Privacy Policy

1. Introduction

CMMC Ready Now ("CMMC Ready Now," "we," "us," or "our") provides CMMC 2.0 readiness, assessment, and managed compliance services to defense contractors, aerospace firms, manufacturers, and other organizations in the defense industrial base. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit cmmcreadynow.com (the "Site"), request a consultation, or engage us for professional services.

We take privacy seriously because our clients trust us with sensitive compliance, assessment, and security information. This policy reflects that responsibility.

2. Information We Collect

We collect information in three ways: information you provide directly, information collected automatically when you use the Site, and information we receive from third parties in the course of delivering our services.

3. How We Use Information

We use the information we collect to:

• Respond to inquiries, schedule consultations, and deliver the services you request.
• Conduct gap assessments, prepare deliverables, and manage ongoing compliance engagements.
• Operate, secure, and improve the Site and our service offerings.
• Send transactional communications such as scheduling confirmations, engagement updates, and invoices.
• Send marketing communications where permitted, which you can opt out of at any time.
• Comply with legal obligations, enforce our agreements, and protect our rights and the rights of our clients.

4. Sensitive Client Data

CMMC Ready Now does not process Controlled Unclassified Information (CUI) through public-facing forms on this Site. Client information shared during engagements is handled under a signed services agreement with confidentiality obligations, role-based access controls, and environment safeguards aligned to NIST SP 800-171 practices. If your engagement involves CUI, we will use dedicated secure channels specified in your statement of work.

5. Sharing and Disclosure

We do not sell personal information. We share information only in the following circumstances:

• With service providers who host the Site, process payments, send email, or support our operations, under contractual confidentiality and security requirements.
• With assessors, auditors, or C3PAOs when you expressly engage us to coordinate certification activities on your behalf.
• When required by law, legal process, subpoena, or governmental request, or to protect the rights, property, or safety of CMMC Ready Now, our clients, or others.
• In connection with a merger, acquisition, financing, or sale of assets, subject to customary confidentiality protections.

6. Cookies and Analytics

The Site uses essential cookies to function and may use analytics cookies to understand traffic and usage patterns. You can control cookies through your browser settings. Disabling cookies may affect how the Site performs.

7. Data Retention

We retain information for as long as needed to provide the services you requested, comply with our legal and contractual obligations, resolve disputes, and enforce our agreements. Engagement records are retained in line with professional services standards and applicable tax and contract requirements. When information is no longer needed, we delete or de-identify it.

8. Security

We maintain administrative, technical, and physical safeguards designed to protect the information we hold, including access controls, encryption in transit, logging and monitoring, and periodic reviews of our practices. No system is perfectly secure, and we encourage you to use strong passwords and secure channels when transmitting sensitive information.

9. Your Choices and Rights

You may request access to, correction of, or deletion of personal information we hold about you, and you may opt out of marketing communications at any time by using the unsubscribe link in our emails or contacting us directly. Depending on where you live, you may have additional rights under applicable state or national privacy laws. We will honor verified requests to the extent required by law.

10. International Visitors

The Site is operated from the United States. If you access the Site from outside the United States, you understand that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

11. Children’s Privacy

The Site is intended for business users and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can remove it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above and, where appropriate, provide additional notice. Your continued use of the Site after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

Questions, requests, or concerns about this Privacy Policy can be directed to:

CMMC Ready Now 1019B Edwards Ferry Rd. #1183 Leesburg, VA 20176 Email: info@cmmcreadynow.com Phone: (571) 410-3066