Privacy Policy

PHENGOS Advisory Group

Effective Date: November 6, 2026

1. Introduction

PHENGOS Advisory Group ("PHENGOS," "we," "our," or "us") is an independent advisory firm specializing in cybersecurity, artificial intelligence security and governance, enterprise risk management, regulatory assurance, and operational resilience.

We recognize that privacy, confidentiality, and information security are fundamental to establishing and maintaining trust. As an organization advising clients on complex security and governance challenges, we are committed to handling personal information responsibly, transparently, and in accordance with applicable legal and contractual requirements.

This Privacy Policy explains how PHENGOS collects, uses, protects, retains, and discloses personal information obtained through our website, www.phengosag.com, and related business communications.

By using our website, you acknowledge that you have been provided with this Privacy Policy.

2. Information We Collect

We may collect personal information through the following methods:

Information You Provide Voluntarily

When contacting PHENGOS, submitting an inquiry, requesting a consultation, or communicating with us, you may provide:

Full name and professional title
Business email address and telephone number
Organization name and industry
Business or regulatory requirements
Requested advisory services
Project timelines and engagement information
Messages, inquiries, and other information you voluntarily submit

Information Collected Automatically

When you visit our website, certain technical information may be collected through website infrastructure and enabled analytics tools, including:

Internet Protocol (IP) address
Browser type and device information
Operating system
Pages visited and website interactions
Referral sources
Approximate geographic location derived from technical information
Cookies and similar technologies

Professional and Business Information

When establishing or maintaining a business relationship, we may collect professional contact information, relevant correspondence, contractual information, and other information reasonably necessary to evaluate or deliver advisory services. We ask that visitors avoid submitting passwords, confidential security configurations, protected health information, controlled unclassified information, or other highly sensitive information through our public website forms.

3. How We Use Personal Information

PHENGOS may use collected information for legitimate business purposes, including:

Responding to inquiries and consultation requests
Evaluating prospective client engagements
Communicating about requested advisory services
Preparing proposals and contractual documentation
Managing professional relationships
Delivering authorized consulting and advisory engagements
Operating, maintaining, and improving our website
Evaluating website performance and user experience
Protecting our systems against unauthorized access, fraud, or misuse
Maintaining business records and satisfying applicable legal obligations
Sending business updates or marketing communications where permitted by law and applicable preferences

We use personal information only for purposes reasonably connected with our business activities or as otherwise disclosed at the time of collection.

4. Cybersecurity, Artificial Intelligence, and Client Confidentiality

PHENGOS recognizes that cybersecurity and AI governance engagements may involve sensitive business information, security assessments, system documentation, risk analyses, or confidential organizational data. Information provided during formal advisory engagements is governed by applicable engagement agreements, confidentiality obligations, and any additional data protection or security requirements agreed upon with the client.We encourage clients to use approved, appropriately secured communication and information-sharing methods when transmitting sensitive engagement materials.

Any processing of client information using third-party technology, including AI-enabled systems, must be consistent with applicable contractual obligations, confidentiality commitments, and governing legal requirements.

This website Privacy Policy does not replace any separate nondisclosure agreement, data processing agreement, or client-specific information security obligations.

5. Website Hosting and Third-Party Service Providers

Our website is hosted using the Wix platform. Wix provides website infrastructure and may support functions such as website hosting, contact forms, content management, security, and site analytics.

Depending on the services PHENGOS enables, personal information may also be processed by providers supporting:

Business email and communications
Website hosting and maintenance
Contact forms and inquiry management
Website analytics
Appointment scheduling
Professional services administration
Secure document management
Billing and payment processing, where applicable

We may disclose information to service providers when reasonably necessary to operate our business, subject to applicable contractual and legal safeguards. Third-party providers process information according to their respective responsibilities, agreements, and privacy practices.

For additional information about Wix's data practices, visit https://www.wix.com/about/privacy.

6. Cookies and Website Analytics

Our website may use cookies and similar technologies to support essential functionality, website security, performance monitoring, and analytics.

Cookies may include:

Essential Cookies: Necessary for website operations, security, and core functionality. Performance and Analytics Cookies: Used, when enabled, to understand website performance and visitor interactions. Functional Cookies: Used, where applicable, to remember visitor preferences and support enhanced functionality. Marketing Cookies: Used only where relevant marketing technologies have been enabled and applicable notice and consent requirements have been satisfied.

Visitors may manage cookies through browser settings and any cookie preference controls made available on the website. Disabling certain cookies may affect website functionality.

Where required by applicable law, PHENGOS will provide appropriate information and choices regarding non-essential cookies and similar tracking technologies.

7. Information Sharing and Disclosure

PHENGOS may disclose personal information in limited circumstances, including:

To authorized service providers supporting business operations
To professional advisors acting under appropriate confidentiality obligations
When reasonably necessary to deliver requested services
To comply with applicable laws, regulations, or valid legal processes
To investigate security incidents, suspected fraud, or misuse
To protect the rights, property, or safety of PHENGOS, our clients, or others
In connection with a lawful business transaction, subject to applicable privacy requirements

We do not disclose confidential client engagement information to unrelated third parties except as authorized, contractually permitted, or legally required. Personal Information Sales and Targeted Advertising.

8. Information Security

PHENGOS recognizes the importance of protecting personal and confidential information against unauthorized access, alteration, disclosure, loss, or destruction. We seek to apply appropriate administrative, technical, and organizational safeguards based on the nature of the information and relevant business risks.

These may include access management, authentication controls, secure communication methods, service provider oversight, and other appropriate security practices. Although we take information security seriously, no internet-based system or method of electronic transmission can be guaranteed to be completely secure.

9. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, support legitimate business requirements, resolve disputes, meet contractual obligations, or comply with applicable laws.

Retention periods may vary depending on the type of information, the nature of the business relationship, legal requirements, and applicable contractual commitments.

When information is no longer required, we seek to delete, anonymize, or otherwise dispose of it appropriately, subject to technical and legal limitations.

10. Your Privacy Rights and Choices

Depending on your location and applicable privacy laws, you may have rights to:

Request access to personal information maintained about you
Request correction of inaccurate information
Request deletion of certain personal information
Request information about how your data is processed
Object to or restrict certain processing activities
Withdraw consent where processing relies on consent
Request a copy of information in an applicable portable format
Opt out of certain marketing communications or data processing activities

These rights are subject to applicable legal requirements, exemptions, and verification procedures.

We may request information reasonably necessary to verify your identity before responding to privacy-related requests.

To exercise applicable rights, contact PHENGOS using the contact information provided below.

11. International Privacy Considerations

PHENGOS is based in the United States and may interact with organizations and individuals located in other jurisdictions.

Where applicable, we seek to process personal information in accordance with relevant data protection obligations, including applicable U.S. state privacy laws and international data protection requirements.

For processing subject to the European Union or United Kingdom General Data Protection Regulation, our legal basis may include:

Performance of a contract or steps requested before entering a contract
Legitimate business interests, where permitted
Compliance with legal obligations
Consent, where required

Personal information may be processed or stored in the United States or other locations where authorized service providers operate.

Where legally required, PHENGOS will implement appropriate measures for international transfers of personal information.

12. Marketing Communications

PHENGOS may provide information about advisory capabilities, business announcements, educational resources, events, or relevant professional insights. Where applicable, recipients may unsubscribe from marketing communications using the instructions included in those messages or by contacting us. We will honor valid marketing preferences and opt-out requests in accordance with applicable law.

Communications necessary for an existing business relationship or requested service may continue where legally permitted.

13. Third-Party Websites and External Links

Our website may contain links to external resources, regulatory organizations, professional associations, social media platforms, or third-party websites. PHENGOS does not control the privacy practices, security arrangements, or content of independently operated third-party websites.

We encourage visitors to review the privacy policies of external services before providing personal information.

14. Children's Privacy

PHENGOS provides professional advisory services intended for businesses, institutions, and adult professionals. Our website is not directed toward children under the age of 13, and we do not knowingly solicit personal information from them. If we learn that information has been collected from a child in circumstances requiring deletion under applicable law, we will take appropriate steps to address the matter.

15. Changes to This Privacy Policy

PHENGOS may periodically update this Privacy Policy to reflect changes in our operations, website functionality, service providers, legal requirements, or information-handling practices. The effective date at the beginning of this document will indicate when the policy was last updated. Where required by law, we will provide additional notice of material changes. We encourage visitors to review this policy periodically.

16. Contact Information

For questions regarding this Privacy Policy, the handling of personal information, or applicable privacy rights, please contact:

Privacy Contact Email: privacy@phengosag.com

You may also contact us using the Contact form available on our website.

PHENGOS Advisory Group

Illuminate Risk. Assure Trust. Protect What Matters.