Privacy Policy & Service Disclaimer

Last updated: January 2026

Privacy Policy

What information we collect

When you submit an intake form on this website, we collect the information you provide: your name, business name, email address, phone number (if given), website URL, business type, employee count, email platform, and any notes you include about your security concerns.

We do not automatically collect tracking data, use third-party analytics, or place advertising cookies on this site.

How we use your information

• To conduct your Security Snapshot engagement as scoped
• To communicate with you about your engagement
• To confirm scope, deliver your report, and schedule any walkthrough calls

We do not use your information for marketing, do not add you to email lists without your consent, and do not share or sell your information to third parties.

How we store and protect your information

Intake form submissions are transmitted over HTTPS. We store engagement information securely and retain it only as long as necessary to complete your engagement and maintain reasonable business records. We apply appropriate technical safeguards to information in our custody.

Your rights

You may request access to, correction of, or deletion of the personal information we hold about you at any time by contacting us at the address below. We will respond within a reasonable time.

Third-party services

This website may use Google Fonts (loaded from Google's servers) for typography. No other third-party services that collect personal data are embedded in this site by default. If you use a scheduling or booking tool linked from this site, that tool's privacy policy applies to information submitted there.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last updated" date above. Continued use of this site after changes constitutes acceptance of the updated policy.

Service Disclaimer

Nature of the Security Snapshot

The Small Business Security Snapshot is an informational review only. It is not a penetration test, vulnerability assessment, red team exercise, compliance certification (including but not limited to SOC 2, HIPAA, PCI-DSS, FTC Safeguards Rule, or IRS Publication 4557 compliance), or legal advice.

Scope and limitations

Findings in the Security Snapshot represent a point-in-time assessment based on publicly available information, automated scan results, read-only review of provided system access, and your responses to the intake questionnaire. The review is not exhaustive and does not constitute a guarantee that all vulnerabilities, misconfigurations, or risks have been identified.

• The Security Snapshot does not include active exploitation or penetration testing of any kind
• External scan results are limited to information available from outside your network perimeter
• Findings are accurate as of the date of the review and may change as your environment changes
• The review does not assess all possible threat vectors or attack surfaces

No guarantee of security

Bunny Capital LLC does not guarantee that following the recommendations in the Security Snapshot report will prevent all security incidents, data breaches, or compliance violations. No security review or assessment can provide such a guarantee. Cybersecurity risk cannot be eliminated — only managed.

No legal or compliance advice

Information provided in connection with the Security Snapshot, including any references to regulatory requirements such as the FTC Safeguards Rule or IRS Publication 4557, is for informational purposes only and does not constitute legal advice. Consult qualified legal counsel for advice specific to your compliance obligations.

Liability

Bunny Capital LLC's liability in connection with the Security Snapshot service is limited to the fees paid for the engagement. Bunny Capital LLC is not responsible for any actions taken or not taken based on the findings or recommendations in the report, or for any security incidents that occur before, during, or after the engagement.

Confidentiality

We treat all client information as strictly confidential. A scope and exclusions letter provided at the start of each engagement governs the specific confidentiality terms of that engagement.

Contact

For privacy requests, questions about this policy, or any legal inquiries:

Bunny Capital LLC
hello@bunnycapitalsecurity.com
(Replace with your actual contact email before going live.)