Privacy Policy

Information We Collect

This Privacy Policy covers proactiverisk.com and proactivegrc.com, together with forms, communications, and services that link to this policy. Proactive Risk Inc. (“Proactive Risk,” “we,” “us,” or “our”) collects information you provide directly, such as your name, company, role, email address, phone number, mailing address, and the details of a request or inquiry.

We may also collect technical and usage information, including IP address, browser and device details, pages viewed, referral information, approximate location, and information from cookies or similar technologies. Service providers may provide information needed for hosting, analytics, communications, scheduling, and security operations.

How We Use Your Information

We use personal information to operate and improve our websites; respond to questions; schedule CyberAdvisor™ conversations; deliver requested governance, risk, and compliance resources; provide CyberAdvisor™ advisory services; communicate about an engagement; understand website performance; protect systems, people, and clients; comply with law; and establish, exercise, or defend legal claims. We use information only for purposes reasonably necessary and compatible with the relationship or described at collection.

SMS Messaging Program

SMS messaging program: By opting in to receive text messages from Proactive Risk, you agree to receive account-related and customer-care messages (for example: responses to your inquiries, scheduling, and follow-ups) at the phone number you provided. Message frequency may vary. Message and data rates may apply. Reply STOP at any time to unsubscribe; after you send STOP, we will confirm your opt-out and send no further messages. Reply HELP for help, or contact us at tomb@proactiverisk.com. Carriers are not liable for delayed or undelivered messages.

Sharing Your Information

We may share information with service providers and professional advisers that process it for us, with a successor involved in a business transaction, or when disclosure is reasonably necessary to comply with law, a valid legal request, or a safety and security need. These parties receive only the information reasonably needed for the stated purpose and are expected to protect it.

Proactive Risk does not sell personal data for monetary consideration. We do not knowingly process personal data for targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects.

Security

We use administrative, technical, and physical safeguards appropriate to the nature of the information, including access controls and measures designed to protect confidentiality, integrity, and availability. No transmission or storage system can be guaranteed completely secure. Please do not send passwords or unnecessary sensitive information through a public form.

Children's Privacy

Our websites and services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can review and delete it where appropriate.

Your Rights (including NJ privacy rights)

For personal data within the scope of the New Jersey Data Privacy Act, including the 2026 requirements associated with NJ A5328, New Jersey residents may have the right to confirm whether we process their personal data, access it, correct inaccuracies, delete it, obtain a portable copy, and opt out of the sale of personal data, targeted advertising, or profiling in furtherance of decisions that produce legal or similarly significant effects. You may also withdraw consent where processing is based on consent and appeal a decision about a privacy request.

• Submit a request by calling (973) 298-1160. Include enough information for us to verify and respond to the request.
• We will verify requests using information reasonably necessary for security and will not discriminate against you for exercising a privacy right.
• If we deny a request, we will explain the basis and how to appeal. If an appeal remains unresolved, you may contact the New Jersey Division of Consumer Affairs as permitted by applicable law.

Changes to This Policy

We may update this policy when our practices, services, or legal obligations change. This version is effective September 13, 2026 and has been updated for New Jersey Data Privacy Act (NJ A5328) 2026 compliance. The effective date in the header identifies the current version.

Contact Us

Questions, privacy requests, and appeals should be directed to: Proactive Risk Inc., 36 First Avenue, Suite 203, Denville, NJ 07834; phone (973) 298-1160.