// Legal
This policy covers how Siege Table Security LLC collects, uses, and protects information on siegetable.com. It is written in plain language. If something is unclear, contact us directly.
Last updated: June 2025
who we are
Siege Table Security LLC is a cybersecurity services company operating at siegetable.com. We provide incident response tabletop exercises and security posture assessments. Questions about this policy can be directed to ethan@siegetable.com.
information we collect
This website does not use tracking cookies, advertising pixels, or third-party analytics scripts. We do not run Google Analytics, Meta Pixel, or similar tools.
When you submit our contact form, we receive the information you provide - name, email address, company, and message. This information is used solely to respond to your inquiry. It is not sold, shared, or used for marketing to third parties.
Cloudflare provides DNS and hosting infrastructure for this site. Cloudflare may log basic request metadata (IP address, browser type, page requested) for security and performance purposes under their own privacy policy. We do not have access to or control over that data.
engagement data
Environment data collected during paid engagements - host inventories, control configurations, gap analysis inputs, and related operational details - is governed by the engagement agreement, not this website privacy policy.
Our practices for engagement data are described in detail on the Transparency page. The short version: engagement data is deleted at engagement close and is never retained, aggregated, or shared.
data retention
If you contact us and we do not enter into an engagement, your contact information is retained only for the duration of the conversation and deleted thereafter. If we enter into an engagement, we retain your name, email, and company name for billing and recordkeeping purposes. We do not retain message content beyond active correspondence.
third parties
We do not sell personal information. We do not share personal information with third parties for marketing purposes. The only third-party infrastructure involved in operating this website is Cloudflare (hosting and DNS) and Google (contact form via Google Forms). Both operate under their own privacy policies.
your rights
If you have contacted us and want your information deleted, email ethan@siegetable.com with the request. We will confirm deletion within five business days.
If you are located in the European Union or United Kingdom, you may have additional rights under GDPR or UK GDPR including the right to access, correct, or port your data. Contact us to exercise those rights.
changes to this policy
If we make material changes to how we collect or use information, we will update the "Last updated" date at the top of this page. We will not retroactively apply new data practices to information collected under prior terms.