
