Privacy Policy
Last Updated: February 6, 2026
Introduction
Anvil Group Security ("we," "our," or "us") is committed to protecting your privacy with the highest standards of confidentiality and discretion. As a provider of elite executive protection and close protection services, we understand that privacy and confidentiality are not just legal obligations but core values central to our business.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website anvilgroupsecurity.com and submit consultation requests through our contact form. This policy applies to website visitors and individuals inquiring about our services. Actual security service engagements are governed by separate confidential service agreements and non-disclosure agreements.
Information We Collect
Information You Provide Directly
When you submit our contact form to request a confidential consultation, we collect:
- Name (required)
- Email address (required)
- Phone number (optional)
- Company/Organization (optional)
- Protection Requirements (required) - This may include sensitive information such as:
- Nature of protection services needed
- Travel dates and destinations
- Event details and locations
- Residential security needs
- Specific security concerns or threats
We recognize that the information you provide in consultation requests may be highly sensitive. All inquiries are treated with strict confidentiality from the moment they are submitted.
Information Collected Automatically
When you visit our website, minimal technical information is automatically collected through our hosting infrastructure:
- IP address (for security purposes only)
- Browser type and version
- Device information
- Pages visited and access times
What We Do NOT Collect:
- We do NOT use analytics tracking (no Google Analytics, no Facebook Pixel, etc.)
- We do NOT use advertising cookies or third-party tracking
- We do NOT collect browsing behavior data for marketing purposes
- We do NOT share visitor data with advertising networks
Our approach to data collection reflects our commitment to discretion. We only collect what is necessary to provide you with our security services.
How We Use Your Information
We use the information we collect solely to:
- Respond to your consultation requests and security inquiries
- Assess your protection requirements and provide accurate service quotes
- Communicate with you about potential security service engagements
- Maintain basic website security and prevent abuse
- Comply with legal obligations when required by law
We explicitly DO NOT use your information for:
- Building marketing lists or databases
- Selling or renting your information to third parties
- Sharing with unrelated business partners
- Profiling or behavioral advertising
- Unsolicited marketing communications
Third-Party Services
We use minimal third-party services to operate our website. We carefully select service providers that meet rigorous security and privacy standards.
FormSubmit.co (Form Processing)
Contact form submissions are processed by FormSubmit.co, a simple form forwarding service that securely transmits your consultation request directly to our business email. FormSubmit.co acts purely as a secure email forwarder and does not store your form data long-term or integrate with marketing or CRM systems.
We deliberately chose a minimal form forwarding service rather than a marketing platform to align with our commitment to discretion and minimal data collection. Your inquiry is simply forwarded as an email without unnecessary storage or processing.
FormSubmit.co's privacy policy is available at https://formsubmit.co/privacy.pdf
Hosting Infrastructure
Our website is hosted on US-based infrastructure that maintains SOC 2 Type II compliance, ensuring industry-leading security controls and privacy protections. This includes encryption in transit (SSL/TLS) and at rest, regular security audits, and strict access controls.
As security professionals ourselves, we hold our technology partners to the same rigorous standards we maintain for our own operations.
We do not use customer relationship management (CRM) systems, marketing automation platforms, or other third-party services that would store or process your consultation inquiries beyond the simple email forwarding described above.
Client Confidentiality Commitment
Confidentiality is not just a policy at Anvil Group Security - it is fundamental to who we are and how we operate.
- Inquiry Confidentiality: All consultation requests submitted through our website are treated as strictly confidential from the moment of receipt. Your decision to explore executive protection services is kept private.
- Client Identity Protection: We never disclose client identities, client lists, or the fact that any individual or organization has engaged our services without explicit written consent.
- No Public Testimonials: We do not publish client testimonials, case studies, or client references without advance written authorization.
- Service Agreements: When consultation inquiries progress to actual security service engagements, those relationships are governed by comprehensive service agreements that include robust confidentiality provisions and, where appropriate, mutual non-disclosure agreements.
- Operational Discretion: Our commitment to discretion extends to all aspects of our operations. We understand that for many clients, the mere fact that they have engaged executive protection services is sensitive information.
This privacy policy addresses website inquiries. Active security service engagements are protected by significantly more comprehensive confidentiality agreements tailored to each client's specific needs and risk profile.
Data Security
Security is our business, and we apply the same rigorous standards to protecting your digital information as we do to protecting our clients physically.
Technical Security Measures:
- Encryption: All data transmitted to and from our website is protected by SSL/TLS encryption (HTTPS)
- Secure Email: Consultation requests are forwarded to secure email systems with end-to-end encryption capabilities
- SOC 2 Compliance: Our hosting infrastructure maintains SOC 2 Type II certification, demonstrating rigorous security controls
- Access Controls: Strict limitations on who can access consultation inquiries
- Regular Security Assessments: Ongoing evaluation of security measures and vulnerabilities
Organizational Security Measures:
- Limited personnel access to consultation requests
- Confidentiality training for all team members
- Secure handling procedures for sensitive information
- Regular review of data protection practices
While we implement robust security measures and work only with security-conscious technology partners, no method of electronic transmission or storage is 100% secure. However, as security professionals, we take data protection as seriously as we take physical protection and continuously work to maintain the highest standards.
Data Retention
We retain your personal information only as long as necessary for legitimate business purposes or as required by law.
- Consultation Requests: Retained only for the duration of our business relationship or as long as necessary to respond to your inquiry. If you do not engage our services, your information is retained for a limited time and then deleted.
- Right to Deletion: You may request deletion of your consultation inquiry at any time by contacting us. We will promptly delete your information unless we have a legal obligation to retain it.
- Server Logs: Basic technical logs (IP addresses, access times) are retained for security purposes only and are typically deleted within a short period.
- Service Relationships: For clients who engage our security services, data retention is governed by separate service agreements.
Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of any inaccurate or incomplete information
- Deletion: Request deletion of your personal information (subject to legal retention requirements)
- Objection: Object to our processing of your personal information
- Data Portability: Request transfer of your information to another service provider
- Withdraw Consent: Withdraw consent for processing where we rely on your consent
To exercise any of these rights, please contact us at mgaboni@anvilgroupsecurity.com or (831) 245-7710 . We will respond promptly to all requests.
International Data Transfers
Executive protection services often involve international travel and cross-border operations. Your information may be transferred to and processed in countries other than your country of residence, particularly the United States where our operations are based.
When we transfer personal information internationally, we ensure compliance with applicable data protection laws and implement appropriate safeguards to protect your information, including:
- Use of secure, encrypted communication channels
- Contractual protections with service providers
- Compliance with international data protection frameworks
- SOC 2 certified infrastructure with global security standards
Legal Disclosure
While we are deeply committed to client confidentiality, there are limited circumstances where we may be legally required to disclose information:
- When required by valid court order or legal process
- When necessary to comply with applicable laws or regulations
- When necessary to protect the safety, rights, or property of Anvil Group Security, our clients, or the public
- In connection with the investigation of illegal activities or threats
In any such circumstances, we carefully evaluate the scope of the legal requirement and disclose only the minimum information necessary to comply. Where legally permissible, we will notify affected individuals of such disclosures.
Cookies and Tracking
Our website uses minimal cookies, primarily for essential functionality such as navigation and security.
Types of Cookies We Use
- Essential cookies: Required for basic website functionality and navigation
- Security cookies: Used to maintain website security and prevent abuse
What We Do NOT Use
- Analytics cookies (no Google Analytics or similar services)
- Advertising cookies or pixels
- Social media tracking cookies
- Third-party marketing or behavioral tracking
You can control cookies through your browser settings. Note that disabling essential cookies may affect basic website functionality.
Children's Privacy
Our website and services are not intended for individuals under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately and we will promptly delete such information.
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: What personal information we collect, use, disclose, and sell
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Opt-out of the sale of personal information
- Right to Non-Discrimination: Equal service and pricing regardless of privacy choices
Important: We do NOT sell your personal information to third parties.
To exercise your California privacy rights, contact us at mgaboni@anvilgroupsecurity.com
European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, you have rights under the General Data Protection Regulation (GDPR):
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Rights related to automated decision-making and profiling
Our legal basis for processing your personal information includes:
- Consent: When you voluntarily submit a consultation request
- Legitimate interests: For basic website security and responding to inquiries
- Contract performance: When providing security services you have requested
- Legal obligations: When required to comply with applicable laws
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational needs. We will notify you of any material changes by posting the updated Privacy Policy on this page with a new "Last Updated" date.
For significant changes that materially affect your rights or our data practices, we may provide additional notice such as an email notification (if we have your email address) or a prominent notice on our website.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, we encourage you to contact us. Privacy and confidentiality questions are always welcome.
For confidential consultation requests about our security services, please use the contact form on our website.
This Privacy Policy is effective as of February 6, 2026. By using our website and submitting information through our contact form, you acknowledge that you have read and understood this Privacy Policy.