Privacy Policy

Privacy Policy

 

Effective Date: August 3, 2026

1. Introduction

At The Access Control Collective ("we," "us," "our"), accessible via https://www.tacc.me, we are committed to protecting your privacy. This Privacy Policy outlines how we collect, use, share, and protect your personal information.

2. Information We Collect

a. Information You Provide to Us

We may collect the following information through forms or interactions on our website, membership platform, or The Secured Collective community platform:

  • Name
  • Email address
  • Company name
  • Job title (if applicable)
  • Content or profile information you post within The Secured Collective
  • Any additional information you choose to provide

This includes information submitted via our contact page, when downloading gated content such as whitepapers, or when registering for an event.

b. Information Collected Automatically

When you browse our website, we may automatically collect certain information such as:

  • IP address
  • Browser type and version
  • Device identifiers
  • Referring/exit pages
  • Usage statistics and analytics via cookies and third-party tracking tools

3. Use of Information

We use the collected information to:

  • Respond to inquiries or support requests
  • Provide you with content, updates, or resources
  • Improve our website functionality and user experience
  • Analyze trends and monitor site performance
  • Facilitate lead generation or follow-up communications related to downloaded content or event registrations
  • Deliver membership communications, including onboarding emails, The Secured Brief newsletter, and Secured Collective community updates, which you opt in to receive by creating a membership account. These communications are distinct from general marketing emails. You may opt out of individual communications at any time; because these communications are part of the membership service itself, opting out of all membership communications requires cancelling your membership.

4. International Users and Applicable Regulations

We operate primarily in the United States and our website is hosted and administered from Maryland. However, we recognize that our members and contacts may be located in other jurisdictions. We are committed to handling your data in accordance with applicable law, including:

GDPR (European Union/UK): If you are located in the EU or UK, you have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing. Our lawful basis for processing is generally legitimate interest or, where required, consent. To submit a request, contact hello@tacc.me.

CAN-SPAM Act (United States): All marketing emails include an unsubscribe mechanism. We honor opt-out requests promptly. Essential membership communications are opt-in, you agree to receive them when you create a membership account, and are not treated as marketing emails; they will continue following an unsubscribe from general marketing but can be stopped by cancelling your membership.

CCPA (California): California residents have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal data. We do not sell personal data. To submit a request, contact hello@tacc.me.

We do not transfer personal data outside the United States except as necessary to operate our platform (for example, via cloud-based service providers). Where such transfers occur, we take reasonable steps to ensure appropriate protections are in place.

Other Jurisdictions: Our community includes members located outside the US, EU, UK, and California. We aim to respect data protection rights beyond those enumerated above, including under laws such as Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Australia's Privacy Act, and Brazil's Lei Geral de Proteção de Dados (LGPD). If you believe local law entitles you to protections not reflected here, contact hello@tacc.me and we will address your request in accordance with applicable law.

5. Sharing of Information

We do not sell your personal information. However, we may share your information with third parties in the following limited scenarios:

a. Content and Event Co-Sponsors

If you download content we have created in partnership with a third party, or register for an event we co-host or sponsor (including but not limited to Night of Access or other partner activations), we may share your name, email, and company details with that content or event partner for their own marketing and outreach purposes. Their use of your information will be governed by their own privacy policy. You will be notified at the point of download or registration when a resource or event is co-sponsored and data sharing applies.

b. Service Providers

We use third-party platforms and services — including Kajabi (our membership and community platform), a separate billing platform used for corporate memberships, Stripe (our payment processor), an email delivery platform, and analytics tools — that process data on our behalf under confidentiality agreements.

c. PhySecJobs.com

Our job board, PhySecJobs.com, collects information from both job seekers and employers, including names, email addresses, company details, and resume or posting content. This information is used to facilitate connections between candidates and hiring organizations. Data submitted through PhySecJobs.com is governed by this Privacy Policy. Employer and candidate contact information may be shared with the other party as part of the normal function of the job board.

6. Cookies and Tracking

We use cookies and similar technologies to personalize your experience, track user behavior, and improve our site. You may control cookie settings via your browser.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the data we hold about you
  • Request correction or deletion
  • Object to or restrict certain processing
  • Withdraw consent for marketing communications

To exercise your rights, please contact us using the details below.

8. Data Security and Retention

We take reasonable technical and organizational steps to protect your data. Account information (name, email, billing history) is retained for up to 12 months following account cancellation for recordkeeping purposes, after which it is deleted. Messages and contributions posted to The Secured Collective or other community features may remain visible after cancellation per our Terms of Use. Personal data is otherwise retained only as long as needed for its intended purpose or as legally required.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Revisions will be posted on this page with an updated effective date.

10. Contact Us

If you have questions about this Privacy Policy or your data rights, please contact us via the Connect page or email hello@tacc.me.

Secured Lee Odess ACS Events Ready Shoot Aim