Privacy Policy

1. What we collect

We only collect information that helps us deliver your assessment, report, or follow-up services. That usually includes:

• Business contact details — your name, business email, phone number, company name, and industry.
• Assessment answers — the responses you give in the custom questionnaire we build for your engagement.
• Technical basics — standard browser and device data used to keep the site secure and working.

1a. The free readiness scorecard

The free 20-point cybersecurity and HIPAA readiness scorecard works differently, and deliberately collects as little as possible:

• Your individual answers stay in your browser. They are held in page memory only, are never transmitted to us, and are discarded when you close the page or restart the scorecard.
• If you request a summary by email, we store only your overall score, readiness level, broad priority categories, first name, work email, and any optional business name, organization type, and employee range you provide, along with your consent status and a timestamp.
• We never ask for sensitive information — no patient information, protected health information, passwords, credentials, system configurations, or incident details. Please do not send them to us.
• Analytics. Individual answers, email addresses, business names, and free text are never sent to analytics. Only anonymous events such as “scorecard completed” may be recorded.

Requesting your results is a transactional message you asked for. Optional cybersecurity tips are sent only if you tick the consent box, and every one of those emails includes an unsubscribe link. Scorecard lead records are retained until you ask us to remove them.

2. How assessment data is stored

Your questionnaire answers and reports are handled directly by BabsTech and stored in access-controlled systems. Only BabsTech staff working on your engagement can see them, and we share your report with no one else.

3. Do we share your data?

We do not sell your information. We only share it with trusted service providers that make the site work:

• Email and hosting partners — to deliver report emails, run the site, and store data securely.

These providers are bound by their own privacy commitments and are only allowed to use your data for the service they are performing for us.

4. How long we keep it

We keep your engagement data and reports for as long as needed to support your security program. If you ask us to delete your information, we will remove it within a reasonable time, unless we are required to keep it by law.

5. Your deletion rights

You can request deletion of your contact details, questionnaire answers, and reports at any time by emailing us at musah.issah@babstech.org. We will confirm the request and let you know once the data has been removed.

6. Questions?

If you have any questions about this policy or how your data is handled, contact us at musah.issah@babstech.org or through our Contact page.