Legal

Privacy Policy

This Privacy Policy describes how Forteris Risk and Compliance Group, LLC ("Forteris," "we," "us," or "our") collects, uses, and shares information when you visit forterisrisk.com (the "Site") or otherwise communicate with us.

Last updated: October 22, 2026

What changed on October 22, 2026

This version of the Privacy Policy makes these changes:

It describes the security cookies that our hosting provider places in your browser (Section 1.2).
It says that every page of the Site loads its typeface from Google Fonts, and what Google receives when your browser fetches it (Section 1.2).
Our earlier policy said that we do not combine the technical information collected when you visit the Site, such as your IP address, with information that identifies you. That statement now has an exception for inquiries you send through a form, which we keep with the inquiry attribution and your country (Section 1.2).
It explains how we use your IP address when you send a form, that we keep a separate record of it and of the time you sent the form, which we do not yet delete automatically, and that inquiries we received before this version may still be stored with the IP address they were sent from (Sections 1.2 and 5).
Our earlier policy said that we do not use that technical information "for marketing or advertising". It now says that we do not use it to market to you or to target advertising (Section 1.2).
It adds to the inquiry attribution the page on the Site from which you send a form (its full web address, including any query part, and, on a comparison page, the provider being compared), and a short tag for what brought the inquiry in, which we work out from that page (Section 1.2).
It corrects how the inquiry attribution was described. The record starts on the first page of the Site with a form that you open, not on the first page you visit, so the first page, the referring address and the date we record are those of that page; the referring address is the one your browser reported for that page, which can be a full web address, including that of another page of this Site, and not only the referring website; we record the date and time you first opened that page, not only the date; the campaign parameters are those in that page's web address or, if it had none, in that of the most recent later page with a form whose address had them; and we count the times you open or reload a page of the Site that has a form, not your visits (Section 1.2).
It adds to the purposes for which we use information understanding which pages and which campaigns lead people to contact us, which Section 1.2 already described, and prioritizing the inquiries we receive, for which we also use the inquiry attribution (Sections 1.2 and 2).
Our earlier policy said that we collect the information you provide directly solely to respond to your inquiry, evaluate a potential engagement, or correspond with you about our services. It now says that we use it only for the purposes in Section 2, which include those and prioritizing the inquiries we receive, and Section 2 now lists evaluating potential engagements (Sections 1.1 and 2).
It corrects what our earlier policy said about your choices: a content blocker may stop the analytics measurement but usually does not stop the attribution record, which our own page code writes, and a private or incognito window does not prevent the record but discards it when you close the window (Section 1.2).
Our earlier policy said that we use Cloudflare Web Analytics. It now says that we may use it and that its script measures page views only when it is turned on, and it describes the service in the terms Cloudflare itself uses, which replace our earlier summary of it (Section 1.2).
It adds what we receive from the free MSB check, including when you ask us to email your result (Section 1.3), and how a call you book through our online booking page is handled (Section 1.1).
It says that the AI service that helps prepare replies to inquiries also helps prepare follow-up emails (Section 3), and how many follow-up emails we may send and how to stop them (Section 1.1).

1. Information we collect

Forterisrisk.com is an informational website. We do not require account creation, we do not host transactional features, and we do not use cookies for advertising or third-party tracking. Our hosting provider does place security cookies in your browser; they are described in Section 1.2.

1.1 Information you provide directly

When you contact us by email, complete a form, or otherwise communicate with us, you may provide information such as your name, email address, employer, phone number, and the contents of your message. We use this information only for the purposes in Section 2, which include responding to your inquiry, evaluating a potential engagement, prioritizing the inquiries we receive, and corresponding with you about our services. If you send us an inquiry (other than a request to email your MSB check result, see Section 1.3) and do not answer our first reply, we may send you up to two short follow-up emails. To stop them, reply "no thanks" or write to us at [email protected], and we will not follow up again.

Booking a call. If you book a call through our online booking page, the booking is handled by the scheduling service that provides that page (Google), under its own privacy policy. We receive the details you enter there, such as your name, email address and the time you choose, and use them only to hold the call and correspond with you about it.

1.2 Information collected automatically

When you visit the Site, our hosting provider (Cloudflare) automatically collects limited technical information for the purpose of operating the Site and protecting it from abuse. This information may include your IP address, browser type, device type, the pages you visit, the time of your visit, and the referring URL. We do not use this information to market to you or to target advertising, and, except as described below for inquiries you send us through a form, we do not combine it with personally identifying information about you.

Fonts. Every page of the Site loads its typeface (Archivo) from Google Fonts, a service of Google. To display it, your browser fetches the typeface directly from Google's servers (fonts.googleapis.com and fonts.gstatic.com), unless it has a stored copy from an earlier visit. With each such request Google receives your IP address, your browser details (such as the browser's type and version) and, as the site that asked for the typeface, the address of our Site (the Site's address only, not that of the page you are viewing). We receive nothing from Google about these requests.

Security cookies. To protect the Site from automated abuse, Cloudflare also runs a security check script on each page. The check places cookies in your browser, for example one named cf_clearance, which holds the result of the check and can last up to a year, and it may keep a small amount of data in your browser's session storage while the tab is open. Cloudflare describes these cookies as strictly necessary for security. We do not use them for analytics or advertising, and our own code does not read them.

Site analytics. We may use Cloudflare Web Analytics to understand how the Site is used in aggregate, for example which pages are viewed most often and which websites refer visitors to us. When it is turned on, a small script from Cloudflare measures each page view using the performance information your browser provides. Cloudflare states that Web Analytics itself does not use cookies or other storage in your browser (the security cookies above are separate from it), does not "fingerprint" visitors by IP address, browser details or any other data for the purpose of displaying analytics, does not record the query part of web addresses, and does not collect or use visitors' personal data. We see aggregate figures only and cannot use them to identify you.

Inquiry attribution. If you submit an inquiry through a form on the Site, we record how you reached the first page of the Site with a form that you opened, and the page you contacted us from, so that we can understand which pages and which campaigns lead people to contact us and prioritize the inquiries we receive. This record is started the first time you open a page of the Site that has a form (such as the home page, a comparison page or the MSB check), not on pages without one. It consists of: any campaign parameters in the web address of that first page or, if it had none, in the web address of the most recent later page with a form that you opened whose address had them (for example a campaign source value or a search-advertising click identifier); that first page (its web address without the query part); the address your browser reported as having referred you to that first page (usually only the referring website, but it can be a full web address, including that of another page of this Site); the date and time you first opened that page; a running count of the times you have opened or reloaded a page of the Site that has a form; how long you spent on the page before submitting; and the page on the Site from which you sent the form (its full web address, including any query part, and, on a comparison page, the provider being compared), which we also record as a short tag for what brought the inquiry in. Apart from the time on the page and the page you sent the form from, which are worked out when you send it, this information is stored in your own browser's local storage. None of this information is transmitted to us unless and until you choose to submit a form, and it is first-party only: it is not shared with advertising networks and is not used to track you across other websites. Where you do submit a form, this information is retained alongside your inquiry in accordance with Section 5.

Your choices. You can erase the attribution record and the security cookies at any time by clearing your browser's cookies and site data for this domain, or browse in a private or incognito window, which discards them when you close it. When site analytics is turned on, a content blocker may stop its measurement, but it usually does not stop the attribution record, which our own page code writes. Disabling JavaScript stops the attribution record, the security check script and the cookies it places, and any analytics measurement. None of these is necessary to use the Site or to reach us: you may always contact us directly using the details in Section 12.

Form submissions. When you send us an inquiry through a form on the Site, we keep with it the country that our hosting provider (Cloudflare) associates with your connection. We also use your IP address when you send a form, to limit repeated submissions from the same IP address, and we may use it to check with Cloudflare that the submission is not automated. To enforce that limit we keep a separate record of your IP address (for an IPv6 address, only the part that identifies your network) and the time you sent the form. That record is not part of your inquiry, but it is held in the same system with a matching time, so the two could be linked. We do not yet delete these records automatically, so they are kept until we delete them; you can ask us to delete yours (see Section 7). We do not store your IP address in your inquiry itself. Inquiries we received before this version of this notice took effect may still be stored with the IP address they were sent from; we will remove it on request.

1.3 The free MSB check

The MSB check at forterisrisk.com/msb-check runs in your browser. Your answers and your result are not sent to us unless you choose to send them in one of the two ways below. Printing or saving your result, and downloading the calendar file of federal deadlines, happen in your browser and send nothing to us.

Discuss with Forteris. If you send the form under your result, we receive what you enter in it, your answers and your result, and the inquiry attribution, country and IP address described under Inquiry attribution and Form submissions in Section 1.2.
Email me my result. If you ask us to email your result, we receive your email address, your answers and your result, and the inquiry attribution, country and IP address described under Inquiry attribution and Form submissions in Section 1.2. We keep your email address, your answers and your result, with the inquiry attribution and your country, in our records of inquiries, use your email address, answers and result to email your result to you, and may reply to you about it. We do not keep your IP address with your request; it is used and recorded separately, as described under Form submissions in Section 1.2. Your email address is not added to a mailing list, and we do not send newsletters or a series of follow-up emails to it.

We use what you send through the MSB check only for the purposes in Section 2, and keep it as described in Section 5.

2. How we use information

We use the information described above only for the following purposes:

To respond to inquiries, evaluate potential engagements, and correspond with prospective clients;
To understand which pages of the Site and which of our campaigns lead people to contact us (see Inquiry attribution in Section 1.2), and to prioritize the inquiries we receive;
To evaluate and provide professional services we have been engaged to perform;
To operate, secure, and improve the Site;
To comply with legal, regulatory, and professional obligations; and
To exercise or defend legal claims as permitted by applicable law.

3. How we share information

Forteris does not sell, rent, or trade personal information. We may share information only in the following limited circumstances:

Service providers. We may share information with vendors who help us operate the Site or our practice (for example, our email provider, our hosting provider, our workplace messaging service, and an AI service that helps prepare replies and follow-up emails to inquiries, which a person reviews before any of them is sent; the emailed MSB check result is a fixed template and is not prepared by it). These providers are bound by confidentiality obligations.
Professional engagement. If we are engaged to provide services, information may be shared as necessary to perform that engagement, consistent with the terms of our engagement letter and applicable professional standards.
Legal compliance. We may disclose information if required by law, subpoena, court order, or governmental request, or to protect the rights, property, or safety of Forteris, our clients, or others.
Business transactions. Information may be transferred in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to standard confidentiality protections.

4. Confidentiality of professional inquiries

Inquiries made to Forteris in connection with a prospective or actual engagement are treated as confidential. However, the act of sending an unsolicited email to Forteris does not, by itself, create a professional engagement, fiduciary relationship, or any duty of confidentiality on Forteris's part. A confidentiality relationship is established only by written engagement letter or by mutual written agreement.

Forteris is not a law firm, and communications with us are not protected by attorney-client privilege. If you need privileged advice, please retain qualified legal counsel.

5. Data retention

Except as stated in Section 1.2 for the records of IP addresses and submission times kept for form submissions, and for the IP addresses still stored with inquiries we received before this version of this notice took effect, we retain information only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal and professional obligations, and to exercise or defend legal claims. Engagement records are typically retained in accordance with applicable professional record-retention standards and our internal records retention schedule.

6. Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect the information we collect. However, no method of transmission over the internet or method of electronic storage is fully secure, and we cannot guarantee absolute security. You communicate with us at your own risk; for sensitive information, please coordinate with us before transmission.

7. Your rights

Depending on where you reside, you may have rights regarding the personal information we hold about you, including the right to access, correct, or request deletion of certain information. To exercise these rights, please contact us at [email protected]. We will respond to verifiable requests within the time required by applicable law.

8. Children's privacy

The Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will promptly delete it.

9. Third-party links

The Site may contain links to third-party websites or services not operated by Forteris. We are not responsible for the content or privacy practices of those sites. We encourage you to review the privacy policies of any third-party site you visit.

10. International users

Forteris is based in the United States, and the Site is intended for users located in the United States. If you access the Site from outside the United States, you understand that your information may be transferred to, processed in, and stored in the United States, where data protection laws may differ from those in your jurisdiction.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be communicated through a prominent notice on the Site.

12. Contact us

Questions about this Privacy Policy or our privacy practices may be directed to:

Forteris Risk and Compliance Group, LLC
1489 W. Palmetto Park Road, Suite 5055
Boca Raton, FL 33486
[email protected]