Privacy Policy
Effective October 14, 2026
The Verdyan Group (“Verdyan,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit verdyan.com, contact us, purchase services, or complete a Security Snapshot questionnaire.
1. Information we collect
Depending on how you interact with us, we may collect:
- Contact and business information: your name, email address, organization, job title, phone number, and information in messages or consultation requests.
- Snapshot and service information: questionnaire responses, business security and compliance details, and correspondence needed to provide requested services.
- Transaction information: product purchased, payment status, billing details, and transaction identifiers supplied by our payment processor. Full payment-card numbers are handled by the payment provider rather than submitted to our website forms.
- Technical information: IP address, browser and device information, timestamps, and website request logs that may be generated by hosting, security, and infrastructure providers.
2. How we use information
We use information to respond to inquiries, provide consultations and purchased services, prepare and deliver reports, administer payments, maintain website security, prevent misuse, meet legal obligations, and communicate about an existing inquiry or engagement. We may use information to improve our services and website. We do not sell personal information.
3. Security Snapshot questionnaires
Snapshot questionnaires are intended to gather organizational readiness information, not sensitive patient or consumer records. Please do not submit PHI, passwords, private keys, full payment-card details, or other highly sensitive personal data through a public questionnaire or contact form. If a future engagement requires sensitive information, we will discuss an appropriate process and contractual protections separately.
4. Payments and service providers
Payments are processed by Stripe, which collects and processes payment information under its own privacy practices. We may also rely on website hosting, cloud infrastructure, email delivery, domain/security, and communications providers to operate the website and deliver services. Providers may process information on our behalf or independently where necessary for their services. We disclose information to them only as reasonably needed for these purposes, and we may disclose information where required by law or to protect rights and security.
5. Cookies, analytics, and security logs
Our website and its infrastructure may use cookies or similar technologies needed for functionality, security, or payment processing. Third-party payment pages may use their own cookies. Technical logs may be recorded to maintain service and investigate security issues. If we introduce optional analytics or advertising technologies, we will update this policy and provide any legally required choices or notices.
6. Retention
We keep information for as long as reasonably necessary to respond to requests, deliver services, maintain business records, resolve disputes, enforce agreements, and comply with legal requirements. Retention periods vary by record type and legal obligation. We delete or de-identify information when it is no longer reasonably needed, subject to lawful exceptions.
7. Information security
We use reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information and services. No online system or transmission method can be guaranteed completely secure. Please avoid sending sensitive information through ordinary email or public forms unless an appropriate secure process has been agreed.
8. Your privacy choices and rights
You may contact us to request access to, correction of, or deletion of personal information we hold about you, or to ask questions about its use. We will respond in accordance with applicable law and may need to verify your identity. Certain information may need to be retained for legal, security, or business-record purposes. Depending on where you live, you may have additional rights under applicable privacy law.
9. International access
Verdyan operates in the United States. If you access our website from elsewhere, your information may be processed in the United States or other locations where our service providers operate, subject to applicable legal requirements.
10. Children's privacy
Our website and services are intended for business users and are not directed to children under 13. We do not knowingly collect personal information from children under 13 through this website. Contact us if you believe a child has provided such information.
11. External websites
Links to third-party websites are provided for convenience. Their privacy practices are governed by their own policies, not this one.
12. Changes to this policy
We may update this Privacy Policy as our services, technology, or legal obligations change. The effective date at the top indicates when the posted version took effect.
13. Contact us
For privacy requests or questions, email contact@verdyan.com or write to The Verdyan Group, 952 Winchester Rd, Suite 207, Lexington, KY 40505, United States.