Privacy Policy

1. Who We Are

Sentinel Resilience ("we," "us," or "our") operates the website sentinelresilience.co (the "Site"). We provide confidential personal risk assessment and advisory services to established individuals and families. You can reach us through our contact page at sentinelresilience.co/contact.

2. Information We Collect

We collect the following categories of information:

• Identity data: your first name (and last name if provided for advisory inquiries).
• Contact data: your email address and, if you provide it, your phone number.
• Assessment data: your answers to the 40-question Sentinel Resilience Assessment questionnaire, your computed pillar scores, your overall preparedness score, and the resulting deficiency analysis.
• Inquiry data: the advisory tier you expressed interest in and any message you include with your inquiry.
• Contact message data: the subject and body of any message you send through our Contact page.
• Technical data: your IP address (retained for rate-limiting purposes only, not linked to your identity profile).

We do not collect payment card details on this Site. Payment processing, where applicable, occurs through secure third-party processors.

3. How We Use Your Information

We use your information for the following purposes:

• To compute and deliver your personalized scored assessment report via email.
• To follow up on advisory service inquiries you submit.
• To respond to messages you send through the Contact page.
• To maintain aggregate, anonymized analytics about assessment results (e.g., average scores by pillar) for internal quality improvement.
• To protect the Site from abuse (rate limiting, spam filtering).

We do not use your information for advertising, do not sell your data, and do not share your data with third parties except as described in Section 5.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area, our legal bases for processing your personal data are:

• Contractual necessity: processing required to deliver the scored report you requested.
• Legitimate interests: responding to inquiries, preventing abuse, and improving our service.
• Consent: where you have explicitly agreed to receive communications from us.

5. Third-Party Services

We use the following third-party services which may receive limited personal data in order to function:

• Resend (resend.com): email delivery provider. Your name and email address are transmitted to Resend solely to deliver transactional emails (your assessment report, inquiry confirmations, and contact acknowledgements). Resend does not use this data for its own marketing purposes.
• Replit: cloud infrastructure provider hosting this Site and its database. Data is stored on Replit's secure infrastructure.

We use Google Analytics only if you choose 'Accept' on the analytics notice. Nothing loads before you choose, your choice is stored on your device, and you can change it at any time. We do not use Meta Pixel or any advertising tracker, and your questionnaire answers, scores, and results are never sent to Google Analytics.

6. Data Retention

We retain your assessment data and inquiry data for a period of three years from the date of submission, or until you request deletion, whichever comes first. Contact messages are retained for one year. We may retain anonymized, non-identifiable aggregate data indefinitely for analytical purposes.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate data.
• Erasure: request deletion of your personal data.
• Restriction: request that we limit how we process your data.
• Data portability: request your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Opt-out of sale (CCPA): we do not sell personal data, so no opt-out is required. California residents may still submit a "Do Not Sell" request for completeness.

To exercise any of these rights, submit your request through our contact page at sentinelresilience.co/contact. Please include your full name, email address, and a description of the right you wish to exercise. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Assessment answers and scores are held in a private database that is not publicly accessible. This site is served over HTTPS. Access to raw data is restricted to the founder.

9. Children's Privacy

This Site is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our Site, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated to users who have submitted their email address. Continued use of the Site after any change constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us through our contact page at sentinelresilience.co/contact.