Legal
Privacy Policy
This policy describes what information craftcs.com collects, why it is collected, and how it is handled.
Last updated: 2026-09-18
Who we are
Craft Consulting Solutions, LLC (“we,” “us,” “our”) is a cybersecurity consulting firm based in Idaho, United States. This policy applies to the website at craftcs.com.
Information we collect
Information you provide
When you submit the consultation request form, we collect the information you enter: your name, company, business email address, optional phone number, the service you are interested in, your desired timeframe, and the description you provide.
Please do not submit credentials, confidential technical detail, sensitive security findings, or personal data about third parties through the website form.
Information collected automatically
Our web server records standard request information, including IP address, request time, requested URL, HTTP status, referring page, and user agent. This information is used to operate the site, diagnose faults, and apply abuse and rate-limiting controls.
Cookies
This site does not use advertising, analytics, or tracking cookies. A single short-lived, same-site cookie is set when you interact with the consultation form; it exists solely to provide cross-site request forgery protection for that submission and is not used to identify or track you across sites.
Third-party tracking
We do not embed third-party analytics, advertising networks, social media trackers, or third-party fonts or scripts on this website.
How we use information
- To respond to your inquiry and discuss potential engagements.
- To prepare scoping information and proposals you request.
- To operate, secure, and troubleshoot the website.
- To comply with legal obligations.
We do not sell personal information, and we do not share your inquiry with third parties for their own marketing purposes.
Service providers
We use a small number of service providers to operate the website and deliver email, including our hosting provider and our email provider. These providers process information on our behalf and are not permitted to use it for their own purposes.
Retention
Inquiry information is retained for as long as needed to respond and to maintain records of business communications, and is deleted when it is no longer needed for those purposes. Server logs are retained for a limited operational period.
Security
The website is served over HTTPS, applies standard security response headers, and validates and rate-limits form submissions. No method of transmission or storage is completely secure, but information is handled with controls appropriate to its sensitivity.
Your choices
You may request access to, correction of, or deletion of the information you submitted to us. Contact us through the form on our contact page and describe your request. Depending on where you live, you may have additional rights under applicable privacy law.
Children
This website is intended for business use and is not directed to children under 16. We do not knowingly collect information from children.
Changes to this policy
We may update this policy from time to time. The revision date at the top of this page reflects the most recent change.
Contact
Questions about this policy can be submitted through our contact page.