The short version
We collect the minimum we need to deliver your assessment package: your email, your company details, and your questionnaire answers. We never sell your data. And because your assessment answers describe your security posture, we treat them with a level of care beyond a typical web form - that gets its own section below.
Your consent
By using level1ready.com, purchasing our product, or submitting any form on this site, you acknowledge that you've read and agree to this Privacy Policy and our Terms of Service. If you don't agree, please don't use the site.
Information you provide
- Quick-check email and answers - if you take the free 5-question check and request your breakdown, we receive your email address, your five answers, and your grade.
- Purchase information - at checkout you provide your name, business name, and email. Payment details go directly to Stripe; we never see, handle, or store your card number.
- Assessment questionnaire responses - your company details and your answers about how your business handles the 15 Level 1 requirements. This is the information we use to build your gap report, policies, and evidence checklist.
- Support emails - anything you send to support@level1ready.com.
Your assessment answers deserve their own section
Your questionnaire responses describe your company's security posture, including its gaps. We use them for exactly one purpose: producing your deliverables. We don't sell them, share them, use them in marketing, or aggregate them into published statistics. Access is limited to the people producing your package. If you want them deleted after your package is delivered, email support@level1ready.com and they're gone within 30 days.
Information collected automatically
We use Vercel Web Analytics to understand site usage - pages visited, general geography, and anonymous interaction events (like completing the quick check). It's a privacy-focused tool that doesn't use cookies and doesn't track you across other sites (details).
We also run Google Ads, which may place cookies to measure whether ad clicks lead to purchases (conversion tracking). This data improves our advertising and is governed by Google's Privacy Policy. You can opt out of personalized advertising at Google Ads Settings.
How we use your information
- To deliver the product you purchased - your gap report, remediation plan, policies, evidence checklist, and SPRS walkthrough
- To send your quick-check breakdown and, if you requested it, a short email series about Level 1 compliance (every message has an unsubscribe link)
- To send purchase confirmations and respond to support requests
- To process refunds within our 14-day refund policy
- To measure site usage and ad performance in aggregate
We do not sell, rent, or share your personal information with third parties for their marketing purposes. Ever.
Third-party services
- Stripe - payment processing (privacy policy)
- Formspree - form submissions, including quick-check and assessment responses (privacy policy)
- Vercel - website hosting and privacy-focused analytics (privacy policy)
- Google Ads - advertising and conversion tracking (privacy policy)
Each operates under its own privacy policy. We pick services with industry-standard security practices, but we're not responsible for their independent privacy practices.
Cookies
The only cookies on this site come from Google Ads conversion tracking, as described above. Our analytics (Vercel) is cookieless. Most browsers let you block or manage cookies in settings; blocking them won't break the site.
Data retention
We keep your purchase records and delivered documents as long as needed to support you (including honoring the refund window and re-sending your package if you lose it), and as required for legal and accounting purposes. Assessment answers are deleted on request within 30 days. Quick-check emails are removed when you unsubscribe or on request.
Data security
All site traffic runs over HTTPS, payment data lives exclusively with Stripe, and access to your information is limited to the people producing and supporting your package. No internet transmission is 100% secure, and we can't guarantee absolute security - but we've kept the number of places your data lives deliberately small.
Your rights
You can request access to, correction of, or deletion of your personal information at any time, and withdraw consent for optional processing. Email support@level1ready.com and we'll respond within 30 days.
California residents
Whether or not the CCPA/CPRA formally applies to a business of our size, we honor its spirit for everyone: we'll tell you what we hold about you, delete it on request, and we don't sell or share personal information as those laws define it.
Children
This service is for businesses and is not directed at anyone under 18. We don't knowingly collect information from minors.
Changes to this policy
If we change this policy - for example, when we automate delivery and add an email provider - we'll update this page and the date at the top. Material changes to how we handle assessment answers will be called out plainly, not buried.
Contact
Questions about this policy: support@level1ready.com